HA between a Cisco ASA 5520 and a Cisco ASA 5525-X

Hi all!
we have a couple of Cisco ASA 5520 running 8.4(3) software, and we want to improve throughput changing them with a couple of Cisco ASA 5525-X. Since software is theorically compatible, we are not going to upgrade it right now.
We don't want to stop service, so we are thinking about switching off backup 5520 firewall, change it with a 5525-X and balance service to that one while we change the other 5520 fw. So the question is, has someone tried to make an active-pasive cluster with both technologies, Cisco ASA an Cisco ASA-X firewalls? We were said that it should be theorically compatible, but we'd like to know if someone tried before.
Best regards for all,

You cannot make a 5520 establish failover with the mate being a 5525-X.
1. The configuration guide (here) states:
The two units in a failover configuration must be the same model, have the same number and types of interfaces, the same SSMs installed (if any), and the same RAM installed.
2. A 5525-X requires 8.6 software. 8.6 does not support non-X series ASAs. (Reference) Even if you wait until 9.0 is available (next month) for both you still fail on the model and RAM (X series has much more than the 5520) checks noted above.

Similar Messages

Difference between Photosmart 5520 and 5524?

Hi,
I'm potentially going to purchase one of the HP printers listed above but I'm a little confused, they're both the same series and have apparently exactly the same spec, but model numbers are different?
In Currys too, they're £10 apart but one comes with extra sets of ink?
If anyone has any answers I'd love to hear them.
Thanks.
This question was solved.
View Solution.

Hey Callumh003,
HP has made several different models of the same base design. The Photosmart 5520 and Photosmart 5524 are the same printer model, however what comes in the box is the difference. Similarly, there is a Photosmart 5522 in some regions and the difference is also what comes in the box from the base Photosmart 5520.
I hope this helps to clarify.
Jason
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------
I am not an HP employee.

VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client

Hello,
I have problem in VPN between ASA5505 Easy VPN Server and 881G Router as Easy VPN Client. ASA 5505 have 7.2.3 software and 881G router have 15.1 software.
881G is configured as hardware client in network exstention mode, and it is placed behind NAT. ASA5505 is working as server. Same VPN Group works correctly from VPN software clients.
When I send traffic from 881G client side, in show cryto sessin detail I see encrypted packets. But with same command I dont see decrypted packet on ASA5505 side. On both devices Phase 1 and Phase 2 are UP.
VPN is working when I replace ASA5505 with ASA5510 correctly with have 8.4.6 software. But problem is that i need to do this VPN between ASA5505 and 881G.
Can you help me, how can I debug or troubleshoot this problem ?
I am unable to update software on ASA5505 side.

Hello,
Hire is what my config look like:
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 40 set pfs
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 60 set pfs
crypto dynamic-map outside_dyn_map 60 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 80 set pfs
crypto dynamic-map outside_dyn_map 80 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 100 set pfs
crypto dynamic-map outside_dyn_map 100 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 120 set pfs
crypto dynamic-map outside_dyn_map 120 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 140 set pfs
crypto dynamic-map outside_dyn_map 140 set transform-set ESP-AES-128-SHA
crypto dynamic-map outside_dyn_map 160 set pfs
crypto dynamic-map outside_dyn_map 160 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 180 set pfs
crypto dynamic-map outside_dyn_map 180 set transform-set ESP-3DES-SHA
crypto dynamic-map outside_dyn_map 200 set pfs
crypto dynamic-map outside_dyn_map 200 set transform-set ESP-AES-256-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 2
authentication pre-share
encryption 3des
hash sha
group 1
lifetime 86400
crypto isakmp policy 3
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
tunnel-group HW-CLIENT-GROUPR type ipsec-ra
tunnel-group HW-CLIENT-GROUP general-attributes
address-pool HW-CLIENT-GROUP-POOL
default-group-policy HW-CLIENT-GROUP
tunnel-group HW-CLIENT-GROUP ipsec-attributes
pre-shared-key *******
group-policy HW-CLIENT-GROUP internal
group-policy HW-CLIENT-GROUP attributes
password-storage enable
split-tunnel-policy tunnelspecified
split-tunnel-network-list value cisco_splitTunnelAcl
nem enable

Two separate L2L tunnels between same two ASA

I have a large MPLS fully meshed network with two main locations, both of which have an ASA with internet access as well as the MPLS access. I need to be able to provide a backup connection between the two main locations in the event one of the MPLS links to one or the other goes down.
I am considering using a L2L IPSEC tunnel between the two ASA's but the interesting traffic for the tunnel is different depending on which of the links is down and there fore I would need two different tunnels. I have my servers and remote desktop servers at one of the main sites and the other main site has another organization attached to it externally that the servers must be able to access.
Is there a way of creating two separate L2L tunnels between the two ASA's? Could I perhaps assign two public IP addresses to each of the ASA's and then create the tunnels between different endpoints on each ASA?
Does anyone have another possible solution to the problem?
Gene

You should be able to do what you want using IP SLA. Please see this excellent blog post which documents one way to accomplish it.
Hope this helps.

Installation of wildcard certificate on Cisco ASA 5525-X (9.1(3))

Hello
I would very much appreciate your help in regards to installation of a wildcard certificate on our Cisco ASA 5525-X.
Setup:
We have two Cisco ASA 5525-X in a active/passive failover setup. The ASA is to be used for AnyConnect SSL VPN. I am trying to install our wildcard certificate on the firewall, but unfortunately with no luck so far. As a bonus information, I previously had a test setup (Stand alone ASA 5510 - 8.2(5)), where I did manage to install the certificate. I do believe I am performing the same steps, but still no luck. Could it be due to that I am running a failover setup now and didn't previously or maybe that I am running different software versions? Before you ask, I've tried to do an export on the test firewall (crypto ca export vpn.trustpoint pkcs12 mysecretpassword) but this actually also failed (ERROR: A required certificate or keypair was not found) even though the cert was imported successfully and is working as it should in the lab.
Configuration in regards to certificate:
crypto key generate rsa label vpn.company.dk modulus 2048
crypto ca trustpoint vpn.trustpoint
keypair vpn.company.dk
fqdn none
subject-name CN=*.company.dk,C=DK
!id-usage ssl-ipsec
enrollment terminal
crl configure
crypto ca authenticate vpn.trustpoint
! <import intermediate certificate>
crypto ca enroll vpn.trustpoint
! <send CSR to CA>
crypto ca import vpn.trustpoint certificate
! <import SSL cert received back from CA>
ssl trust-point vpn.trustpoint outside
Problem:
When I try to import the certificate I receive the following error:
crypto ca import vpn.trustpoint certificate
WARNING: The certificate enrollment is configured with an fqdn
that differs from the system fqdn. If this certificate will be
used for VPN authentication this may cause connection problems.
Would you like to continue with this enrollment? [yes/no]: yes
% The fully-qualified domain name will not be included in the certificate
Enter the base 64 encoded certificate.
End with the word "quit" on a line by itself
-----BEGIN CERTIFICATE-----
<certificate>
-----END CERTIFICATE-----
quit
ERROR: Failed to parse or verify imported certificate
Question:
- Does any one of you have any pointers in regards to what is going wrong?
- Especially in regards to fqdn and CN, I also have a question. My config
fqdn none
subject-name CN=*.company.dk,C=DK
would that be correct? I've read online, that fqdn has to be none, and CN should be *.company.dk when using a wildcard certificate. However when I generate the CSR and also when I try to import the certificate, I receive the following warning: "The certificate enrollment is configured with an fqdn that differs from the system fqdn. If this certificate will be used for VPN authentication this may cause connection problems".
So do you have insight or pointers which might help me?
Thank you in advance

I also have a wildcard cert for my SSL VPN ASAs.
When i import the cert I use ASDM instead of CLI...
I import the wildcard as a *.pfx file and type in the password. works fine...
Perhaps the format is incorrect?
Also, my "hostname.domain.lan" does not match my "company.domain.com" fqdn domain but it still works. I only apply this wildcard cert to the outside interface not inside.
Not sure if this helps but give ASDM a try?

%SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46.....

Hi Guys,
Iam seeing above issue on two of my switches connected to core switch ....i know there are quite of few discussion open on same issue but mine is diff....
i see same issue on two switches connected via core swicth on same vlan ( 112)....when i do mac address lookup it says the mac thats generating this error is invalid so cant track the source of this mac....also just saw on topoogy change notification on core traced it back to originating switch which is also generating this error but dnt see any change on the switch that is generated topology change notification....prob is vlan 112 all interface on both switches conected via core are generating this message so five interfaces each .....any expert advise on how to approach it as i cant get to source port generating this as nearly five ports in vlan 112 on bloth switches generating this error. thanks
Apr 15 15:56:08: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
Apr 15 15:56:50: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 15:56:51: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
Apr 15 15:58:29: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 15:59:27: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
Apr 15 15:59:45: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 16:00:14: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa3/0/46
Apr 15 16:00:36: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 16:02:40: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
Apr 15 16:03:22: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
Apr 15 16:03:31: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
Apr 15 16:04:03: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa3/0/46 and port Gi3/0/1
Apr 15 16:04:34: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 16:04:41: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa2/0/46
Apr 15 16:05:05: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Fa2/0/46 and port Gi3/0/1
Apr 15 16:05:13: %SW_MATM-4-MACFLAP_NOTIF: Host 00ff.ffff.ffff in vlan 112 is flapping between port Gi3/0/1 and port Fa3/0/46
sh spanning-tree vlan 112
VLAN0112
Spanning tree enabled protocol rstp
Root ID Priority 8192
 Address 001e.13c1.5a70
 Cost 3004
 Port 109 (GigabitEthernet3/0/1)
 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 49264 (priority 49152 sys-id-ext 112)
 Address 001f.261c.1d80
 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
 Aging Time 300
UplinkFast enabled but inactive in rapid-pvst mode
Interface Role Sts Cost Prio.Nbr Type
Fa2/0/46 Desg FWD 3019 128.104 P2p
Fa1/0/46 Desg FWD 3019 128.50 P2p
Gi3/0/1 Root FWD 3004 128.109 P2p
Fa3/0/46 Desg FWD 3019 128.158 P2p
Fa3/0/47 Desg FWD 3100 128.159 P2p
Fa3/0/48 Desg FWD 3019 128.160 P2p

ASAK Mohammed,
There are lots of thread discussing about this, you should do a search before creating a new post.
Anyway, this is how you approach these types of flapping:
1. Is the the given MAC flapping in the log flapping only 1 time or you see it multiple times over a reasonobly short time?
 If you see it only once or once every 2-3 hours this might be not an issue worth being investigated. Sporadic one time flapping are expected in L2 broadcast domain.
If you see it often continue to step 2.
2. Identify and locate the flapping mac in vlan 125: 3270.990a.a504
Is the mac of a dual-homes server using some kind of load balancing algorithm (active/active) for which the same address is used from both NICs?
If yes, the message is not and issue but just an indication. Fix this type of LB (make it active/standby or make sure the server uses 2 different mac addresses, one per NIC) or if it is not possible leave it like this.
3. Is the MAC a the wireless NIC of a PC?
Make sure that the user was not moving from one AP to another (flapping is normal in this case)
4.
See if you have increasing TCN's and check if they are coming from the same interface.
From this point on you keep on troubleshooting STP until you find the offending link (likely going up and down) or the switch. You also need to check if STP in vlan112 is coherent with the actual L2 topology you have.
=====================================================
2- Some more details information which might be helpfull to you.
http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note09186a
00801434de.shtml#subtopic1k
Problem
The switch generates %SYS-3-P2_ERROR: Host xx:xx:xx:xx:xx:xx is flapping
between ports? messages, where xx:xx:xx:xx:xx:xx is a MAC address.
Description
This example shows the console output that you see when this error occurs:
%SYS-4-P2_WARN: 1/Host 00:50:0f:20:08:00 is flapping between port 1/2 and port
4/39
Use the steps and guidelines in this section in order to understand and
troubleshoot the cause of this error message.
The message indicates that your Catalyst 4500/4000 switch has learned a MAC
address that already exists in the content-addressable memory (CAM) table, on
a port other than the original one. This behavior repeatedly occurs over short
periods of time, which means that there is address flapping between ports..
If the message appears for multiple MAC addresses, the behavior is not normal.
This behavior indicates a possible network problem because the MAC addresses
move quickly from one port to another port before the default aging time. The
problem can be looping traffic on the network. Typical symptoms include:
· High CPU utilization
· Slow traffic throughout the network
· High backplane utilization on the switch
For information on how to identify and troubleshoot issues with spanning tree,
refer to Spanning Tree Protocol Problems and Related Design Considerations
<http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a00800
951ac.shtml> .
If the error message appears for one or two MAC addresses, locate these MAC
addresses in order to determine the cause. Issue the show cam mac_addr command
in order to identify from where these MAC addresses have been learned. In this
command, mac_addr is the MAC address that the error reports as flapping.
After you determine between which ports this MAC address is flapping, track
down the MAC address. Connect to the intermediate devices between your
Catalyst 4500/4000 and the device that has the problem MAC address. Do this
until you are able to identify the source and how this device connects to the
network.
Note: Because the MAC address is flapping between two ports, track down both
of the paths.
This example shows how to track both of the paths from which this MAC address
has been learned:
Note: Assume that you have received this message and you have begun to
investigate it.
%SYS-4-P2_WARN: 1/Host 00:50:0f:20:08:00 is flapping between port 1/2 and port
4/39
In order to track down how this MAC address was learned from both ports,
complete these steps:
1. Consider port 1/2 first, and issue the show cam dynamic 1/2 command.
If you see the MAC address 00:50:0f:20:08:00 in the list of the MAC addresses
that have been learned on this port, determine if this is a single host that
is connected or if there are multiple hosts that are registered on that port.
2. On the basis of whether there is a single or multiple hosts,
investigate the device:
o If there is a single host (00:50:0f:20:08:00) that is connected, check the
other port that is registered and see if the host is dually attached to the
switch.
In this example, the other port is port 4/39.
o If the host has connections to other devices that can eventually lead back
to this switch, try to track down the intermediate devices.
With Cisco devices, issue the show cdp neighbors mod/port detail command. The
output provides information about intermediate devices.
Here is sample output:
Cat4K> (enable) show cdp neighbors 1/2 detail
Port (Our Port): 1/2
Device-ID: brigitte
Device Addresses:
IP Address: 172.16.1.1
Novell address: aa.0
Holdtime: 171 sec
Capabilities: ROUTER
Version:
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Mon 06-DEC-99 17:10 by phanguye
Platform: cisco 2500
Port-ID (Port on Neighbors's Device): Ethernet0
VTP Management Domain: unknown
Native VLAN: unknown
Duplex: half
System Name: unknown
System Object ID: unknown
Management Addresses: unknown
Physical Location: unknown
Cat4K> (enable)
3. Establish a Telnet session with the device and follow the path of the
MAC address.
In this example, the IP address is 172.16.1.1.
Repeat the procedure for all MAC addresses that the error message reports as
flapping.
4. Create a simple diagram of the source device with that MAC address and
of the physical connections (the Catalyst 4500/4000 ports) from which and to
which this MAC address is flapping.
The diagram enables you to determine if this is a valid port and path for your
network layout.
If you verify that both ports on which the MAC address is flapping provide a
path toward that network node, there is a possibility that you have a
spanning-tree failure issue. Refer to Spanning Tree Protocol Problems and
Related Design Considerations
<http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a00800
951ac.shtml> in order to isolate and troubleshoot this loop.
In large networks in which multiple hosts from multiple vendors are
interconnected, difficulty arises as you try to track down the host with use
of just the MAC address. Use the search utility for the IEEE OUI and
Company_id Assignments <http://standards.ieee.org/regauth/oui/index.shtml> in
order to track down these MAC addresses. This list is the front end of the
database where IEEE has registered all MAC addresses that have been assigned
to all vendors. Enter the first three octets of the MAC address in the Search
for: field of this page in order to find the vendor that is associated with
this device. The first three octets in the example are 00:50:0f.
These are other issues that can cause this message to appear:
· Server NIC redundancy problem?There is a server with a dual-attached
NIC that misbehaves and does not follow the standards. The server uses the
same MAC address for both ports that connect to the same switch.
· Hot Standby Router Protocol (HSRP) flapping?Flapping HSRP can cause
these messages to appear in the Supervisor Engine console. If you notice that
HSRP implementation in your network is unstable, refer to Understanding and
Troubleshooting HSRP Problems in Catalyst Switch Networks
<http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00800
94afd.shtml> in order to resolve the problem.
· EtherChannel misconfiguration?A misconfigured EtherChannel connection
can also cause these symptoms. If ports that the flapping message reports are
members of the same channel group, check your EtherChannel configuration and
refer to Understanding EtherChannel Load Balancing and Redundancy on Catalyst
Switches
<http://www.cisco.com/en/US/tech/tk389/tk213/technologies_tech_note09186a00800
94714.shtml> in order to troubleshoot the configuration.
· Host reflects packets back onto the network?The reflection of packets
back onto the network by a host can also cause flapping. Typically, the root
cause of this packet reflection is a broken NIC or any failure of the physical
interface of the host that is connected to the port.
If the reflection of packets by the host is your root cause, obtain a sniffer
trace and examine the traffic that goes to and from the ports on which the
messages have appeared. If a host reflects packets, you typically see
duplicate packets in the trace. The duplicate packets are a possible symptom
of this flapping of the MAC address.
Refer to Configuring SPAN and RSPAN
<http://www.cisco.com/en/US/docs/switches/lan/catalyst4000/6.3and6.4/configura
tion/guide/span.html> for details on how to configure a port for use with a
sniffer.
· Software or hardware defect?If you have tried to troubleshoot the
flapping message with the instructions in this section but you still notice
the issue, seek further assistance from Cisco Technical Support
<http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html> . Be
sure to mention and provide documentation of the information that you have
collected while you followed the steps. This information makes further
troubleshooting quicker and more efficient.
HTH
REgards
Inayath
*Plz rate all usefull posts.

What is the difference between MCU & Cisco TelePresence Server?

Hello Pros,,
I would like an answer for this question "What is the difference between MCU & Cisco TelePresence Server?" to help us find a solution that best fits our requirements .
also I would appreciate it if you refer to a document that directly discusses the difference in a straight-forward manner.
Thanks for taking the time trying to help ,,

Nothing much has changed on the MCU side, it still has the same feature set really. Only things that are notable that have changed is the addition of ClearPath and encryption for SIP calls are the two biggest features in the latest release, don't expect any large features for the MCU as Cisco works to leverage everyone to migrate to the TelePresence Server as most of the MCU product line can be migrated to a TelePresence Server and that is where the most active development is.
Recent MCU changes can be seen in the MCU 4.5 Release Notes.
Recent TelePresence Server changes can be seen in the TPS 4.0 Release Notes and TPS 4.1 Release Notes.
In the most recent TPS 4.1 release, which came out last month, no MCU features were added because they were focusing most if not all the development on scheduling with TMS and Conductor, and to improve the existing TPS features already in place.

Difference between cleared items,open items and all postings (FI).

Hi experts,
Can anybody tell me the difference between cleared items,open items and all postings for an account.
While running corresponding bapis and transaction FAGLL03 (for GL) or FBL1N (for accounts payable) i found that in some cases all postings is less than cleared items or open items for a time period. How could it happen.According to my knowledge all postings should contain cleared items and open items.
Please correct me..
Thanks and Regards
Arjun

Hi Arjun,
For every Billing Documnet created(VBRK/VBRP-VBELN) there will be an accounting document created in BSID/BSAD tables.
OPEN ITEMS means the Billed/Invoice Amounts that are pending from Customers, i.e which we have to receive from Customers.
CLOSED ITEMS means the AMOUNTS received from that customer.
OPEN ITEMS : fetch data from BSID table Only
CLOSED ITEMS : fetch data from BSAD only.
ALL POSTINGS : fetch data from both BSID and BSAD.
Hope this will help.
Regards,
Nitin.

The Difference between iphone Unlock T-Mobile and iphone Unlock Free-Sim

As mentiond in the title my questions are:-
- What is the Difference between iphone Unlock T-Mobile and iphone Unlock Free-Sim?!
- Did they both work Internationally?!
- For the Unlock T-Mobile should i use their sim or i can use any sim directly?!
Thanks

Unlocked means unlocked and you can use any sim card and keep changing them and the phone will never lock if it is unlocked.
Sim free, means that the phone is sold at full price without a sim card, but the phone will lock to the first sim card that you put in it. A sim free phone will work internationally, but you will have to use a roaming plan with your phone company because the phone will be locked, so you CANNOT change it to a local sim card.
If you have an unlocked phone, you can use it internationally by inserting a local sim card and the phone should then work and you won't have to pay increased roaming charges as you would with a locked phone.
If you buy a T-Mobile phone that is unlocked, DO NOT activate it with their sim card or the phone will lock to T-Mobile and you will have to approach them to get it unlocked. Use it with another sim card straight away and it will remain unlocked.

The Difference between Extending a Wireless network and WDS?

I have an Extreme (n) and an Express (n).
I want to make sure the signal is strong upstairs and share a printer (connected to the express) and use AirTunes. I also may add an external drive to the Extreme.
What's the difference between Extending a Wireless Network and using WDS? Will there be a speed difference?
Message was edited by: J. Christopher Edwards

I think you don't get it
If I have another draft N router that operates at 2.4G and I have only n devices I can still use WDS and it will connect using draft n in the 2.4G band.
If one g device connects to the network will go in mixed mode.
The AEBS will still report 130 Mbps for your n clients and 54 for your g clients.
If the other router is g only obviously you can't connect between the two router at n mode but still the AEBS will be in mixed mode and not in g. The Extreme will still report 130 Mbps for the connected n clients.
I can tell you that because I have actually implemented it am not taking off the documentation.
The same device if I try to use the "extend n network" does not even see the AEBS but will happily keep the n in the WDS mode and though the bandwidth is halved it is still more than g.
In any case enough for this!

Difference between SY-SUBRC EQ 0 and SY-SUBRC EQ ' 0 '

Dear All,
I am not from abap background.
I have a simple question.
what is the difference between sy-subrc eq 0 and sy-subrc eq '0'
How does it impact a statement like this for example
SELECT /BIC/ZAGENT /BIC/ZBATCH_MO /BIC/ZDOC_NUM /BIC/ZCUSTOMER
           /BIC/ZSTORE /BIC/ZLINE_NUM /BIC/ZMATERIAL /BIC/ZBARCODE
      FROM /BIC/AZO_AMVN100
      INTO CORRESPONDING FIELDS OF TABLE it_aquisition
      WHERE /BIC/ZAGENT EQ SOURCE_FIELDS-/BIC/ZAGENT
      AND /BIC/ZDOC_NUM EQ SOURCE_FIELDS-/BIC/ZDOC_NUM
      AND /BIC/ZOCFLAG = '1'.
    if sy-subrc EQ '0'.
      SELECT SINGLE /BIC/ZDOC_NUM FROM /BIC/AZO_PMVN300
        INTO v_docnum
        WHERE /BIC/ZDOC_NUM EQ SOURCE_FIELDS-/BIC/ZDOC_NUM
        AND /BIC/ZAGENT EQ SOURCE_FIELDS-/BIC/ZAGENT
kindly help me with this.
Pleae do a little more research before posting questions here...even if you are new to ABAP.
Edited by: kishan P on Aug 24, 2010 10:00 AM

Hi,
Please refer [Wiki post|http://wiki.sdn.sap.com/wiki/display/ABAP/Sy-Subrc].
hope it help you,
regards,

Getting Big Headache, What is difference between Flash Lite 3.1 and Flash Player 7

Hello, I am asking questions about the two similar yet different programs for Pocket PC version only:
1) Which came first, Flash Lite 3.1 or Flash Player 7?
2) If I have both in my Pocket PC, will there be product incompatibility?
3) What is the difference between Flash Lite 3.1 and Flash Player 7.
4) I have a Flash Lite 3.1 but uninstall information says "Flash Lite 3.1 for Opera Mobile", did you releaase this? Is this an illegal copy? A developer's copy?
*I don't know exactly where I got it, but I got it from the HTC developer's forum: XDA-developers.com
*I also use Opera mobile, a web browser for Pocket PC's.
5) What is difference between Flash Lite 3.1 and Flash Lite 3.1 for Opera? Is the only difference is that Flash Lite Supports everything flash related, while Flash Lite Opera supports only flash in opera?
Hi, I don't expect all answers, but I hope someone or someone from adobe support can clear some things up for me.

The program under my "remove programs" list is specifically called "Adobe Flash Lite for Opera". The XDA forums people said along time ago that it was Flash Lite, and kept calling it Flash Lite, and not Flash Player 7.
Now what about this:
http://www.adobe.com/products/flashlite/version/
The table shows the differences between FP 7 SDK, FL 2.1, and FL 3.1. And it's quite obvious that FL 3.1 has way more features than Flash Player 7. What does SDK mean? And why are you telling me FP 7 has more features?
With this information, can you or anyone else provide any more details and clarification?

SSO between BI,CE7.1 ENH1 and BOE 3.1

Hi All,
Our requirement is to do SSO between BI,CE7.1 ENH1 and BOE 3.1. In the BO Integration Kit documentation, it has mentioned trusting the systems between BI and BO and SSO configuration between EP and BO.
I have performed all the steps given in the document even in CE Portal and SSO between CE and BO is not working. In further research, I can find in NWA, the JAVA EE Application u201Ccom.businessobjects.pct.masteriview.paru201D is in explicit stop mode and it is not starting even I try to do manually or restarting the server. Below is the log which states the following for not starting the service
[ERROR CODE DPL.DS.5035] Application [sap.com/com.businessobjects.pct.masteriview] cannot be started. Reason: it has hard reference to resource [jcoclient] with type [SAPPORTAL], which is not active on the server. Hint: 1) Is referred resource deployed? 2) Is referred resource able to start?
Not sure which resource it is looking for and need expertise on the same..Earliest response is highly appreciated.
Thanks,
PradeeP

HI,
please make sure you check the supported SAP J2EE versions for BusinessObjects here : http://service.sap.com/bosap-support and also remember that the integration is for the portal and you are using CE.
ingo

Is it possible to have SSO between R/3 4.6 and Enterprise Portal 7?

I am trying to configure an R/3 transaction between R/3 4.6 and SAP EP 7.0. I have fulfilled all of the requirements for configuring SSO between Portal and R/3. I guess it is the ITS server that is running on a Windows machine. When I run the iView it gives me the logon screen of the WebGui service on ITS asking for user name and Password. Please help.

I am having also the same issue. 
Our existing portal 6.0 via ITS 6.20 to 4.6C backend SSO is working fine. 
However we just installed SAP NW Portal 7.0 and like to connect via ITS 6.20 to 4.6C using same configuration.
I configure the SSO and make sure things is there. It still does not working and keep asking for username and password. 
I configure another iView and use SAP GUI for Windows with test tcode SP02 and preview it, I could automatically connect to the system with SP02 screen. 
I wonder for this case the SSO does not work via ITS 6.20 whereas iView with SAP GUI for Windows work perfectly. 
The trace I get for SSO via ITS 6.20 is just one line 
Y Thu Oct 15 06:31:16 2009
Y *** ERROR => multiple DiagSetGuiConnectData call [diagext.c 584] 
The trace I get for iVIew with SAP GUI for Windows is as follow: 
Y Thu Oct 15 08:15:09 2009 
Y *** ERROR => multiple DiagSetGuiConnectData call [diagext.c 584] 
N conv_lang_iso2sap : no conversion necessary 
N dy_set_sso_ticket: SSO logon data stored 
D *** ERROR => invalid APPL header [diagext.c 1024] 
D *** ERROR => 16 [diagext.c 1025] 
D *** ERROR => id 4 [diagext.c 1026] 
D *** ERROR => sid 23 [diagext.c 1027] 
D *** ERROR => invalid APPL header [diagext.c 1024] 
D *** ERROR => 16 [diagext.c 1025] 
D *** ERROR => id 4 [diagext.c 1026] 
D *** ERROR => sid 22 [diagext.c 1027] 
N syssigni: SSO logon data retrieved 
N dy_signi_ext: SSO TICKET logon (client 300) 
N mySAPUnwrapCookie was called. 
N RunningCompatibly said: I'm >= 46C. 
N mySAP: Got the following SSF Params: 
N DN =CN=PRD 
N EncrAlg=DES-CBC 
N Format =PKCS7 
N Toolkit = 
N HashAlg =SHA1 
N Profile =/usr/sap/TRN/DVEBMGS30/sec/SAPSYS.pse 
N PAB =/usr/sap/TRN/DVEBMGS30/sec/SAPSYS.pse 
N Got the codepage 6300. 
N Got ticket (head) AjExMDAgAAtwb3J0YWw6c2Zvb4gAE2Jhc2ljYXV0. Length = 524. 
N Got content client = 000. 
N Got content sysid = PEP . 
N Got date 200910151442 from ticket. 
N Cur time = 200910151515. 
N Computing validity in hours. 
N Computing validity in minutes. 
N CurTime_t = 1255706100, CreTime_t = 1255704120 
N validity: 28800, difference: 1980.000. 
N MskiValidateTicket returns 0. 
N DyISigni: client=300, user=SFOO , lang=E, access=A, auth=T 
N usrexist: effective authentification method: mySAP.com logon ticket 
N password logon is generally enabled (default) 
N password change not required (expiration period=0 / days gone=46) 
N usrexist: update logon timestamp (M) 
N save user time zone = >PST < into spa 
N syssigni: SSO logon data released (roll area) 
N syssigni: detected workplace context 
N DyISignR: return code=0 (see note 320991) 
Anyone have any ideas or comment ? 
Edited by: Steven Foo on Oct 15, 2009 5:19 PM

What's the difference between a not-initialed object and a null object

hi guys, i wanna know the difference between a not-initialed object and a null object.
for eg.
Car c1;
Car c2 = null;after the 2 lines , 2 Car obj-referance have been created, but no Car obj.
1.so c2 is not refering to any object, so where do we put the null?in the heap?
2.as no c2 is not refering to any object, what's the difference between c2 and c1?
3.and where we store the difference-information?in the heap?

For local variables you can't have "Car c1;" the compiler will complain.That's not true. It will only complain if you try to use it without initializing it.
You can have (never used, so compiler doesn't care):
public void doSomething()
   Car c1;
   System.out.println("Hello");
}or you can have (definitely initialized, so doesn't have to be initialized where declared):
public void doSomething(boolean goldClubMember)
   Car c1;
   if (goldClubMember)
       c1 = new Car("Lexus");
   else
       c1 = new Car("Kia");
   System.out.println("You can rent a " + c1.getMake());
}

HA between a Cisco ASA 5520 and a Cisco ASA 5525-X

Similar Messages

Maybe you are looking for