How does an ipsec appliance distinguish between several vpn policies?

Hi,
I have a general question in regards to ip sec appliances providing vpn access: How does the appliance distinguish between several IKE and VPN policies?
In our office, we have a SA520 configured to provide vpn access to our sales force. That works quite well. Now I am trying to connect to another office, so I created a second IKE policy and a second VPN policy. The site to site connection can be established as well. When it is however, the client-to-site users cannot connect any more. It looks like the VPN policies are interfering with each other. In the log, I see messages saying that nested SAs are not supported.
Has anyone an idea how to resolve this?
Thanks,
Roland

Hi Roland,
We have not seen the issue reported above when SA500 is configured with site to site VPN tunnel as well as for remote access VPN (using Cisco VPN Client).
To help us reproduce this issue can you please provide -
1. SA500 Configuration File
2. Details about site to site VPN peer - make, model, etc
3. Details about VPN client
4. Topology.
Please change your passwords before posting the configuration file. If you are not comfortable posting it here, you can send the details through a private message feature on this portal.
Thanks,
Nitin.

Similar Messages

How does muse tell the difference between a temporary site and my free 5 sites with my creative cloud membership?

how does muse tell the difference between a temporary site and my free 5 sites i get with my creative cloud membership?
because they both use .businesscatalyst.com and there's no option to say that it is a temporary site not a finished site i wish to publish to my creative cloud account.

Since this is an open forum, not Adobe support... you need to contact Adobe staff to help
Adobe contact information - http://helpx.adobe.com/contact.html
-Select your product and what you need help with
-Click on the blue box "Still need help? Contact us"

How does the communication will happened between SOA-Composer(where DVM file resides) and EM console (Where composite resides)?

How does the communication will happened between SOA-Composer(where DVM file resides) and EM console (Where composite resides)?
And also i would like to how A business rule(Which will be resides in SOA_COMPOSER) will be communicated to Soa Composite(Resides in EM Console)?

whenever you deploy a new composite it gets stored in the MDS data
store, i.e. the metadata service and not the dehydration store (the
SOAINFRA database).
Composer works directly with the MDS schema.
EM reads the same schema (MDS) to see what composite are deployed on the
partitions.
All runtime instance data is stored in the SOAINFRA database.
Hope this helps,
Anatoli

How does one create LOV Map between 2 fields for custom lookup mapping

Hi there
In Internet Expenses, Expense Report Line Detail we have two unrelated fields; namely Expense Location & Tax Code.
The requirement is to map a default tax code to locations; basically when a user enters Expense Location then the mapped tax code value should default into field Tax Code.
The location-tax code mapping is stored in a custom lookup (FND_LOOKUP_VALUES).
My question is how does one go about implementing this? For example is it possbile to create a new (hidden) LOV based on the lookup mapping & then create a Personalization LOV Mapping between the 3 LOV... Or is it necessary to modify the Tax Code drop down Message Choice in JDeveloper? Of course details are appreciated!
FYI below is the relevant Personalization Structure from "Personalize Stack Layout: (NormalDetails)".
Message Lov Input: Expense Location
- Lov Mappings
-- Lov Map: (lovMap1)
-- Lov Map: (lovMap2)
-- Lov Map: (lovMap3)
- Message Text Input: Expense Location
- Message Styled Text: Transaction Location
- Message Text Input: Merchant Name Yes
- Message Styled Text: Description
- Message Check Box: Original Receipt Missing Yes
- Message Choice: Tax Code
- Message Check Box: Amount Includes Tax
- Message Choice: Tax Code
Many thanks
G

Hello all
The correct & supported method is this:
Extend the location LOV in JDeveloper & add a "default tax" attribute, this could be derived from a new location DFF storing the default tax code for each location. Now simply create a location Personalization LOV Map which takes this new location lov tax attribute & target it to the tax message choice field.
That's my 2c worth anyway, so please give comment if you feel there is a better way.
There is just one more little problem however... The requirement has changed! Now we require the tax code to default according to not one location field, but other fields too. For example if the user selects Expense Type of Beverage & Location of Netherlands then Tax Code should be NL19%, for Expense Type of Hotel then it should be NL6%; if the user ticks "Missing Receipt" field then it should over ride all others & set the code to NL0%.
Any ideas?
Many thanks
G
Edited by: user13363208 on 11-Aug-2010 06:51

How can I make Siri distinguish between calendar appointments (busy) and calendar events (free)?

When I ask Siri "How does my day look tomorrow?" she tells me every appointment (busy) and task (free) I have scheduled. I'm trying to find a way to let her know that I'm only interested in seeing what appointments (busy) I have that day.
Has anyone found a way to do this? I'm using iCloud calendars on all my devices.
I've already used iCloud calendars to designate each individual event as either "free" or "busy," but she continues to display all calendar events when I ask for an overview of my day. I've tried to do this from my iPhone, Macbook, and iCloud website.
Moving my tasks to my "Reminders" app won't help, because I need to be able to schedule time to work on specific tasks and also put important deadlines into my calendar. At the same time, when I ask Siri, "How does my day look," I am only interested in knowing what appointments I have that day.
I've also tried asking specifically "What meetings do I have in my [work/personal/family etc. calendar]" but that doesn't work either.
I've also tried asking "Can you show me when I'm busy today" and "Can you show me todays's appointments."
It may be that Siri doesn't have this capability yet, but it would be nice to know if its in the works or if it exists.

When I ask Siri "How does my day look tomorrow?" she tells me every appointment (busy) and task (free) I have scheduled. I'm trying to find a way to let her know that I'm only interested in seeing what appointments (busy) I have that day.
Has anyone found a way to do this? I'm using iCloud calendars on all my devices.
I've already used iCloud calendars to designate each individual event as either "free" or "busy," but she continues to display all calendar events when I ask for an overview of my day. I've tried to do this from my iPhone, Macbook, and iCloud website.
Moving my tasks to my "Reminders" app won't help, because I need to be able to schedule time to work on specific tasks and also put important deadlines into my calendar. At the same time, when I ask Siri, "How does my day look," I am only interested in knowing what appointments I have that day.
I've also tried asking specifically "What meetings do I have in my [work/personal/family etc. calendar]" but that doesn't work either.
I've also tried asking "Can you show me when I'm busy today" and "Can you show me todays's appointments."
It may be that Siri doesn't have this capability yet, but it would be nice to know if its in the works or if it exists.

How does one assign a user to several groups?

I am a student learning Databases, Oracle to be exact, and am trying to install a developer's copy on my MAC G4 running OS X 10.4.11. To do this I need to assign user oracle to several user groups. Trouble is, although I know UNIX fairly well I don't know Sys Adim commands well at all. Can am one help with this one?

Thank you for your posting, however I did try this before I posted here, can assign a user to one (1) group, but can not figure out how to assign a user to more than one (1+) group. That is the root cause of my problem. Do you know how to assign more than one group? Again thank you for your input.

How do I sync open tabs between several PCs?

I am trying to synchronize open tabs between my PC, my work PC and my laptop, all running either OS X or Linux. I have "Sync Tabs" checked, but I do not know how to access my tabs from another computer, or, better yet, restore them all open. I have clicked "Sync Now" on both computers before the attempt.

What is Firefox Sync
https://support.mozilla.com/en-US/kb/what-firefox-sync
How do I add a device to Firefox Sync
https://support.mozilla.com/en-US/kb/add-a-device-to-firefox-sync
Check these and tell if its working.

How does the VideoDisplay component select between live streams?

I am passing to the source property of a VideoDisplay component a DynamicStreamingVideoSource object with 3 different dynamic live stream items, described by this XML, for your consideration:
   <video src="rtmp://88.87.56.214:1935/live/fashiontv_tmo_h.stream" system-bitrate="19200"/>
   <video src="rtmp://88.87.56.214:1935/live/fashiontv_tmo_m.stream" system-bitrate="9000"/>
   <video src="rtmp://88.87.56.214:1935/live/fashiontv_tmo_l.stream" system-bitrate="3600"/>
But the player then runs the stream with the lowest bitrate, out of those 3. Wasn't it supposed to go for the stream with the highest bitrate, that is viewable by the end-user? All 3 streams have been individually tested and they are all viewable.
There is a matter of the initialIndex property of the DynamicStreamingVideoSource class, that acts as a preferred first attempted stream index to play. But:
This is set to 0 by default, even if there is no actual 'preferred' initial index.
The streams are sorted internally by the VideoDisplay class, from lowest bitrate to highest; should we use an initialIndex value equal to the number of streams MINUS 1, so as to ask for the highest bitrate first? What happens if that is not viewable, what stream will it try then?
Due to stream sorting, the value for the initial index may be misleading if the streams had initially been given in a different order, e.g. from highest bitrate to lowest
All in all, the VideoDisplay component and its multi-bitrate support are sadly just briefly described throughout doc pages. Anyone with anything to contribute on the matter is very welcome.
Thanks,
Liviu

Hi Pablo DC Es:Arg
I believe that is how freehand tool works ...You can tap and draw the line using your finger ...if you find the line is curved you can delete it and re-create it ...

How does the JNLP client distinguish new Suppliers?

Hello,
I digitally sign my application with the same key, and have the same codebase. Yet, the Setup.jnlp <installer.desc> is executed after each update I do.

simpatico_gabriele wrote:
wait..wait.. I could verify on Win 7 too. .. So that is Mac. 1.6 as well as Win 7 running ..what Java?
..So you say that on your Ubuntu packaging both .class in the same jar would not reproduce the same problem?Yes. That about sums it up.
Could you post your jnlps code for that (just to make sure we do the same thing), so that I try it on both mac and win, where the .java code i expect to be the same.App. - Note I changed the title to "(Trivial) Application 2"
<?xml version='1.0' encoding='UTF-8' ?>
<jnlp spec='1.0'
      codebase='http://pscode.org/jws'
      href='application.jnlp'>
<information>
    <title>(Trivial) Application 2</title>
    <vendor>Andrew Thompson</vendor>
    <description kind='one-line'>
      Trivial application to support the demo of the web-start ExtensionInstallerService
    </description>
    <shortcut online='false'>
      <desktop/>
    </shortcut>
</information>
<resources>
    <j2se version='1.2+' />
    <extension href="installer.jnlp" />
    <jar href='application.jar' main='true' />
</resources>
<application-desc main-class='test.Application' />
</jnlp>installer.. changed it to refer to application.jar, which now contains all classes
<?xml version='1.0' encoding='UTF-8' ?>
<jnlp spec='1.0'
      codebase='http://pscode.org/jws'
      href='installer.jnlp'>
<information>
    <title>Application Installer</title>
    <vendor>Andrew Thompson</vendor>
    <description kind='one-line'>
      Demo of the web-start ExtensionInstallerService
    </description>
</information>
<resources>
    <j2se version='1.2+' />
    <jar href='application.jar' main='true' />
</resources>
<installer-desc main-class='test.Installer' />
</jnlp>

What is iTunes Match and how does it work?

What is iTunes Match and how does it work? I have several tunes on my computer that do not show complete. The source of these tunes are from my own CDs.

iTunes match - http://www.apple.com/itunes/itunes-match/ - see FAQ at end too
Basically it looks at the music you have in iTunes. If it sees the equivalent on the iTunes Store site it does nothing, but it makes that copy accessible to you to download. If you have music it doesn't it will upload a version from your computer to the site that only you can access from anywhere online.
In your case if you have incomplete tracks it will not fix them. It does some kind of audio fingerprinting to make sure you aren't just feeding it a bunch of 60s demonstration cuts and trying to get whole tracks back.

How does it work for synchronous update via distributed scheme?

How does the synchronous update work between the primary JVM and backup JVM via the distributed cache threads?
Once a primary distributed worker thread updates the cache, the update needs to be synchronized to the backup.
Does the primary distributed worker thread continue to start sending the update to the backup? Or it's the primary distributed service thread to start sending the update to the backup?
On the backup side, is it the backup distributed service thread updating the backup cache? Or the backup distributed service thread delegate to a backup distributed worker thread to update the backup cache?
There are some concerns about if it's the distributed service thread participating the synchronization which might cause bottleneck given it is single thread.
Thanks in advance.

When you do a SELECT ... FOR UPDATE, Oracle locks each row that is returned by the SELECT. The mechanics of locking in Oracle is that the lock bit is actually stored in the row, rather than being centralized in the v$lock table. This allows Oracle to be very scalable and prevents you from worrying about things like lock escalation, but it makes it hard for individual DBA's and developer's to know what rows are locked.
Justin

How does Ejb maintain relationship

How does EJB maintain a link between the EJBRemoteObject,EJBHome and
the EJBClass
and why does EJBClass implements SessionBean and the rest of the classes extend a paticular classes.
What is their relation.

EJBRemoteObject (or EJBObject) and EJBLoclaObject are interfaces that user can use to access an object. If you use remote object user can access the object remotely. Local object can be accessed remotely only via another session bean that locates in the JVM of local bean and implements remote interface.
The EJBHome and EJBLocalHome are factories of objects. User uses them like:
UserHome userHome = JNDI.getRootContext().getObject("EJB/UserBean").narrow(UserHome.class);
User user = userHome.create("Andreas", "Papandreas");
user.setRole("admin");
// here UserHome is interface extending EJBHome
// here User is interface extending EJBObject
// User looks like EntityBeanEJBClass that implement SessionBean or EntityBean are abstract classes. They will be extended by application server. The application server creates stubs for client JVM as well. These subs marshall data to EJBClass on server. You may override some methods in EJBClass, for example initializing some fields on object creation. Setters and getters (required in entity beans) remain abstract in the EJBClass, they are left for application server implementation.
I have all this info from good tutorial at IBM's site http://www-106.ibm.com/developerworks/views/java/tutorials.jsp. Tutorial is called "Introduction to container-managed persistence and relationships
", Parts 1-4.

HT5637 How does itunes match sync playlists?

How does itunes match sync playlists between my computer, ipad and ipod?

It will tell you that the library exceeds the limit and will not proceed. So if you have more than the 25k limit (and keep in mind that iTunes Store purchases do not count against this limit) the only way you can use iTM is to move some music out of the library to get under the limit before signing up for the service.

How to distinguish between two publish services

Hi,
I have two instances on a published service plugin, but how can I distinguish between them. Currently, I'm accessing the publish service via
activeCatalog:getPublishServices( _PLUGIN.id ) which returns just an array. So far so good. But when I change some settings in the Publishing Manager for "instance-A" everything in "instance-B" is changed to the same values as well.
What I'm doing wrong? Please help!
Thanks,
Lars

It is definitely possible to maintain separate sets of settings for two or more
publish connections of the same publish plug-in.
Without more detail on what exactly your code looks like, it is difficult to say what's not working right.
The contents of 'exportPresetFields' should be maintained on a per-connection basis.

How can I have Facetime callers distinguish between my Ipad and my MacBook Pro?

I'm wondering how does one set things up so that a Facetime caller can distinguish between calling me on my iPad versus calling me on my MacBook Pro? I have family calling me and it is popping up on the MacBook when, ideally, the call would come through to my Ipad when I'm traveling?

Hello Mac_ThePI,
In FaceTime's preferences, you can choose what Apple IDs and/or phone numbers you can be reached at. You might choose to make the phone number or certain Apple IDs the only checked option(s) on your iPad, and others on your Mac.
iOS and OS X: Link your phone number and Apple ID for use with FaceTime and iMessage
http://support.apple.com/kb/HT5538
Cheers,
Allen

How does an ipsec appliance distinguish between several vpn policies?

Similar Messages

Maybe you are looking for