How to Configuration Cisco 3725 with NEC ASPILA EX

Dear all;
Now i have Cisco 3725 with 1-Port Channelized E1/T1/ISDN-PRI, i am connect to NEC ASPILA EX with PRI I/F (1PRIU-A1.
The controller link state up, but when clients dialin to RAS not have ring back or not connect to RAS.
anyone can help me?

Hi;
i'am config cisco as you recommended is "isdn protocol-emulate network" and "clock source should be internal". After the remote computer call to RAS it have modem signal and then connected, next time it disconnect. can i change some parameter for this problem or what i'am wrong?. I post config, status, and debug message for you. Help me..
===== show isdn status ===========
#show isdn status
Global ISDN Switchtype = primary-net5
ISDN Serial2/0:15 interface
******* Network side configuration *******
dsl 0, interface ISDN Switchtype = primary-net5
Layer 1 Status:
ACTIVE
Layer 2 Status:
TEI = 0, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 0 CCBs = 0
The Free Channel Mask: 0xFFFF7FFF
Number of L2 Discards = 0, L2 Session ID = 0
Total Allocated ISDN CCBs = 0
=============== sh controllers e1 2/0 brief ========
#sh controllers e1 2/0 brief
E1 2/0 is up.
Applique type is Channelized E1 - unbalanced
No alarms detected.
alarm-trigger is not set
Framing is CRC4, Line Code is HDB3, Clock Source is Internal.
Module type is Channelized E1/T1 PRI
Version info Firmware: 0000001D, FPGA: 0
Hardware revision is 0.0 , Software revision is 29
Protocol revision is 1
number of CLI resets is 0
receive remote alarm : 0,
transmit remote alarm : 0,
receive AIS alarm : 0,
transmit AIS alarm : 0,
loss of frame : 1,
loss of signal : 1,
Loopback test : 0,
transmit AIS in TS 16 : 0,
receive LOMF alarm : 0,
transmit LOMF alarm : 0,
========== Interface config.=============
controller E1 2/0
clock source internal
line-termination 75-ohm
pri-group timeslots 1-31
interface Serial2/0:15
no ip address
ip nat inside
encapsulation ppp
ip policy route-map nachi-worm
dialer rotary-group 1
dialer-group 1
isdn switch-type primary-net5
isdn protocol-emulate network
isdn incoming-voice modem
no fair-queue
no cdp enable
=================Debug Message when call to RAS ===========================
Mar 6 22:40:29 BANGKOK: ISDN Se2/0:15 Q931: RX <- SETUP pd = 8 callref = 0x000B
Bearer Capability i = 0x8090A3
Standard = CCITT
Transer Capability = Speech
Transfer Mode = Circuit
Transfer Rate = 64 kbit/s
Channel ID i = 0xA9838B
Exclusive, Channel 11
Calling Party Number i = 0x0081, N/A
Plan:Unknown, Type:Unknown
Called Party Number i = 0x81, '075205600'
Plan:ISDN, Type:Unknown
Low Layer Compat i = 0x8090A3
High Layer Compat i = 0x9181
Mar 6 22:40:29 BANGKOK: ISDN Se2/0:15 Q931: TX -> CALL_PROC pd = 8 callref = 0x800B
Channel ID i = 0xA9838B
Exclusive, Channel 11
Mar 6 22:40:29 BANGKOK: ISDN Se2/0:15 Q931: TX -> ALERTING pd = 8 callref = 0x800B
Mar 6 22:40:29 BANGKOK: ISDN Se2/0:15 Q931: TX -> CONNECT pd = 8 callref = 0x800B
Mar 6 22:40:35 BANGKOK: %ISDN-6-CONNECT: Interface Serial2/0:10 is now connected to unknown unknown
Mar 6 22:40:46 BANGKOK: %ISDN-6-DISCONNECT: Interface Serial2/0:10 disconnected from unknown , call lasted 17 seconds
Mar 6 22:40:46 BANGKOK: ISDN Se2/0:15 Q931: TX -> DISCONNECT pd = 8 callref = 0x800B
Cause i = 0x8290 - Normal call clearing
Mar 6 22:40:47 BANGKOK: ISDN Se2/0:15 Q931: RX <- RELEASE pd = 8 callref = 0x000B
Mar 6 22:40:47 BANGKOK: ISDN Se2/0:15 Q931: TX -> RELEASE_COMP pd = 8 callref = 0x800B
==============================================

Similar Messages

  • I have a Symphonic 32' HDTV (Dolby Digital Plus). can someone help me figure out how to configure it optimally with my Mac Mini? the display and sound is off. Do I need drivers/software? I'm new to macs.

    I have a Symphonic 32' HDTV (Dolby Digital Plus). can someone help me figure out how to configure it optimally with my Mac Mini? the display and sound is off. Do I need drivers/software? I'm new to macs.

    Hello, since nobdy else has replied...
    Long shot, but...
    Open Audio Midi Setup in Applications>Utilities, see the input & output options & KHz setting there.

  • How to configure bt mail with icloud?

    how to configure bt mail with icloud?

    iCloud does not handle any mail systems except for its own. BT is not an iCloud mail system, so you can't.

  • Qosmio F60-L10 - How to configure tv tuner with integrated antenna?

    good evening,
    i have a notebook toshiba qosmio f60 ,i had read your answer about tv tuner.
    my question is : how to configure tv tuner with integrated antenna? thanks

    Hi 3171954,
    I think Paolo30 is right. Qosmio F60 is equipped with internal DVB-T but in some cases you need an external antenna to pick up the low signal. In most cases only in large citys you dont need an external antenna. If you live on the fringe of the city, normally a cable is needed.
    Anyway, do you mean an external antenna or external DVB-T receiver (USB stick)?
    Normally Windows media center should recognize the internal DVB-T tuner. Is it listed in device manager? Did you update the driver?

  • How to configure portal server with the Backend Oracle database

    Hi Portal Experts,
    we are planning to install Netweaver 04s sp stack 9 full java edition with Oracle 8i on windows platform.
    we have the installation docs of portal but we didn't have any idea about how to configure Portal server with the Backend Oracle database at the time of installation or after ost installation of portal.can anyone provide the documentation about this or guide me how to achieve this.
    PLZ share ur views---your help would be highly appreciable.
    Regds
    Phani.

    HI
    if you r working in Sap enterprise portal use for connection url
    jdbc:sap:sqlserver://ilsql01.tlv.sap.corp:1433;DatabaseName=Northwind
    ilsql01.tlv.sap.corp:1433 this is your portal url with port number
    Northwind is your database name.
    for dirver you need to give
    com.sap.portals.jdbc.sqlserver.SQLServerDriver
    in case if you r working on other than sap say windows along with oracle try to use
    Connection URL as jdbc:oracle:<drivertype>:@<database>
    Driver name as oracle.jdbc.driver.OracleDriver
    ex jdbc:oracle:thick:@localhost:3036:mydb
    Oracle implements two types of JDBC drivers:
    Thick JDBC drivers built on top of the C-based Net8 client, as well as a Thin (Pure Java) JDBC driver to support downloadable applets. Oracle JDBC drivers are used to create JDBC applications to communicate with Oracle databases.
    Oracle extensions to JDBC include the following features:
    Data access and manipulation
    LOB access and manipulation
    Oracle object type mapping
    Object reference access and manipulation
    Array access and manipulation
    Application performance enhancement
    *************if the information is helpful to you please reward points************

  • How to configure IIS webserver with weblogic so that I can invoke servlets without the .wlforward extension

    How to configure IIS webserver with weblogic so that I can
    invoke servlets without the .wlforward extension
    As per the documentation iisforward.dll is registered as a filter and .wlforward
    has also been
    included as a special file type. However this requires me to key-in ".wlforward"
    after my servlet name.
    What I want is something like this
    http://iis/MyServlet
    Please help me find a solution to this
    Thanks,
    Rishi

    I am able to invoke the servlet without the wlforward extension now.
    However, now I am required to add /weblogic before the servlet
    name otherwise it does not execute the pathtrim property.
    I have tried with the pathprepend thing also.
    Can we get rid of the /weblogic part also. I just want to execute
    my servlet as http://iis/myServlet.
    Your help in this regard is greatly appreciated...
    Thanks..
    "Rishi" <[email protected]> wrote:
    >
    Thanks for the reply Kumar.
    I did follow the instructions as given in the Weblogic documentation
    The documentation said to add iisforward.dll as a filter service
    and register .wlforward as a special
    file type to be handled by iisproxy.dll. For this,
    while configuring the IIS server in the Home Directory tab
    I added an extension ".wlforward" and the executable as
    iisproxy.dll. Is this the way it should have been done...
    I also modified the iisproxy.ini file as per the documentation.
    I have added the WLForwardPath property and set it to /weblogic.
    My server works fine when I give the url as
    http://iis/myServlet.wlforward
    but it does not work for
    http://iis/myServlet and this is the way i'd want it to work.
    Please tell me if I am missing something on the configuration part
    and if there is something special that needs to be done. I shall
    be grateful to you.
    Kumar Allamraju <[email protected]> wrote:
    http://e-docs.bea.com/wls/docs61/adminguide/isapi.html#101184
    Rishi wrote:
    How to configure IIS webserver with weblogic so that I can
    invoke servlets without the .wlforward extension
    As per the documentation iisforward.dll is registered as a filter
    and
    .wlforward
    has also been
    included as a special file type. However this requires me to key-in".wlforward"
    after my servlet name.
    What I want is something like this
    http://iis/MyServlet
    Please help me find a solution to this
    Thanks,
    Rishi

  • How to configure quality process with batch management.

    Dear Friends,
                we have a scenario,our client receive goods with 101movement type  into quality inspection stock.
    once stock is passed quality check stock,then we will take into unrestricted stock with 321 movement type.
    failed in quality test will  be rejected.please give me suggestion how to map the scenario.while i am testing
    the process in my sandbox,its asking batch number.its not allowing me to post unrestricted stock with 321
    movement type.how to make batch as optional in this scenario?if batch is mainted for the material,how to
    configure the process.we are not using QM module.
    please suggest me.
    Regards,
    Varun

    In Batch management config in Logistic general, Check for the movement type 101 & 321 whether batch creation has been activated to Manual, Automatic, or no creation. In your case it looks like for mvt 321 batch creation is set to manual & for 101 no creation.
    if batch creation is set to manual, enter a manual batch no & proceed.
    But to cross verify wheter 101 has generated batch or not please check the stocks in MMBE.
    Hope this helps.
    Regards
    Mithun

  • How to configure UDDI Server with in EDK with a 4.5WS?

    I'm trying to develop a crawler service using EDK5.0.1 with a 4.5ws portal.
    To do this job, I have to deploy and coufigure a UDDI Server which is a requirement for services in 4.5ws.
    After develping and deploying a crawler service, I created gadget server in the 4.5ws portal, and tried to add remote data source, but the popup window for datasource seems not to be able to find the crawler service and showed 'Empty Gadget Server'.
    I think I set up the uddi server with a wrong way, but I don't know what I have to do more to set a uddi server.
    Actually, after developing crawler service and sci service, I deployed these with DeployServlet which is a deploy toolkit offered by EDK.
    With this deploying result, I modified the uddi.xml file and put that file into c:\program files\Plumtree\ptedk\5.0\devkit\config\java\uddi folder.
    Is there any things to set for uddi server?
    Can anybody provide me any advise on this?
    Any help would be appricated.

    The UDDI is used with web services in 4.5x. This is best described as a phone book of URLS for any web services installed in that machine. Those URLS will then point to the individual web services.
    In 5.0 the UDDI server is not needed since it is replaced with the "Remote Server" and "Web Services" tabs. HOw to setup a UDDI with TOMCAT
    UDDI can be setup to run with TOMCAT and I believe this is the only one provided in the EDK installer in the ptedk\5.0\devkit\java directory
    Here's a little TOMCAT information. Web applications are deployed in a folder called "webapp". This case, we have a uddi server installed and it's in a folder called "uddi". So, our file structure for the UDDI server looks like: /webapp - tomcats web application folder /uddi - the uddi application /WEB-INF - standard WEB-INF directory stores java classes, jars and any descriptor files. server-config.wsdd - this is the web service descriptor file for this uddi server - provided by plumtree web.xml - this is the web.xml descriptor file for how the web services in this application will be loaded and run - provided by plumtree /lib - contains the jar files for the uddi server - provided by plumtree The server-config.wsdd file should be the only item that the user needs to modify. Within the file (XML based), there should be the following tag: <!--service for uddi server--> <service name="MessageService" provider="java:MSG" style="message"> <parameter name="allowedMethods" value="find_tModel find_business find_binding"/> <parameter name="className" value="com.plumtree.remote.uddi.UDDIServer"/> <!-- enter the base url for your services. The individual urls will be appended to this url--> <parameter name="baseUrl" value="http://rickc-loaner:81/ntcws/"/> <!-- Enter true if this is dotnet, leave at false if the service is java--> <parameter name="isDotNet" value="true"/> <!-- enter only the urls and names required for your service. For a java crawl, this would be crawler name, documentProviderRpc, containerProviderRpc, sciDataSourceRpc, sciCrawlRpc, and sciCardRpc if using remote card submission--> <!-- Enter the crawler name. This is the name that will show when expanding the remote server--> <parameter name="crawlerName" value="NT File CWS"/> <!-- Enter the auth name. This is the name that will show when expanding the remote server--> <parameter name="authName" value=""/> <!-- Enter the relative url to the rpc (Java) document provider soap endpoint --> <parameter name="documentProviderRpc" value="DocumentProviderSoapPort"/> <!-- Enter the relative url to the rpc (Java) container provider soap endpoint --> <parameter name="containerProviderRpc" value="ContainerProviderSoapPort"/> <!--sci values: the url for datasource, crawl and card may be the same--> <!-- Enter the relative url to the rpc (Java) sci data source soap endpoint --> <parameter name="sciDataSourceRpc" value="SciSoapPort"/> <!-- Enter the relative url to the rpc (Java) sci crawl soap endpoint --> <parameter name="sciCrawlRpc" value="SciSoapPort"/> <!-- Enter the relative url to the rpc (Java) sci card soap endpoint --> <parameter name="sciCardRpc" value=""/> <!-- note that relative auth only works in rpc for 4.5--> <!-- Enter the url to the auth provider soap endpoint --> <parameter name="authProvider" value=""/> <!-- Enter the relative url to the sync provider soap endpoint --> <parameter name="syncProvider" value=""/> <!-- Enter the relative url to the auth sci (rap) soap endpoint --> <parameter name="authSci" value=""/> <!-- Enter the relative url to the doclit (.NET) document provider soap endpoint --> <parameter name="documentProviderDoclit" value="documentprovidersoapbinding.asmx"/> <!-- Enter the relative url to the doclit (.NET) container provider soap endpoint --> <parameter name="containerProviderDoclit" value="containerprovidersoapbinding.asmx"/> <!--sci values: the url for datasource, crawl and card may be the same--> <!-- Enter the relative url to the doclit (.NET) sci data source soap endpoint --> <parameter name="sciDataSourceDoclit" value="xuiservice.asmx"/> <!-- Enter the relative url to the doclit (.NET) sci crawl soap endpoint --> <parameter name="sciCrawlDoclit" value="xuiservice.asmx"/> <!-- Enter the relative url to the doclit (.NET) sci card soap endpoint --> <parameter name="sciCardDoclit" value="xuiservice.asmx"/> </service> This tag contains the information that will be specific to the user's deployment of the web service (CWS or AWS).First off: <parameter name="baseUrl" value="http://machinename:81/ntcws/"/>
    This is the location of the web server that has the target web service installed. THIS CANNOT BE "localhost". This has to be a resolvable machine name or IP address. In 5.0 this is the Remote Web Service settings. Second, you need to set the type of web service. <!-- Enter true if this is dotnet, leave at false if the service is java--> <parameter name="isDotNet" value="true"/> If your app server hosting the web service is dotnet, you need to set this to "true". This is equivalent to the Document encoding setting in 5.0. .NET supports Document/Literal incoding instead of RPC for Java. Third, name your web services. This is the name that will display in the drop down list in 4.5WS when you decide to create a remote data source. <!-- Enter the crawler name. This is the name that will show when expanding the remote server--> <parameter name="crawlerName" value="NT File CWS"/> <!-- Enter the auth name. This is the name that will show when expanding the remote server--> <parameter name="authName" value=""/> This is the web service name property when you create a new web service in 5.0. Next are the configuration settings for your particular web service: <!-- Enter the relative url to the rpc (Java) document provider soap endpoint --> <parameter name="documentProviderRpc" value="DocumentProviderSoapPort"/> <!-- Enter the relative url to the rpc (Java) container provider soap endpoint --> <parameter name="containerProviderRpc" value="ContainerProviderSoapPort"/> <!--sci values: the url for datasource, crawl and card may be the same--> <!-- Enter the relative url to the rpc (Java) sci data source soap endpoint --> <parameter name="sciDataSourceRpc" value="SciSoapPort"/> <!-- Enter the relative url to the rpc (Java) sci crawl soap endpoint --> <parameter name="sciCrawlRpc" value="SciSoapPort"/> <!-- Enter the relative url to the rpc (Java) sci card soap endpoint --> <parameter name="sciCardRpc" value=""/> <!-- note that relative auth only works in rpc for 4.5--> <!-- Enter the url to the auth provider soap endpoint --> <parameter name="authProvider" value=""/> <!-- Enter the relative url to the sync provider soap endpoint --> <parameter name="syncProvider" value=""/> <!-- Enter the relative url to the auth sci (rap) soap endpoint --> <parameter name="authSci" value=""/> <!-- Enter the relative url to the doclit (.NET) document provider soap endpoint --> <parameter name="documentProviderDoclit" value="documentprovidersoapbinding.asmx"/> <!-- Enter the relative url to the doclit (.NET) container provider soap endpoint --> <parameter name="containerProviderDoclit" value="containerprovidersoapbinding.asmx"/> <!--sci values: the url for datasource, crawl and card may be the same--> <!-- Enter the relative url to the doclit (.NET) sci data source soap endpoint --> <parameter name="sciDataSourceDoclit" value="xuiservice.asmx"/> <!-- Enter the relative url to the doclit (.NET) sci crawl soap endpoint --> <parameter name="sciCrawlDoclit" value="xuiservice.asmx"/> <!-- Enter the relative url to the doclit (.NET) sci card soap endpoint --> <parameter name="sciCardDoclit" value="xuiservice.asmx"/> These are equivalent to setting the Document provider URL, Container Provider URL, Remote UI URL etc etc that are in 5.0 web services settings. Once you have installed the UDDI server, and started TOMCAT, you should be able to hit the services list at:http://machinewithuddi:8080/uddi/services This will become your Remote Gadget Server URL and you should be good to go!!

  • How to configure Oracle Discoverer with EBS R12 ?

    Dear
    I hope, by default Oracle Discoverer is not configured with EBS R 12. How to configure it?
    Any hlep, highly appreciated.

    Ateeq,
    Please refer to the following note, it should be helpful:
    Note: 373634.1 - Using Discoverer 10.1.2 with Oracle E-Business Suite Release 12
    https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=373634.1

  • How to configure the SSL with SharePoint Site

    my site is running on http.
    When we create the new website it will ask about "Use Secure Sockets Layer (SSL): " 
    i have select the no and develop a site.
    now i want to move it on httpshowever i want to configure this site with SSL certificate.. how can i move it to https?
    any one help me how can i acess my site from https:// URL.
    i have bought the SSL certificate.
    waiting.........
    its urgent. 

    I am also having an issue with adding and SSL cert to an existing site. I am also using a hostname vs the server name for the URL.  Here is what I have done so far:
    - Local MS DNS Entry (spsite.abccorp.com) point to the IP address of the SP server.
    - ensured the port 80 and 443 boxes are filled in in IIS for the "Sharepoint - 80" site.
    - Added Certificate to that IIS site, but did not make SSL required (so I could try both http and https without it barking).
    - Under the Alternate Access Mapping Section of SP, I changed the URL from http://spsite.abccorp.com to https://spsite.abccorp.com for the "Sharepoint - 80" Collection. I even tried just added the https url to the "Custom" area vs the "Default"
    After I have done all this, I get "Page Can Not Be Displayed" when going to the HTTPS site but works fine for the HTTP.
    Any suggestions?

  • How to configure oracle 10g with clients

    Hello sir i am a database user.
    I want to install an oracle 10g (Client server architecture)
    As i have a licenced Oracle 10g CD Pack.
    Pls help me how to install Oracle & how to configure its clients.
    As i have a server(running server 2003 ) in it and corresponding clients.
    Thanks
    Edited by: user10439074 on Oct 30, 2008 4:03 AM

    Read the documentation (I have given following links assuming you are running a 32 bit architecture)
    Server installations:
    http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14316%2Ftoc.htm&remark=portal+%28Books%29
    Client installations:
    http://www.oracle.com/pls/db102/to_toc?pathname=install.102%2Fb14312%2Ftoc.htm&remark=portal+%28Books%29
    You can find the required books (if not using 32 bit architecture) from
    http://www.oracle.com/pls/db102/portal.portal_db?selected=3

  • How to highlighting cisco sintax with notepad++

    hello everyon
    I tried to highlight the cisco sintax with this help:
    http://www.linickx.com/875/cisco-asa-syntax-highlighting-with-notepad
    But it doesn't work, someone has another option?
    Thanks.

    Hi Vikrant,
    Hoping you are doing well.
    Firstly thank you fo contacting Cisco Support Community. Below is a brief sumamry on the query:
    The Cisco Jabber for Android is designed in order to work with Cisco Call manager and Cisco Unity Connection.
    CIsco Jabber for Andoid includes following limitations and restrictions. Below is the resource link:
    http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cumc/cisco_jabber/Android/86/Cisco_Jabber_Android_8.6.x_Admin_Guide.html#wp808617
    As per the above link:
    Telephone integration with call manager versions 6.1.5, 7.1.5, 8.0.3, 8.5, and 8.6 ONLY
    Hope the above was informative. Please let me know if you have any further queries and we will be more than happy in assisting further on the same.
    Thanks and Regards
    Prashanthi Velpula

  • How to configure Cisco ASA 5500 to work with the iPhone

    We have Cisco ASA 5510 (latest firmware version), and apparently, according to Cisco website it is compatible with new iPhone 3G's IPSec client:
    http://www.cisco.com/en/US/docs/security/vpnclient/cisco_vpnclient/iPhone/2.0/connectivity/guide/iphone.html
    We've setup our first iPhone properly. It connects fine to the network, shows VPN connection as active. Gets a private IP address. But does not let any traffic go to the internal network. We thought it might be DNS problem, but it cannot connect to Exchange server even when using IP address instead of DNS. No luck either.
    After checking ASA logs, we found that iPhone goes through Phase 1 authentication correctly. But then gives some kind of error, mentioning "Attribute 5".
    Has anybody been successful configuring ASA5500 series (in particular 5510) to be used with iPhone?
    I noticed that many people are having these problems.
    Please do not post to this topic if you have ANY OTHER Cisco device.
    Cisco specifies that iPhone is compatible only with Cisco ASA 5500 Security Appliances and PIX Firewalls. Neither Cisco IOS VPN routers nor the VPN 3000 Series Concentrators support the iPhone VPN capabilities.
    Let's keep this topic only for users of ASA 5500 series and PIX Firewalls.
    It would be extremely helpful for a large number of users if somebody posted a list of settings for ASA5500 or PIX firewall that DO work with iPhone 2.0
    Thank you!
    Oleg R

    We found the solution and a bug in Cisco firmware (seems to be a bug).
    First of all, thanks to our Chief Systems Architect Seb, here is a config that worked for us on a Cisco 5520 (latest firmware).
    access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
    access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
    crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
    crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
    crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
    crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
    crypto ipsec transform-set iphone esp-3des esp-sha-hmac
    crypto ipsec transform-set iphone mode transport
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set pfs
    crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 iphone
    crypto map outside_map 10 match address vpn
    crypto map outside_map 10 set transform-set ESP-AES-256-SHA
    crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEMDEFAULT_CRYPTOMAP
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp policy 10
     authentication pre-share
     encryption 3des
     hash sha
     group 2
     lifetime 86400
    crypto isakmp policy 20
     authentication pre-share
     encryption aes-256
     hash sha
     group 5
     lifetime 86400
    crypto isakmp nat-traversal 20
    group-policy iphone internal
    group-policy iphone attributes
     wins-server value <insert ip> <insert ip>
     dns-server value <insert ip> <insert ip>
     vpn-tunnel-protocol IPSec
     ipsec-udp enable
     ipsec-udp-port 10000
     split-tunnel-policy tunnelspecified
     split-tunnel-network-list value iphone_splitTunnelAcl
     default-domain value <insert domain name>
    tunnel-group iphone type remote-access
    tunnel-group iphone general-attributes
     address-pool VPN-Pool
     authentication-server-group ActiveDirectory2
     default-group-policy iphone
    tunnel-group iphone ipsec-attributes
     pre-shared-key <insert pre-shared key>
    For iPhone you have to be using IPSec tab for configuration.
    We tried to set up this config using the wizards, but it would not work.
    Later it turned out that wizards by default set this setting:
    "crypto isakmp nat-traversal 20"
    equal to zero and there is no way to change it from the GUI.
    Only after we changed it (increased the value from 0 to 20) through the command line the connection started working perfectly.
    Please let me know how it works out for you.
    Message was edited by: Rogik
    Message was edited by: Rogik

  • How to Configure Cisco ASA 5512 for multiple public IP interfaces

    Hi
    I have a new ASA 5512 that I would like to configure for multiple public IP support.  My problem may be basic but I am an occasional router admin and don't touch this stuff enough to retain everything I have learned.
    Here is my concept.    We have a very basic network setup using three different ISPs that are currently running with cheap routers for internet access.  We use these networks to open up access for Sales to demo different products that use a lot of bandwidth (why we have three)
    I wanted to use the 5512 to consolidate the ISPs so we are using one router to manage the connections.  I have installed an add on license that allows multiple outside interfaces along with a number of other features.
    Outside Networks (I've changed the IPs for security purposes)
    Outside1 E 0/0 : 74.55.55.210  255.255.255.240 gateway 74.55.55.222
    Outside2 E 0/2: 50.241.134.220 255.255.248 gateway 50.241.134.222
    Inside1 : E 0/1 192.168.255.1 255.255.248.0
    Inside2 : E 0/3 172.16.255.1 255.255.248.0
    My goal is to have Inside 1 route all internet traffic using Outside1 and Inside 2 to use Outside2.    The problem is I can't seem to do this. I can get inside 1 to use outside 1 but Inside2 uses Outside 1 as well.
    I tried adding static routes on Outside2 to have all 172.16.248.0/21 traffic use gateway 50.241.134.222 but that doesn't seem to work.   
    I can post my config up as needed.  I am not well versed in Cisco CLI, I've been using the ASDM 7.1 app.  My ASA 5512 is at 9.1.   
    Thanks in advance for the suggestions/help

    I have been away for a while and am just getting caught up on some posts. so my apology for a delayed response.
    I find the response very puzzling. It begins by proclaiming that to achieve the objective we must use Policy Based Routing. But then in the suggested configuration there is no PBR. What it gives us is two OSPF processes using one process for each of the public address ranges and with some strange distribute list which uses a route map. I am not clear what exactly it is that this should accomplish and do not see how it contributes to having one group of users use one specific ISP and the other group of users use the other ISP>
    To the original poster
    It seems to me that you have chosen the wrong device to implement the edge function of your network. The ASA is a good firewall and it does some routing things. But fundamentally it is not a router. And to achieve what you want were a group of users will use a specified ISP and the other group of users will use the other ISP you really need a router. You want to control outbound traffic based on the source of the traffic, and that is a classic situation where PBR is the ideal solution. But the ASA does not do PBR.
    HTH
    Rick

  • How to configure an ASA with 2 Public IP address.

    Hi, I have to configure a router ASA 5505 with 2 Publics IP, our ISP give us a 3 Public IP, and actually our configuration is like this:
    interface Vlan1
    nameif inside
    security-level 100
    ip address 192.168.x.x 255.255.255.0
    interface Vlan2
    nameif outside
    security-level 0
    ip address 200.91.x.x 255.255.255.248
    The problem is: If I create a new Vlan, the interface overlaps.
    How can I solve that problem??
    Thanks for your answers!!!

    Answered in duplicate post:
    https://supportforums.cisco.com/discussion/12150111/how-configure-asa-2-public-ip-address

Maybe you are looking for

  • How can you delete photos from Photo Stream on iPhone and iMac

    I can move photoes to iPhoto and photos on iPhone 4s but do not seem to be able to delete them from PhotoStream

  • Trouble uploading a new album into iTunes

    I'm trying to upload my new album to my iTunes library, and the first couple of times I didn't have an internet connection so it found that it was not possible to get my cover art. However, I later tried with internet connection and no cover art or s

  • How to remove the stubborn 3rd party software from my curve

    Here are the softwares that I want to remove- ICQ, AIM, Myspace, Yahoo search, Google talk, Yahoo messenger, Window Live messenger...  I never use those softwares.  I tried using desktop manager, those softwares aren't even on the list.  And, I tried

  • White area that appears on screen while opening apps.

    I had my original iPhone 4 replaced in December due to cracks in the screen, I am now on the 5th replacement and the last two have had this identical problem.  Sometimes when opening an app, there is an area on the top left side of the screen that sh

  • How can I delete older apple ID on app store?

    I have bought a second-hand macbook pro, the old owner removed his account and created a new one for me. I did a clean new install of OS and added my appl ID, but app store doesn' allow to update apps. when it asks to insert my ID the space for the u