IDSM2 and IPSEC-2G setup

I'd like to have the following setup:
-Cat6500 with IPSEC2G SPA and IDSM2, using crypto connect to IPSEC-2g internal interface
-VPNs from remote sites terminate on VLAN number 500
-Traffic between remote peers gets through 6500 (there is decryption and another encryption)
-Routing to all remote sites in through the VLAN 500 (there are all routing peers connected to it), it means, that packets coming from one VPN are decrypted on IPSEC, and directed to MSFC VLAN 500. Then, are routed again through VLAN 500 and encrypted on IPSEC 2G.
The question is: is it possible to use IDSM2 module to analyze the traffic when is after decryption and before another encryption?
Is it possible in the inline or only promiscous mode?
Regards,
Krzysztof

You can use IDSM2 to analyze the traffic you can try with Promiscous mode

Similar Messages

How to verify encryption (isakmp and ipsec) on VPN

Our customer believes the only way to verify data is being encrypted properly is to tap the fiber connections between our routers (encryptors). They are afraid that data might traverse the network that hasnt been encrypted.
I contend that using cisco show commands such as crypto session, crypto isakmp sa, and crypto ipsec sa validate VPN is setup correctly and providing data encryption.
Does anyone else have this scenario and any suggestions would be greatly appreciated on validating encryption.
Thank you.
Antonio

Hi Antonio,
you can use the following sh commands on asa to check the isakmp and ipsec details and encrypted networks
sh cry isa sa det
sh cry ipsec sa det
sh vpn-sessiondb det l2l
sh cry ipsec sa det peer
please refer the following link for router and asa commands
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a00800949c5.shtml
once you know the packets are getting encrypted on the device you can run a capture on the outside interface of the VPN terminating decice and use wire shark to open the capture to do further analysis for encryption on the captured paccket.
refer the following doc to capture the packcet on FW
https://supportforums.cisco.com/docs/DOC-17345
Thanks and Regards,
ROHAN

ISA 2006 publish Exchange 2010 Outlook Anywhere with KCD/NTLM and IPSEC - Problem

Hi
I have setup ISA 2006 to publish Exchange 2010 Outlook Anywhere with Kerberos Constrained Delegation and IPSEC.
The clients have an IPSEC policy pushed to them via GPO. The clients are windows 7 laptops and the ISA server is server 2003, so the IPSEC connection is IKE not AuthIP.
However, it seems that the connection will work for a while, then all of a sudden stop working with zero trace of why. I cant get the Oakley log to work and I cant see any traffic on the ISA.
I am wondering if I need to publish the CRL's externally? Currently we don't, and the Outlook Anywhere uses private certificates (as the whole point of IPSEC is to validate the internal certificate, there is no point in using
public certificates).
I have tried using the StrongCRLCheck=0 registry key in the IPsec Policy Agent on the windows 7 machine but it doesn't seem to make a difference.
Any advice would be appreciated.
Steven

Hi,
Firstly, have you received any related error messages in ISA server or on the clients' side? Besides, as you mentioned IPsec, did you have a VPN connection?
In addition,
While ISA 2006 only includes a Client Access Web Publishing Wizard for both Exchange 2003 and Exchange 2007. Which Exchange version you have chosen when publishing Exchange 2010?
Please also make sure that you have selected the
External interface for the web listener to listen on.
Besides, the link below would be helpful to you:
OWA publishing using Kerberos Constrained Delegation
method for authentication delegation
Best regards,
Susie

I uninstalled Firefox and now a setup wizard does not start when I re-download. 64 bit Windows 7

My java stopped working, I reinstalled..Firefox still didn't recognize my java....I decided to reinstall Firefox and now when I download, Firefox will not open it's set up wizard it just extracts data and stops....grrrrrrrrr I run Windows 7 64bit Operating system

Sorry you are having problems.
Could it possibly be any security related software that is preventing this ?
* http://kb.mozillazine.org/Installing_Firefox#Windows
Make sure that you have an official copy of Firefox. Do a clean install BUT make sure you do not use any offer to remove personal data or you will destroy bookmarks and settings. If you have problems try to give the exact error messages so paste them into your reply of attach screen shots.
Certain Firefox problems can be solved by performing a ''Clean reinstall''. This means you remove Firefox program files and then reinstall Firefox. Please follow these steps:
'''Note:''' You might want to print these steps or view them in another browser.
#Download the latest Desktop version of Firefox from http://www.mozilla.org and save the setup file to your computer.
#After the download finishes, close all Firefox windows (click Exit from the Firefox or File menu).
#Delete the Firefox installation folder, which is located in one of these locations, by default:
#'''Windows:'''
#*C:\Program Files\Mozilla Firefox
#*C:\Program Files (x86)\Mozilla Firefox
#Now, go ahead and reinstall Firefox:
##Double-click the downloaded installation file and go through the steps of the installation wizard.
##Once the wizard is finished, choose to directly open Firefox after clicking the Finish button.
WARNING: Do not run Firefox's uninstaller or use a third party remover as part of this process, because that could permanently delete your Firefox data, including but not limited to, extensions, cache, cookies, bookmarks, personal settings and saved passwords. These are difficult to recover unless they have been backed up to an external device!
Lets get Firefox installed then deal with any Java problem.
* What is it that you need Java for ??
 see also http://kb.mozillazine.org/JavaScript_is_not_Java

What are the versions required for JBOSS,JDK and ORACLE to setup the ATG 10.2.

Hi Folks,
Could you please share, What are the versions required for JBOSS, JDK and ORACLE to setup the ATG 10.2.
Thank you.

In case you don't have access to MOS :
JBOSS : 5.1.2 EAP
JDK : 1.6.0_38
ORACLE :
Oracle Exadata5
Oracle 10gR2 (10.2.0.3)
Oracle 10gR2 RAC (10.2.0.3)
Oracle 11gR2 (11.2.0.2.0)
Oracle 11gR2 RAC (11.2.0.2.0)

My hard drive failed and during the setup of Illustrator CS4 on my new hard drive/pc, I was told I had reached the maximum number of licenses

My hard drive failed and during the setup of Illustrator CS4 on my new hard drive/pc, I was told that the maximum # of licenses for my serial number had been reached and so I am unable to install Illustrator on my working computer. This happened a couple of years ago and I called Adobe and they were able to 'reset' things but I don't see any way to talk to someone now to resolve this problem. BTW, I have the failed hard drive slaved in my new computer and am able to access files and such things, but have no way of uninstalling the Illustrator on my old drive. How do I fix this issue?

Contact Adobe Support thru chat and ask them to reset your activations.
For the link below click the Still Need Help? option in the blue area at the bottom and choose the chat option...
Serial number and activation chat support (non-CC)
http://helpx.adobe.com/x-productkb/global/service1.html ( http://adobe.ly/1aYjbSC )

Windows 8.1 and VS2012 SDK get error "Windows Program Compatibility mode is on. Turn it off and then try Setup again."

When trying to install VS2012 SDK on Windows 8.1 get the error "Windows Program Compatibility mode is on. Turn it off and then try Setup again."
See my blog C# Bits | Twitter @sjnaughton Always seeking an elegant solution.

Rick, Have you had any success with this? I'm also trying to run the tfs_VssUpgrade.exe tool on my Windows 8.1 machine and getting the same exception. Greatly appreciate any insight if you were able to get past this issue! Thanks, Steve
Same issue here.
This MS connect thread
is interesting however.
Posted by Microsoft on 9/19/2013 at 2:54 PM
Hello Alxandr,
Thank you for taking the time to submit this issue to Connect. This is a known issue with Windows 8.1 RTM and it will be addressed in a future update of Windows 8.1. In the meantime, you can typically rename the EXE to get it to work correctly.

N and N+1 Setup

Does anyone know where I can find some literature on the N and N+1 setup?

How would you set this network up? The westell can no longer be used, so now all I have is the time capsule and the cable modem. I also have a linksys wrt54gs that I am not using.
Ethernet = >
Wireless = >>>
Basic network configuration: Cable modem > \[WAN port] TC >>> wireless "n" clients, and TC \[LAN port] > WRT54GS >>> wireless "g" clients.
Configuration Considerations:
o The network name for the 2.4 GHz and 5 GHz networks should be identical if you want to let wireless clients roam between the 2.4 & 5 GHz networks ... or you can set the network names to be different to "force" devices to one or the other network.
o The WRT54GS must be reconfigured as a bridge (disable both NAT & DHCP services), but should still be configured as a DHCP client so that it gets its IP address from the TC.
o Configure the TC to "Create a wireless network;" to "Share a public IP address," and for the "802.11n only (5 GHz)" radio mode with "Wide Channels" enabled.

I in need of oracle project costing,project billing and project management setup documents? can you please help me.

I am in need of project costing and project billing and project management setup documents with screen shoot? Can anyone help me?

I have no clue about recovering the info, but when you say you save you should always use Save As. That clears unneeded info from the file. With the file size you have, that may be an important need.

Install windows phone 8.0 sdk on win 10 error Windows Program Compatibility mode is on. Turn it off and then try Setup again.

install windows phone 8.0 sdk on win
10 error Windows Program Compatibility mode is on. Turn it off and then try Setup again.

Also having this issue. I am unable to remove Windows Phone Emulator 8.0 on Windows 10 Technical Preview. Here is the relevant log file output
[6554:4F4C][2014-10-31T13:33:53]: Condition 'NOT (CurrentOperation = "Uninstall")' evaluates to true.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(CurrentOperation = "Install") OR (CurrentOperation = "Repair")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(CurrentOperation = "Install") OR (CurrentOperation = "Repair")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(CurrentOperation = "Install") OR (CurrentOperation = "Repair")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(CurrentOperation = "Install")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(VersionNT < v6.1) OR ((VersionNT = v6.1) AND (NTProductType < 3)) OR (NOT VersionNT64)' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '(VersionNT = v6.2) AND (netfxfullredist_43_DetectKey < v4.5.50709)' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'CompatibilityMode = 0' evaluates to true.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'ProfessionalVersion_DetectKey AND (NOT (ProfessionalVersion_DetectKey = "11.0.50727")) AND (CurrentOperation = "Install")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition '( VS11BETA_MSENV_DLL_EXISTS ) AND ( VS11BETA_MSENV_DLL_VERSION < v11.0.50324.0 ) AND (CurrentOperation = "Install")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'WPExpressVersion_DetectKey AND (WPExpressVersion_DetectKey < v11.0.50727) AND (CurrentOperation = "Install")' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'WPExpressVersion_DetectKey AND (WPExpressVersion_DetectKey = v11.0.50727) AND (CurrentOperation = "Install") AND WPExpressQFEVersion_DetectKey AND (WPExpressQFEVersion_DetectKey < 38)' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'WPExpress10_Exists AND (NOT SameLcidWPExpress10_Exists) AND CurrentOperation = "Install"' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'WPExpress11_Exists AND (NOT SameLcidWPExpress11_Exists) AND CurrentOperation = "Install"' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: Condition 'NOT Privileged' evaluates to false.
[6554:4F4C][2014-10-31T13:33:53]: MUX: Stop Block: CompatibilityMode : Windows Program Compatibility mode is on. Turn it off and then try Setup again.
[6554:4F4C][2014-10-31T13:33:53]: MUX: Detect Completed
[6554:4F4C][2014-10-31T13:33:53]: MUX: Wait for View to be loaded
[6554:40A0][2014-10-31T13:33:53]: MUX: Detect Completed, now create view
[6554:40A0][2014-10-31T13:33:54]: MUX: Validate custom path failed: Empty Install path
[6554:40A0][2014-10-31T13:33:54]: MUX: Validate custom path failed: Empty Install path
[6554:40A0][2014-10-31T13:33:54]: MUX: User feedback control is Enable because opt-in value is NotDefined
[6554:4F4C][2014-10-31T13:33:54]: MUX: View loaded
[6554:4F4C][2014-10-31T13:33:54]: MUX: Go to Blocker page.
[6554:4F4C][2014-10-31T13:33:54]: Detect complete, result: 0x0

Server | communications | ike and ipsec settings

Hi
How important are the settings in monitor regarding Ike and ipsec? I was
having 3rd party site to site issues and started to modify these to try
and resolve issues. It did not seem to help and I am thinking I should
set them back. is there a way to reset them to defaults?
Thanks,
Will

oops I do know.
Would any of these cause an issue?
The number on the left shows current the right shows previous.
I am also getting a lot of ike abends. Not sure if that is related.
IKE AUTHMETHOD 0 1
IKE PFS 1 0
IKE lifetime 7200 300
ipsec hash alg for pss 1 2
ipsec encr alg for pss 2 3
IPSec encap mode 2 1
SA lifetime 7200 1000
And IPSec SA 1 0
ESP Algorithm ID 0 2
AH Algorithm ID 0 2
Thanks,
Craig Johnson wrote:
> Do you remember which ones you changed?
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>

Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again.

I uninstalled all System Center VVM related management Packs, but still received "Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again.".
Think I got them all. But how can I figure out which Management pack is still installed and has to be removed.
Thanks for your reply

Got following logging about this problem.
9/20/2013 9:35:09 AM] * Exception : => Microsoft.EnterpriseManagement.Common.MonitoringException: This method from the System Center Operations Manager 2007 R2 SDK is not supported to work with System Center Operations Manager 2012. Please migrate
to the System Center Operations Manager 2012 SDK.
   at Microsoft.EnterpriseManagement.DataAbstractionLayer.SdkDataAbstractionLayer.HandleIndigoExceptions(Exception ex)
   at Microsoft.EnterpriseManagement.DataAbstractionLayer.TypeSpaceOperations.ImportManagementPack(String managementPackXml, String keyToken, ManagementGroup managementGroup)
   at Microsoft.EnterpriseManagement.ManagementGroup.ImportManagementPack(ManagementPack managementPack)
   at Microsoft.VirtualManager.Setup.Wizard.Configurator.ImportManagementPacks()
[9/20/2013 9:35:09 AM] * Exception : => Setup encountered an error while importing management packs.Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management
packs.Microsoft.VirtualManager.Utils.CarmineException: Setup encountered an error while importing management packs.
Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management packs.
   at Microsoft.VirtualManager.Setup.Wizard.Configurator.ImportManagementPacks()
   at Microsoft.VirtualManager.Setup.Wizard.BackEnd.PreConfigureClientForOpsMgr()
*** Carmine error was: ManagementPackPresent (10208)
[9/20/2013 9:35:09 AM] * Exception : => Setup encountered an error while importing management packs.Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management
packs.Microsoft.VirtualManager.Setup.Exceptions.BackEndErrorException: Setup encountered an error while importing management packs.
Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management packs. ---> Microsoft.VirtualManager.Utils.CarmineException: Setup encountered an error while importing management
packs.
Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management packs.
   at Microsoft.VirtualManager.Setup.Wizard.Configurator.ImportManagementPacks()
   at Microsoft.VirtualManager.Setup.Wizard.BackEnd.PreConfigureClientForOpsMgr()
*** Carmine error was: ManagementPackPresent (10208)
   --- End of inner exception stack trace ---
   at Microsoft.VirtualManager.Setup.Wizard.BackEnd.PreConfigureClientForOpsMgr()
   at Microsoft.VirtualManager.Setup.Wizard.VMInstaller.PreConfigure()
   at Microsoft.VirtualManager.Setup.Wizard.ProgressPage.InstallVm()
   at Microsoft.VirtualManager.Setup.Wizard.ProgressPage.InstallerThreadEntry()
*** Carmine error was: ManagementPackPresent (10208)
[9/20/2013 9:35:09 AM] *** Error : Setup encountered an error while importing management packs.
Uninstall all management packs related to System Center Virtual Machine Manager and then run Setup again. Setup will import the required management packs.
ID: 10208
[9/20/2013 9:35:10 AM] Information : Virtual Machine Manager Administrator Console installation has failed.

VAT and Withholding tax setup for Philippine

Hi ,
Anyone is familiar with the VAT and Withholding tax setup for Philippine.
What is the VAT and WHT config in order to fuilfil the following example.
Appreciate if someone is able to provide me some help on this. Thank you.
Invoice Amount of P 1,120.00 gross of VAT
Services Sales to Private
ENTRY TO RECORD REVENUE          Debit     Credit
Accounts Receivable                                1,120.00
     Vat Consultancy Set-Up                               120.00
     Revenue                                                 1,000.00
ENTRY UPON COLLECTION
Cash in Bank                                                  1,100.00
Taxes Payable - BIR ITR                                 20.00
Vat Consultancy Set-up                               120.00
     VAT Consultancy Payable                               120.00
     Accounts Receivable                            1,120.00

Additional Information
Value Added Tax Reporting:
Advance Return for Tax on Sales/Purchases (VAT Reporting)
Use
In the Philippines, companies are required to submit Bureau of Internal Revenue (BIR) forms 2550M for the monthly (value-added tax) report and 2550Q for the quarterly VAT report. However, these forms also include information not provided by the SAP System, such as advance payments. Using the Advance Return for Tax on Sales and Purchases report, you can print the relevant VAT data and enter it in forms 2550M and 2550Q.
Integration
The report is based on the SAP List Viewer (ALV), which enables you to define your own display variants, according to the BIR requirements listed below.
Activities
To access the report, from the SAP Easy Access screen, choose Accounting --> Financial Accounting --> General Ledger --> Reporting --> Tax Reports --> General --> Advance Return for Tax on Sales/Purchases --> Advance Return for Tax on Sales/Purchases.
You need to make the following settings, in addition to your specific selection criteria:
Under                         Set the following indicator(s)
Output control                         Read address data
Output lists                         Output tax: Line items
                                            Input tax: Line items
You need to define your SAP List Viewer display variant to include the following data on the VAT report, as required by the BIR:
u2022     Reporting company's name and TIN
u2022     Vendor or customer name
u2022     Vendor or customer TIN
u2022     Vendor or customer address
u2022     Document date
u2022     Document number
u2022     Reference number
u2022     Invoice amount
u2022     VAT amount
Withholding tax reports
Generic Withholding Tax Reporting
Use
You use the Generic Withholding Tax Reporting tool to generate withholding tax data for withholding tax reports submitted to the Philippine Bureau of Internal Revenue (BIR) and vendor certificates, as follows:
u2022     BIR form 1601 u2013 Monthly Remittance Return of Income Taxes Withheld
u2022     BIR form 2307 u2013 Certificate of Creditable Tax Withheld at Source
u2022     BIR form 1604 u2013 Annual Information Return of Income Tax Withheld on Compensation, Expanded and Final Withholding Taxes
Features
SAP delivers standard report variants and Smart Forms for each of the reports and the certificate, which are listed below.
SAP also provides a display variant for the output lists, 1SAP, which you can specify under Output control and lists in the Display variant column.
BIR 1601
SAP provides withholding tax data for page 3 of the form. The form comprises three sections u2013 expanded withholding tax, final tax based on the regular rate, and final tax based on treaty rates. Within each of these sections, the data is summarized according to the nature of the income payment (ATC code). For more information, see Withholding Tax Code.
The predefined report variant for BIR 1601 is SAP&PH_1601, and the Smart Form is IDWTCERT_PH_1601.
BIR 2307
The predefined report variant for BIR 2307 is SAP&PH_2307, and the Smart Form is IDWTCERT_PH_2307.
BIR 1604
You use BIR form 1604 to report expanded and final withholding tax for all nonemployee transactions.
SAP provides the three required sections of form 1604: alphalists 3, 4 and 5 (schedules):
Section of BIR 1604 -DESCRIPTION - Predefined report variant - Smart Form
Alphalist 3     Payables subject to expanded withholding tax     SAP&PH_1604-3     IDWTCERT_PH_1604_SCHEDULE3
Alphalist 4     Payees subject to final withholding tax     SAP&PH_1604-4     IDWTCERT_PH_1604_SCHEDULE4
Alphalist 5     Other payees whose income payments are exempt from withholding tax issued but subject to income tax     SAP&PH_1604_5     IDWTCERT_PH_1604_SCHEDULE5
Prerequisites
For each withholding tax report, note the required Customizing settings for the corresponding output group.
Activities
To access the report, from the SAP Easy Access screen, choose Accounting --> Financial Accounting -->Accounts Receivable --> Withholding Tax --> Generic Withholding Tax Reporting.
The Generic Withholding Tax Report has several options for reporting.
The report can be run without the Output Group field populated, or it can be run with one of the PH1 to PH5 options as it relates to the reporting forms/requirements
Hope this piece of information is helpful to you.

Can a Cisco 2600 router do PPTP,L2TP, and IPSec?

General question.

2600 supports L2TP and PPTP with MPPE with an IP PLUS version, and IPsec with a firewall version.

"How are local and state taxes setup/updated when employee's address change

Hi All
I wanted to know "How are local and state taxes setup/updated when employee's address changes . - How is it done in SAP? -
Thanks in Advance

This defeats the purpose of trying to centralize SAP-related web resources on the SAP server. Typically IIS/Apache or other non-SAP servers are under the control of IT and not the SAP BASIS group.
We simply would like to have a centralized location to store static web files so that they are not overwritten during Portal support pack applications.

IDSM2 and IPSEC-2G setup

Similar Messages

Maybe you are looking for