IKE initiator and respnder

                hi everyone,
If IPSEC  VPN is running between two sites how can we tell which site was IKE initiator and  responder?
If both sites are big sites.
Thanks
Mahesh  

Hello Mahesh,
First answer was how to check who is initiator on ASA.
In case of router
You can do "sh cry isa sa"
R2#sh cry isa sa
IPv4 Crypto ISAKMP SA
dst             src             state          conn-id status
10.10.10.2      10.10.10.1      QM_IDLE           7018 ACTIVE
10.10.10.1      10.10.10.2      MM_NO_STATE       7017 ACTIVE (deleted)
Owner of ip address in the column src is initiator
Best Regards,
Eugene

Similar Messages

  • PIX ipsec problem : 713042 : IKE initiator unable to find policy

    Hello,
    I have a LAN to LAN between PIX 7.0(4).2 and one 2811 with IOS.
    We are using the ipsec tunnel for voice, and some calls are dropping after one minute.
    I can see the following message from PIX when calls get dropped :
    713042 : IKE initiator unable to find policy: Intf1, Src:172.18.2.10, Dst:172.22.0.10
    172.18.2.10 -> ccme router at hq office ( PIX side )
    172.22.0.10 -> ccme router at branch office ( IOS side )
    Do you have any idea ??
    Thanks a lot.
    Best regards.
    Ricard

    I think the issue is with Queuing. Low latency queueing (LLQ) does not drop packets after configuration changes. If the configured LLW burst size is changed in a policy map that is attached to an interface but the configured LLQ bandwidth is not changed, priority queueing (PQ) will stop dropping packets. If the traffic going through PQ is much greater than the configured bandwidth, the minimum bandwidth guarantees of the classes are not met.
    Workaround: Remove and re-attach the service policy

  • Authorization on initiative and item creation

    Hello!
    Dear Experts,
    Could you please comment on back-end RPM role customizing and front-end object authorization to do the following:
    1. the portfolio structure of buckets contains two sections on the fists level: the first of them is to assign initiativs and the second is to assign portfolio items, items are assigned to initiatives.
    2. the user should:
    - read all of the initiatives in the first bucket
    - create new initiatives and change just initiatives created by him or he is allowed to change in front-end object authorization
    - of item of initiatives with read authorization at Item Dashboard of the second bucket the user should see (read) just items of initiative of the first bucket
    - the user first creates initiative and then items of initiative. initiatives should be assigned to the first bucket and items to the second bucket.
    3. back-end role should allow to read create and write items and initiatives of 2 from 5 Category values. And when user creates and changes initiative/item data then he should see just 2 from 5 Category values.
    We implemented notes 1382703 and 1235897 but it didn't solved the problem.
    We are implementing RPM 4.5.
    Best regards,
    Valerie

    Hi Rohan,
    Have you tried:
    Administration -> System Initialisation -> Authorizations -> General Authorizations:
    Authurisation Window: General -> Close Document = No Authorisation.
    This will block the user from closing documents in the open Item list but also from other menu points.
    Hope it helps.
    Jesper

  • Customizing Paging File: what is the recommended initial and maximum size?

    Hi everyone, and Harm,
    Following Harm's response to my question about how to setup disks, Harm said this:
    "disk allocation: It is a three stage process, first you define the boot order in the BIOS, then you format the disks inWindows and allocate drive letters, then still in Windows you setup the pagefile. Then the allocation of media cache, preview, project etc. is done in the preferences and project setup of PR."
    and I have a question about paging file.
    First let me say describe my new machine, it has a 4 disc setup, no RAID, 16GB RAM, with OCZ-Vertex3 for OS & Programs, i.e. i have installed Windows 7 Ultimate 64bit on this disc, and Web Premium CS5 and Acrobat Pro 9. In BIOS, i have made the OCZ (OS) disk, be the priority in the Boot order.
    Later, after verifying the system is in working order, i will upgrade to Classic Collection CS5.5, so at this point, i have named my 3 additional disks as such,
    WDC WD 2002FAEX-007BA0 - "Media Projects(D)"
    WDC WD 1002FAEX-00Y9A0 - "Pagefile, Media Cache (E)"
    WDC WD 1002FAEX-00Y9A0 - "Previews, Exports(F)"
    So, for now these are simply names, which i have given to the various disks, and now i am changing the paging file, switching it from happening in the OS disk, in order to happen inthe disk which (via Premier, later) will be designated for Media Cache.
    So, in Windows Performance Options pane, I went to Advanced tab, & under Virtual memory I hit "change", uncheck Automatically manage paging file size for all drives, select drive E, which is the disk that's to have the paging file happen in it.
    And the question, assuming that i am supposed to select Custom size, can you Harm, or/and others, please recommend the Initial and Maximum sizes?
    Or, should i select "System managed size"?
    Thanks:)

    http://lifehacker.com/5426041/understanding-the-windows-pagefile-and-why-you-shouldnt-disa ble-it
    Keep in mind Video/Animation applications use more ram now than almost any other type and there are far more memory hungry services running in the background as well. Consider the normal recommendations are for standard applications. HD material changed far more than just the need for 64Bit memory addressing.
    Eric
    ADK

  • DBI Initial and Incremental request sets

    Dear All,
    We have installed EBS R12 vision instance as well as Blank instance(2 different instances)
    As we have one utility in EBS R12 i.e DBI (Daily Business Intelligence) and there are so many Initial and Incremental request sets to populate the materilized views and summary tables for fiancials, HRMS, procurment etc.
    We can see these request sets in EBS R12 vision instance however we are not able to see these request sets in blank instance.
    So my question is that do we have to enable or is there any configuration or setup to view those request sets in DBI or we have to create all the request sets manually in blank instance.
    Thanks in advance.
    Regards,
    Tarang Jain

    Tarang,
    Please refer to [Oracle Daily Business Intelligence Implementation Guide|http://download.oracle.com/docs/cd/B40089_09/current/acrobat/120dbiig.zip], Page 2-74 -- Create Initial and Incremental Request Sets.
    Regards,
    Hussein

  • Are there any apps which will allow local calling using data only that do not require any special numbers called out initially and does not require the receiver to have a similar app or account?

    Are there any apps which will allow local calling using data only (not minutes, no extra charge) that do not require any special numbers called out initially and does not require the receiver to have a similar app or account?  Just for random local calling.

    Yup.
    Here is a way you could solve this by adding an extra column and a small lookup table:
    The lookup table is here for the copying:
    0
    1
    k
    kilo
    2
    M
    mega
    3
    G
    giga
    4
    T
    tera
    5
    P
    peta
    6
    E
    exa
    7
    Z
    zetta
    8
    Y
    yotta
    In table 8 (the one on the left in the image) column A is where the values are. 
    B1=A1÷(1024^VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 1))&" "&VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 2)&"B"
    this is shorthand for... select cell B1, then type (or copy and paste from here) the formula:
    =A1÷(1024^VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 1))&" "&VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 2)&"B"
    select cell B1, copy,
    now select all the cells in column B, paste

  • How to determine an initiator and responder in L2L - IPSEC VPN

    Hi Guys,
    One of the client im working on has requested me to change the inititator from site A to site B. Currently, Site A is the initiator and  Site B is the responder. The reason is the client could not access any sub-client site from Site A. In case the tunnel goes down, they want Site B to initiate traffic to Site A. I am not sure how to change a VPN tunnel to be a initiator(site b) and responder(site a) accordingly or is this an automated process. I understand that it doesnt matter since however, it still nedds to negotiate SA and policies for tunnel establishment, but is there a manual way for doing it via ACL or ISAKMP policy? Or is there any parameters we can set to control this?
    Both firewalls is ASA 5500 Series (5520).
    Please help. Appreciate it.
    Thank you.

    Hey,
    Thanks a ton for posting this out here. I am sure it will be helpful for people trying this out.
    Regards,
    Prapanch

  • [svn:osmf:] 14928: Fix bug FM-468: Initial and max indices not being respected for RTMP MBR.

    Revision: 14928
    Revision: 14928
    Author:   [email protected]
    Date:     2010-03-22 17:35:43 -0700 (Mon, 22 Mar 2010)
    Log Message:
    Fix bug FM-468: Initial and max indices not being respected for RTMP MBR.
    Ticket Links:
        http://bugs.adobe.com/jira/browse/FM-468
    Modified Paths:
        osmf/trunk/framework/OSMF/org/osmf/net/NetStreamSwitchManager.as
        osmf/trunk/framework/OSMFTest/org/osmf/net/TestNetStreamSwitchManager.as

  • "Incompatiable initial and maximum heap sizes specified" error

    Hi,
    Using the command below:
    java -jar -Xms128m myjar.jar
    I get the following errors:
    "Error occurred during initialization of VM"
    "Incompatiable initial and maximum heap sizes specified"
    but if I take off the initial heap size parameter, just run:
    java -jar myjar.jar
    it works fine apart from that the heap size is not desired.
    Can anyone please tell me what's the cause of the problem here? I'm suspecting the JVM has been configured to restrict manual adjustment of heap sizes...
    Many thanks.

    Hi,
    Using the command below:
    java -jar -Xms128m myjar.jar
    I get the following errors:
    "Error occurred during initialization of VM"
    "Incompatiable initial and maximum heap sizes
    specified"
    but if I take off the initial heap size parameter,
    just run:
    java -jar myjar.jar
    it works fine apart from that the heap size is not
    desired.
    Can anyone please tell me what's the cause of the
    problem here? I'm suspecting the JVM has been
    configured to restrict manual adjustment of heap
    sizes...
    Many thanks.It turns out that I need to also specify the maximum heap size as well. Thanks.

  • Lost objectives, initiatives and milestones in SSM

    I have lost the objectives, initiatives and milestones after delete the application group.
    We have created a demo enviroment for a client demo.
    Created the context, application groups, perspectives, objectives, initiatives and milestones in SSM Administrator's user interface.
    Initiatives are created with the correspondings applications groups.
    We realized that the applications groups weren't linked with any the SAP Netweaver UME system group. Then we deleted the applications groups in SSM Administrator's user interface in order to create them correctly.
    After that we see that the objectives, initiatives and milestones don't appear in the SSM > Initiatives tab. The strange thing is that we can see objectives and initiatives when clicking on the goal diagram.
    We think that after deleting the application group the values where deleted from the initiatives, milestones, etc.
    How can we recover initiatives, milestones, etc?

    Thank you for your answer Bob.
    I would like to update the information posted. I only lost initiatives and milestones (not objectives) after delete an application group.
    I understand when you say if you delete an application group you loose initiatives asociated to. It was what happened to me. But the strange thing is that although the initiatives aren't in the Initiatives tab I am still seeing them when I clicking on the goal diagram.
    If I click on the initiative link on the goal diagram a error message appears: "Cannot display linked inititative contact your System administrator. Initiative may have been deleted, or you may not have permission to view it".
    Do you know how it is possible to view the "old initiatives" in the goal diagram if they were deleted? Are the initiaves still saved in the server?
    Regards,
    Santiago

  • Maintenance package in strategy : 'initial'  and 'subsequent' fields

    Hello experts,
    When creating a maintenance package :
    'Initial' (Lead Float) and 'subsequent' (Follow-up float) : what those fields are for ? SAP help does not help me much. Explanations with examples would be great.
    Thanks in advance

    Hi Sundar,
    In my first test : my strategy was 1M and 3M but i had only entered initial and subsequent values for 1M (and not for 3M).
    In the second test , i updated my strategy : now 1M and 3M have inital (2days) and subsequent (4days) values. Then I created another maintenance plan :
    -call horizon :100%
    -scheduling horizon : 1year
    -start of cycle : 10 May 2009 , so 1rst call will be for today (10 June)
    With
    -General task list : duration of (only one) operation is 10 hours
    -Work center capacity :
    Start                10:00:00
    Finish               18:00:00
    Length of breaks     01:00:00
    Operating time       7.00   
    After scheduling , the order generated shows:
    Bsc start  => 08.06.2009     
    Basic fin. => 09.06.2009     
    SchedStart 08.06.2009 10:00
    Sched.Fin. 09.06.2009 13:25
    Basic finish date is still on 9 june...any ideas?
    Thanks,

  • IPhone: which IKE proposal and which SA for cert auth

    Dear all,
    does anyone know which IKE proposal and which SA I need to manufacture to achieve certificate authentication with iPHONE and a VPN3000?
    I mean technically it must work, isn't it?
    --Joerg

    Under : Configuration\Policy Management\Traffic Management\SAs
    You will find the IPSec Proposals, not IKE. For IKE proposals, you need to go to :
    Configuration | Tunneling and Security | IPSec | IKE Proposals
    There you need to check if your proposal is in active proposals list or not. If not, you have to add it to Active Proposals.
    Hope this helps.

  • WDA - Making group invisible initially and the visble

    Dear All,
    My current situation is that I have a group which contains several labals and several input fields.
    I would like to make all the above mentioned invisible initially and then on the click of a link to action the whole set should become visible.
    Can this be done without creating attributes for each of the ui elements including the labels and inputfields....
    Please help....
    Thanks in advance.........

    Hi Nisha,
    You have got a Group element inside which you have your Labels and Input fields right.
    Now create an attribute in your context with name "IS_VISIBLE" of type wdy_boolean.
    Now come to the layout tab and bind this attribute to the VISIBLE property of the Group Element.
    In your WDDOINIT.
    if the context node name is "VISIBILITY" and attribute name is "IS_VISIBLE"
    Lo_visb = wd_context->get_child_node( 'VISIBILITY' ).
        CALL METHOD lo_visib->set_attribute
    EXPORTING
       value  =  abap_false
       name   = 'IS_VISIBLE'.
    in your on action method set it to abap_true.
    Hope this helps.
    Regards,
    Ismail.

  • Incompatible initial and maximum heap sizes specified

    At first my program was crashing, saying;
    java.lang.OutOfMemoryError: Java heap space
    So I added this vm argument: -Xms128M
    Now, i get this message:
    Incompatible initial and maximum heap sizes specified
    What do I do?

    At first my program was crashing, saying;
    java.lang.OutOfMemoryError: Java heap space
    So I added this vm argument: -Xms128M
    Now, i get this message:
    Incompatible initial and maximum heap sizes
    specified
    What do I do?Specify a maximum heap size (-Xmx) as well (and make that be greater than or equal to the minimum size).

  • Reg:if not itab [ ] is initial and if itab[ ] is initial

    Hi
    Any one explain what is difference for
    if not itab [] is initial and if itab[] is initial
    regards,
    maya

    Hi,
    if not itab[] is initial.  will be successful only when there is atleast 1 record in itab
    if itab[] is initial.      will be successful only when itab is not having a single record.
    Thanks
    Sandeep
    Reward if helpful

Maybe you are looking for