IP Protocol 50

Does anyone know how to get a Time Capsule running 7.4.2 to forward protocol 50 to an address inside the network?
I have already set up dhcp to hand out addresses based on MAC address so the IP changing internally isn't an issue, and I've already set up port forwarding. I just need to forward a protocol too.

TRENDnet TEW-633GR definitely and possibly some of their lesser models will forward on protocol number as I found today when checking mine to set up VPN. I've had mine for some time and it is very configurable on port forwarding also, for anyone looking at this thread who doesn't want to DMZ a box.

Similar Messages

  • Upload Error message: HTTPS protocol is not supported

    Hi,
       Whenever I do a quick par upload i'm getting an 'Operation failed' message to check sap-plugin.log.
       Log says
    Upload Error message: HTTPS protocol is not supported, please ensure this server is not using HTTPS. My webdynpro applications are getting deployed without any issues.
         How to resolve this?
    Thanks
    Sumathi

    Hi Sumathi,
    As there are often problems with the Quick PAR Upload reported, I would suggest to use the "normal" PAR upload from the icon tray (you have to activate the portal icons in the icon tray). That is almost that "quick" (one or two clicks more needed, we don't talk about more than a second) and - it works (it least it should, and at least it works in most cases even if the Quick PAR Upload fails).
    Hope it helps
    Detlev

  • Best printing protocol for hp Laserjet printer?

    I have a small office network of 12 computers running 10.4.11 and 10.5.6 and 2 hp Laserjet printers. I have historically used Bonjour to set-up the printers, but have found that periodically the users cannot print because the printer cannot be found. This seems to happen randomly or if the ethernet is ever unplugged/plugged into the printer. I have to delete the printer and re-add it to return to normal functionality. Obviously a pain for multiple computers. I've recently explored the use of the IP printing to these same printers using "IPP', "LPD", and "HP Jetdirect Socket" and the printers IP address on the network. This set-up seems to be more resilient to changes, however, I do not know enough about the different protocols to make an educated decision on which is the best for this environment. I have found that I can print remotely when connected to the VPN through these protocols.
    Can someone please advise which protocol would be best suited (and why)?
    Thanks

    Thanks.
    Out of curiosity...why LDP over IPP? What is the difference? I've tried both, and can't tell a difference. Not sure if one is a newer protocol?

  • How to determine the protocol to use in Sender mail Adapter ?

    Hi All
    Can i use my Microsoft Exhange Server address while configuring Sender Mail Adapter .? If yes , then which protocol i can use out of IMAP and POP ?..
    How do i determine which protocol i should use to connect to my exchange server ?
    Thanks
    rohan

    Hi Rohan,
    //Can i use my Microsoft Exhange Server address while configuring Sender Mail Adapter .?
    Yes, you can.
    //If yes , then which protocol i can use out of IMAP and POP ?..
    You can use either of them. To know more on IMAP and POP, i would suggest you go through these links,
    http://www.trincoll.edu/depts/cc/documentation/email/IMAP_vs_POP/default.htm
    http://www.imap.org/papers/imap.vs.pop.brief.html
    If your are using IMAP, you will have to specify, which folder from which you wnaty the emmail to be retrived, this is not needed for POP.
    Hope this helps,
    Regards,
    bhavesh

  • The Bluetooth low energy protocol is not backward compatible with classic Bluetooth protocol. My iPhone 4s can not find my sonny in-dash player. However my iPhone 3GS does it. Very disappointed with this. Any idea how it can be fixed???

    The Bluetooth low energy protocol is not backward compatible with classic Bluetooth protocol.
    My iPhone 4s can not find my sonny in-dash player. However my iPhone 3GS does it. Very disappointed with this.
    Any idea how it can be fixed??????

    Hello,
    You are correct, Blue tooth low engergy, BTLE.(only) devices are not backward compatible with Classic bluetooth and cannot connect.
    However the Apple 4S and above have Bluetooth 4.0 support.. Hardware wise it has bothClassic Bluetooth, like the 3GS, as well as Bluetooth Low Energy.  There is no good reason why your 4s cannot communicate to your Sony in-dash player using the Classic bluetooth that resides in the 4S.
    I know that this does not answer the why it does not work, but it should work. Do you have to somehow re-pair the new phone up to the player?  Not  knowing the model of the Sony it is hard to investigate.
    And I hate to ask but are you sure that the Bluetooth radio is on in the phone?
    JT

  • Error reading project file : no protocol

    I have followed the instructions exactly as in the j2ee tutiorial ,but, when I run asant , an error occurs:
    : Error reading project file : no protocol: ../../common/targets.xml
    Urgent!

    Could you please provide a bit more detail such as which sample you are using? Also are you using the latest version of the tutorial and have you configured your build.properties in the samples/common directory?

  • What is difference between transport protocol and message protocol

    what is difference between transport protocol and message protocol
    please give definition and small explanation

    Hi,
    Transport protocol gives information about outside of message details, kind of system, security details.
    A transport protocol is a network protocol that has the capability of transferring some payload from one node to another, thus providing some level of transparency from the underlying network.
    Transport protocols are used as a mechanism to move payloads around a network. Typically, a payload will have a transport binding associated with it. For example, SOAP (acting as a payload) has a predetermined binding for HTTP (a transport protocol).
    Some common transport protocols include: HTTP, HTTP-R, SMTP and BEEP.
    Message protocol gives you an idea of message type XI payload
    http://help.sap.com/saphelp_nw04/helpdata/en/b6/0b733cb7d61952e10000000a11405a/content.htm

  • Using socket and JMS protocol in the same logic for OSB

    Hi frnds,
    In my organization...the only communication protocol used is "socket" protocol. However, I want to use JMS protocol to process incoming messages. Can somebody help me figuring out how to go about it.
    Using some nice OSB blogs, I am able to create the JMS connection factory and JMS queues in weblogic. And that works fine when I select the communication protocol as JMS while creating the BS and PS.
    What should be my message flow when the communication protocol used is "socket" for both BS and PS.
    salil

    Hi,
    Make the BS as JMS and the PS as socket, in the PS's flow do a route for the BS... Then if an external call is made to the PS via socket, it will send a messages to a JMS queue...
    Hope this helps...
    Cheers,
    Vlad

  • Protocol Error, WL 5.10 Sp10 with Oracle 8.1.7 on Solaris 8

    When i start the weblogic server the server can't make a connection Pool to the
    oracle 8.1.7 dbms. When i try with the same configuration to connect to an oracle
    8.1.5 dbms the server create an connection pool.
    The errornessage is following text
    java.sql.SQLException: Protocol violation
    at java.lang.Throwable.fillInStackTrace(Native Method)
    at java.lang.Throwable.fillInStackTrace(Compiled Code)
    at java.lang.Throwable.<init>(Compiled Code)
    at java.lang.Exception.<init>(Compiled Code)
    at java.sql.SQLException.<init>(SQLException.java:82)
    at oracle.jdbc.dbaccess.DBError.check_error(DBError.java:639)
    at oracle.jdbc.ttc7.O3log.receive2nd(Compiled Code)
    at oracle.jdbc.ttc7.TTC7Protocol.logon(TTC7Protocol.java:218)
    at oracle.jdbc.driver.OracleConnection.<init>(OracleConnection.java:156)
    at oracle.jdbc.driver.OracleDrweblogic.jdbc.connectionPool.dpwnPool=\
    url=jdbc:oracle:thin:@DB:dpwn,\
    driver=oracle.jdbc.driver.OracleDriver,\
    initialCapacity=5,\
    maxCapacity=100,\
    allowShrinking=true,\
    shrinkPeriodMins=15,\
    testTable=dpwn_test,\
    refreshTestMinutes=1,\
    testConnsOnReserve=true,\
    props=user=*****;password=*****
    iver.getConnectionInstance(OracleDriver.java:231)
    the oracledriver in the weblogic.properties
    I don't now what else i can try to make an connection pool

    You mean that I can install isqlplus from oracle9i into my oracle8.1.7.You would need to install into a new Oracle9i-only directory (i.e. a
    new ORACLE_HOME). The iSQL*Plus in it would be able to connect to
    your existing 8.1.7 database using Oracle Net.
    Unfortunately I see 9i is not supported on Solaris x86 (though 10g is
    "projected".)
    The French iSQL*Plus 8.1.7 document you refer to talks about the first
    pre-production version of iSQL*Plus released. It cannot be
    recommended for use, and is no longer available.
    -- CJ

  • Virtual Mail Setup - imapd-ssl error unknown protocol

    Hi,
    I have been relentlessly trying to setup my first email server and I think that I am almost there. I have been following the guide at:
    https://wiki.archlinux.org/index.php/Simple_Virtual_User_Mail_System
    I have followed it step by step and I'm 99% sure that I didn't miss a thing when setting it up.
    However, I cannot login to my roundcube mail. It just times out.
    This is the error that pops up in /var/log/mail.log:
    mail imapd-ssl: couriertls: accept: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
    this is the contents of /etc/authlib/authmysqlrc:
    ##VERSION: $Id: authmysqlrc,v 1.20 2007/10/07 02:50:45 mrsam Exp $
    # Copyright 2000-2007 Double Precision, Inc. See COPYING for
    # distribution information.
    # Do not alter lines that begin with ##, they are used when upgrading
    # this configuration.
    # authmysqlrc created from authmysqlrc.dist by sysconftool
    # DO NOT INSTALL THIS FILE with world read permissions. This file
    # might contain the MySQL admin password!
    # Each line in this file must follow the following format:
    # field[spaces|tabs]value
    # That is, the name of the field, followed by spaces or tabs, followed by
    # field value. Trailing spaces are prohibited.
    ##NAME: LOCATION:0
    # The server name, userid, and password used to log in.
    MYSQL_SERVER localhost
    MYSQL_USERNAME postfix_user
    MYSQL_PASSWORD *******MY PASSWORD*******
    ##NAME: SSLINFO:0
    # The SSL information.
    # To use SSL-encrypted connections, define the following variables (available
    # in MySQL 4.0, or higher):
    # MYSQL_SSL_KEY /path/to/file
    # MYSQL_SSL_CERT /path/to/file
    # MYSQL_SSL_CACERT /path/to/file
    # MYSQL_SSL_CAPATH /path/to/file
    # MYSQL_SSL_CIPHERS ALL:!DES
    ##NAME: MYSQL_SOCKET:0
    # MYSQL_SOCKET can be used with MySQL version 3.22 or later, it specifies the
    # filesystem pipe used for the connection
    # MYSQL_SOCKET /var/mysql/mysql.sock
    ##NAME: MYSQL_PORT:0
    # MYSQL_PORT can be used with MySQL version 3.22 or later to specify a port to
    # connect to.
    MYSQL_PORT 3306
    ##NAME: MYSQL_OPT:0
    # Leave MYSQL_OPT as 0, unless you know what you're doing.
    MYSQL_OPT 0
    ##NAME: MYSQL_DATABASE:0
    # The name of the MySQL database we will open:
    MYSQL_DATABASE postfix_db
    #NAME: MYSQL_CHARACTER_SET:0
    # This is optional. MYSQL_CHARACTER_SET installs a character set. This option
    # can be used with MySQL version 4.1 or later. MySQL supports 70+ collations
    # for 30+ character sets. See MySQL documentations for more detalis.
    # MYSQL_CHARACTER_SET latin1
    ##NAME: MYSQL_USER_TABLE:0
    # The name of the table containing your user data. See README.authmysqlrc
    # for the required fields in this table.
    MYSQL_USER_TABLE mailbox
    ##NAME: MYSQL_CRYPT_PWFIELD:0
    # Either MYSQL_CRYPT_PWFIELD or MYSQL_CLEAR_PWFIELD must be defined. Both
    # are OK too. crypted passwords go into MYSQL_CRYPT_PWFIELD, cleartext
    # passwords go into MYSQL_CLEAR_PWFIELD. Cleartext passwords allow
    # CRAM-MD5 authentication to be implemented.
    MYSQL_CRYPT_PWFIELD password
    ##NAME: MYSQL_CLEAR_PWFIELD:0
    # MYSQL_CLEAR_PWFIELD clear
    ##NAME: MYSQL_DEFAULT_DOMAIN:0
    # If DEFAULT_DOMAIN is defined, and someone tries to log in as 'user',
    # we will look up 'user@DEFAULT_DOMAIN' instead.
    # DEFAULT_DOMAIN example.com
    ##NAME: MYSQL_UID_FIELD:0
    # Other fields in the mysql table:
    # MYSQL_UID_FIELD - contains the numerical userid of the account
    MYSQL_UID_FIELD 5000
    ##NAME: MYSQL_GID_FIELD:0
    # Numerical groupid of the account
    MYSQL_GID_FIELD 5000
    ##NAME: MYSQL_LOGIN_FIELD:0
    # The login id, default is id. Basically the query is:
    # SELECT MYSQL_UID_FIELD, MYSQL_GID_FIELD, ... WHERE id='loginid'
    MYSQL_LOGIN_FIELD username
    ##NAME: MYSQL_HOME_FIELD:0
    MYSQL_HOME_FIELD "/home/vmail"
    ##NAME: MYSQL_NAME_FIELD:0
    # The user's name (optional)
    MYSQL_NAME_FIELD name
    ##NAME: MYSQL_MAILDIR_FIELD:0
    # This is an optional field, and can be used to specify an arbitrary
    # location of the maildir for the account, which normally defaults to
    # $HOME/Maildir (where $HOME is read from MYSQL_HOME_FIELD).
    # You still need to provide a MYSQL_HOME_FIELD, even if you uncomment this
    # out.
    MYSQL_MAILDIR_FIELD maildir
    ##NAME: MYSQL_DEFAULTDELIVERY:0
    # Courier mail server only: optional field specifies custom mail delivery
    # instructions for this account (if defined) -- essentially overrides
    # DEFAULTDELIVERY from ${sysconfdir}/courierd
    # MYSQL_DEFAULTDELIVERY defaultdelivery
    ##NAME: MYSQL_QUOTA_FIELD:0
    # Define MYSQL_QUOTA_FIELD to be the name of the field that can optionally
    # specify a maildir quota. See README.maildirquota for more information
    MYSQL_QUOTA_FIELD quota
    ##NAME: MYSQL_AUXOPTIONS:0
    # Auxiliary options. The MYSQL_AUXOPTIONS field should be a char field that
    # contains a single string consisting of comma-separated "ATTRIBUTE=NAME"
    # pairs. These names are additional attributes that define various per-account
    # "options", as given in INSTALL's description of the "Account OPTIONS"
    # setting.
    # MYSQL_AUXOPTIONS_FIELD auxoptions
    # You might want to try something like this, if you'd like to use a bunch
    # of individual fields, instead of a single text blob:
    # MYSQL_AUXOPTIONS_FIELD CONCAT("disableimap=",disableimap,",disablepop3=",disablepop3,",disablewebmail=",disablewebmail,",sharedgroup=",sharedgroup)
    # This will let you define fields called "disableimap", etc, with the end result
    # being something that the OPTIONS parser understands.
    ##NAME: MYSQL_WHERE_CLAUSE:0
    # This is optional, MYSQL_WHERE_CLAUSE can be basically set to an arbitrary
    # fixed string that is appended to the WHERE clause of our query
    # MYSQL_WHERE_CLAUSE server='mailhost.example.com'
    ##NAME: MYSQL_SELECT_CLAUSE:0
    # (EXPERIMENTAL)
    # This is optional, MYSQL_SELECT_CLAUSE can be set when you have a database,
    # which is structuraly different from proposed. The fixed string will
    # be used to do a SELECT operation on database, which should return fields
    # in order specified bellow:
    # username, cryptpw, clearpw, uid, gid, home, maildir, quota, fullname, options
    # The username field should include the domain (see example below).
    # Enabling this option causes ignorance of any other field-related
    # options, excluding default domain.
    # There are two variables, which you can use. Substitution will be made
    # for them, so you can put entered username (local part) and domain name
    # in the right place of your query. These variables are:
    # $(local_part), $(domain), $(service)
    # If a $(domain) is empty (not given by the remote user) the default domain
    # name is used in its place.
    # $(service) will expand out to the service being authenticated: imap, imaps,
    # pop3 or pop3s. Courier mail server only: service will also expand out to
    # "courier", when searching for local mail account's location. In this case,
    # if the "maildir" field is not empty it will be used in place of
    # DEFAULTDELIVERY. Courier mail server will also use esmtp when doing
    # authenticated ESMTP.
    # This example is a little bit modified adaptation of vmail-sql
    # database scheme:
    # MYSQL_SELECT_CLAUSE SELECT CONCAT(popbox.local_part, '@', popbox.domain_name), \
    # CONCAT('{MD5}', popbox.password_hash), \
    # popbox.clearpw, \
    # domain.uid, \
    # domain.gid, \
    # CONCAT(domain.path, '/', popbox.mbox_name), \
    # domain.quota, \
    # CONCAT("disableimap=",disableimap,",disablepop3=", \
    # disablepop3,",disablewebmail=",disablewebmail, \
    # ",sharedgroup=",sharedgroup) \
    # FROM popbox, domain \
    # WHERE popbox.local_part = '$(local_part)' \
    # AND popbox.domain_name = '$(domain)' \
    # AND popbox.domain_name = domain.domain_name
    ##NAME: MYSQL_ENUMERATE_CLAUSE:1
    # {EXPERIMENTAL}
    # Optional custom SQL query used to enumerate accounts for authenumerate,
    # in order to compile a list of accounts for shared folders. The query
    # should return the following fields: name, uid, gid, homedir, maildir, options
    # Example:
    # MYSQL_ENUMERATE_CLAUSE SELECT CONCAT(popbox.local_part, '@', popbox.domain_name), \
    # domain.uid, \
    # domain.gid, \
    # CONCAT(domain.path, '/', popbox.mbox_name), \
    # CONCAT('sharedgroup=', sharedgroup) \
    # FROM popbox, domain \
    # WHERE popbox.local_part = '$(local_part)' \
    # AND popbox.domain_name = '$(domain)' \
    # AND popbox.domain_name = domain.domain_name
    ##NAME: MYSQL_CHPASS_CLAUSE:0
    # (EXPERIMENTAL)
    # This is optional, MYSQL_CHPASS_CLAUSE can be set when you have a database,
    # which is structuraly different from proposed. The fixed string will
    # be used to do an UPDATE operation on database. In other words, it is
    # used, when changing password.
    # There are four variables, which you can use. Substitution will be made
    # for them, so you can put entered username (local part) and domain name
    # in the right place of your query. There variables are:
    # $(local_part) , $(domain) , $(newpass) , $(newpass_crypt)
    # If a $(domain) is empty (not given by the remote user) the default domain
    # name is used in its place.
    # $(newpass) contains plain password
    # $(newpass_crypt) contains its crypted form
    # MYSQL_CHPASS_CLAUSE UPDATE popbox \
    # SET clearpw='$(newpass)', \
    # password_hash='$(newpass_crypt)' \
    # WHERE local_part='$(local_part)' \
    # AND domain_name='$(domain)'
    I have been reading around about that error to no avail.
    i have extension=openssl.so uncommented in /etc/php/php.ini and round cube says my openssl is fine.
    Any help would be much appreciated!
    kush
    Last edited by kush (2012-01-05 16:49:18)

    Hey Kush I am having the same issue, did you ever get it working???

  • "match protocol sip" has no any match with Polycom HDX SIP Session

    I am working on QoS for Polycom HDX video device。
    Found some strange with command "match protocol sip"
    Config is following:
    class-map match-any cm-prec-3-in
    match access-group name acl-prec-3
    match protocol sip   !--->try to catch the sip traffic
    match protocol rtcp
    match  dscp cs3
    Router#sh policy-map interface vlan 300  input class cm-prec-3-in
    Vlan300
       Service-policy input: pm-classify-in
         Class-map: cm-prec-3-in (match-any)
          789 packets, 294892 bytes
          5 minute offered rate 0 bps, drop rate 0 bps
          Match: access-group name acl-prec-3
            753 packets, 290572 bytes
            5 minute rate 0 bps
         Match: protocol sip  !---> no any sip traffic is matched
            0 packets, 0 bytes
            5 minute rate 0 bps
         Match: protocol rtcp !---> RTCP catched
            36 packets, 4320 bytes
            5 minute rate 0 bps
          Match:  dscp cs3 (24)
            0 packets, 0 bytes
            5 minute rate 0 bps
          QoS Set
            precedence 3
              Packets marked 789
    try to show the nbar version:
    sh ip nbar version:                                      
    27  sip                  Mv: 2
          Iv:                cisco-phone - 1
          Iv:                telepresence-control - 1
    42  cisco-phone          Mv: 1
          Iv:                  sip - 2
    Dose that mean this command "match protocol sip" is only supported for Cisco device?
    Try to use ACL to match udp port 5060 for the QoS, and it is working.
    Try to use comster "ip nbar custom" to re-write the nbar and it is doesn't accept.
    Please help to clarify how to use this command.

    Hi Patrick
    I am working on this one as well. I have a UC560 with SIP Trunk provider Les.NET.
    It was working fine until a few weeks ago when something changed on the provider end and broke it. My hunch it is something to do with the SIP REFER.
    http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-express/91535-cme-sip-trunking-config.html
    Here is an excerpt from the above page:
    Call Transfer
    When a call comes in on an SIP trunk to an SCCP Phone or CUE AutoAttendant (AA) and is transferred, the CME by default will send a SIP REFER message to the SP proxy. Most SP Proxy Servers do not support the REFER method. This needs to be configured in order to force the CME to hairpin the call:
    Router(config)#voice service voip
    Router(conf-voi-serv)#no supplementary-service sip refer
    Figure 3 shows the behavior of the CME system with the REFER method disabled.

  • I am using a work laptop and have the same problem. When I try to change the "configure proxy", they only available option is "use this proxy server for all protocols". Could it be that my system administrator blocked me from changing it since they don'

    I am using a work laptop and have the same problem. When I try to change the "configure proxy", they only available option is "use this proxy server for all protocols". Could it be that my system administrator blocked me from changing it since they don't want us to use Firefox.
    == User Agent ==
    Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.4; FNGP_SYS)

    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]
    If it does work in Safe-mode then disable all your extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
    You can use "Disable all add-ons" on the ''Safe mode'' start window.
    You have to close and restart Firefox after each change via "File > Exit" (on Mac: "Firefox > Quit")

  • Delete emails from server after retrieving with IMAP protocol?

    Hi,
    I am using Mail as my email program and have set up my account with IMAP.
    When I use the POP protocol, I get the option to 'Remove copy from server after retrieving message'. When I set up Mail with the IMAP protocol, there is no such an option. The result is that my server inbox is slowly filling up and I manually have to login on my server to delete older messages.
    Is there a setting to automatically remove retrieved messages from my email server using IMAP?
    Thanks for your help.
    Erik

    Dear Thomas,
    Thanks for the clarification! Now I understand the mechanism.
    Still I would like to know if there is a way to automatically remove retrieved messages from the e-mail server. Would it help to automatically move my incoming messages in INBOX to a different mailbox in Mail.app? How would I set this up?
    Thanks for the response!
    Erik

  • SAP PI 7.1 and LU6.2 protocol

    We have a new requirement to integrate SAP PI 7.1 with IBM mainframe using LU6.2 connection protocol. I searched this forum and found that it can be achieved using iWay adapter.  We have interfaces that need to send data from SAP to IBM mainframe and vice-versa.
    What we are not sure is, if we are going use iway adapter... does it requires any software installation on mainframe?
    Our situation is, we are not allowed to do any changes or install on mainframe side. There are already several interfaces connecting IBM mainframe with other IBM systems using LU6.2 protocol. IBM mainframe would do same LU6.2 protocol connection to external system irrespective of SAP or other IBM system.
    -  How does LU6.2 iway adapter works?
    - Does iWay LU6.2 adapter requires any software to be installed on mainframe?
    - Does iWay LU6.2 adapter accommodated incoming LU6.2 connections calls coming from IBM mainframe to SAP PI 7.1?
    Could you please, post your experience with LU6.2 with iway adapter and also help us to understand on above questions.
    Thanks a lot in advance!

    whenever you buy a 3rd party adapter i dont think you will have to do any installation on the application systems.
    You will have the adapter installed on the PI server and which will enable connectivity to the appl. system

  • VPN problem behind ASA5505 -regular translation creation failed for protocol 50

    Dear All,
    I have to connect behind my ASA5505 with an VPN klient to an other site.
    First time i got this failure.
    "Deny protocol 50 src inside:192.168.50.X dst  outside:x.x.x.x by access-group "acl_in" [0x0, 0x0]"
    Than I opened our inside (src 192.168.50.0) network  the UDP 500,4500 TCP 500,4500,10000 and ESP (dest x.x.x.x remote firewall ip).
    access-list acl_in extended permit esp host 192.168.50.0  host x.x.x.x eq isakmp
    access-list acl_in extended permit udp host 192.168.50.0  host x.x.x.x eq 500
    access-list acl_in extended permit eudp host 192.168.50.0  host x.x.x.x eq 4500
    etc.
    After that i could connect for the remote firewall with vpn client but i couldn't reach any PC1s on there side and ping gives back no anwser.
    Deny protocol 50 was solved but i got an other problem:
    "regular translation creation failed for protocol 50 src  inside:192.168.50.X dst outside:x.x.x.x"
    I found somewhere thet lines can help:
    crypto isakmp nat-traversal
    inspect ipsec-pass-thru
    But this wasn't usefull.
    I tried a many thing but i'm stuck.
    Could somebody help me what can i do to solve this problem?
    Thanks for all anwsers!

    The solution was the following for one IP!
    object network x.x.x.x                      (inside IP)
       host x.x.x.x                                  (inside IP)
       nat (inside,outside) static y.y.y.y     (remote IP)

  • B-channel oos and protocol error 510

    Dear all,
    I have some some issue couple of days ago. The telephony system of my client worked well and suddenly the cannot make external calls via E1. I checked the config and for me it seems to be ok. When I checked the SDL file, I can see the B channel out of service error message following by the
    "MGCP PROTOCOL ERROR: <S1/SU1/DS1-0/[email protected]> CRCX error code: 510". They have A CUCM 6.0 and Cisco 2821 as gateway with 12.4 (25f) advance IP service IOS.
    I perform the following actions without success:
    -From the CUCM in the advance service I forced the Bchannel to bring it in service,
    - no mgcp/mgcp, -reboot the CUCM and the Gateway,
    -reset the controller throug CUCM,... in vain.
    They contacted telco and has confirm that everything seems to be ok. Find below the information that can help you to undestand better
    #sh run brief
    Building configuration...
    Current configuration : 4859 bytes
    version 12.4
    service tcp-keepalives-in
    service tcp-keepalives-out
    service timestamps debug datetime msec
    service timestamps log datetime msec localtime show-timezone
    service password-encryption
    service sequence-numbers
    hostname ATD-CCM-GW
    boot-start-marker
    boot-end-marker
    security authentication failure rate 3 log
    security passwords min-length 6
    logging buffered 51200 debugging
    aaa new-model
    aaa authentication login default local
    aaa authentication login local_authen local
    aaa authorization exec default local
    aaa authorization exec local_author local
    aaa session-id common
    clock timezone A 1
    network-clock-participate slot 1
    network-clock-select 1 E1 1/1/0
    ip cef
    ip domain name xx.xxxx.xxx
    ip host ATD-CCM1 10.10.10.100
    ip auth-proxy max-nodata-conns 3
    ip admission max-nodata-conns 3
    isdn switch-type primary-net5
    isdn logging
    voice-card 0
    dspfarm
    dsp services dspfarm
    voice-card 1
    no dspfarm
    no voice call carrier capacity active
    voice rtp send-recv
    voice class codec 1
    codec preference 1 g711ulaw
    codec preference 2 g711alaw
    codec preference 3 g729br8 bytes 40
    voice class h323 1
    h225 timeout tcp establish 3
    crypto pki trustpoint TP-self-signed-635937996
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-635937996
    revocation-check none
    rsakeypair TP-self-signed-635937996
    crypto pki certificate chain TP-self-signed-635937996
    certificate self-signed 01
    application
      service alternate Default
    controller E1 1/1/0
    framing NO-CRC4
    pri-group timeslots 1-31 service mgcp
    interface GigabitEthernet0/0
    description to_CCM
    ip address 10.10.10.254 255.255.255.0
    duplex auto
    speed auto
    interface GigabitEthernet0/1
    no ip address
    shutdown
    duplex auto
    speed auto
    interface Serial1/1/0:15
    no ip address
    encapsulation hdlc
    isdn switch-type primary-net5
    isdn overlap-receiving
    isdn incoming-voice voice
    isdn bind-l3 ccm-manager
    isdn bchan-number-order ascending
    isdn sending-complete
    no cdp enable
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 10.10..253
    ip http server
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 60 life 86400 requests 10000
    logging trap debugging
    control-plane
    voice-port 1/0/0
    timing hookflash-out 50
    voice-port 1/0/1
    signal groundStart
    timing hookflash-out 50
    voice-port 1/0/2
    signal groundStart
    timing hookflash-out 50
    voice-port 1/0/3
    signal groundStart
    timing hookflash-out 50
    voice-port 1/1/0:15
    ccm-manager fallback-mgcp
    ccm-manager mgcp
    no ccm-manager fax protocol cisco
    ccm-manager music-on-hold
    ccm-manager config server ATD-CCM1 
    ccm-manager config
    mgcp
    mgcp call-agent 10.10.10.100 service-type mgcp version 0.1
    mgcp dtmf-relay voip codec all mode out-of-band
    mgcp rtp unreachable timeout 1000 action notify
    mgcp modem passthrough voip mode nse
    mgcp modem passthrough voip redundancy
    mgcp package-capability rtp-package
    mgcp package-capability sst-package
    mgcp package-capability pre-package
    mgcp default-package fxr-package
    no mgcp package-capability res-package
    no mgcp timer receive-rtcp
    mgcp sdp simple
    mgcp fax t38 inhibit
    no mgcp explicit hookstate
    mgcp rtp payload-type g726r16 static
    mgcp bind control source-interface GigabitEthernet0/0
    mgcp bind media source-interface GigabitEthernet0/0
    mgcp profile default
    dial-peer voice 999101 pots
    service mgcpapp
    port 1/0/1
    forward-digits all
    dial-peer voice 999102 pots
    service mgcpapp
    port 1/0/2
    forward-digits all
    dial-peer voice 999103 pots
      service mgcpapp
    port 1/0/3
    forward-digits all
    dial-peer voice 1 pots
    service mgcpapp
    incoming called-number .
    direct-inward-dial
    port 1/1/0:15
    forward-digits all
    dial-peer voice 999100 pots
    service mgcpapp
    port 1/0/0
    gateway
    timer receive-rtp 1200
    scheduler allocate 20000 1000
    ntp clock-period 17180351
    ntp update-calendar
    ntp server 10.10.10.9 source GigabitEthernet0/0
    end
    #sh controller e1
    E1 1/1/0 is up.
      Applique type is Channelized E1 - balanced
      No alarms detected.
      alarm-trigger is not set
      Version info Firmware: 20090113, FPGA: 20, spm_count = 0
      Framing is NO-CRC4, Line Code is HDB3, Clock Source is Line.
       Current port master clock:recovered from backplane
      Data in current interval (225 seconds elapsed):
         0 Line Code Violations, 0 Path Code Violations
         0 Slip Secs, 0 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins
         0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Secs
      Total Data (last 3 15 minute intervals):
         0 Line Code Violations, 0 Path Code Violations,
         0 Slip Secs, 0 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins,
         0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Secs
    #sh ccm-manager
    MGCP Domain Name: ATD-CCM-GW.xx.xxxx.xxx
    Priority        Status                   Host
    ============================================================
    Primary         Registered               10.10.10.100
    First Backup    None                    
    Second Backup   None                    
    Current active Call Manager:    10.10.10.100
    Backhaul/Redundant link port:   2428
    Failover Interval:              30 seconds
    Keepalive Interval:             15 seconds
    Last keepalive sent:            15:31:24 UTC Oct 19 2012 (elapsed time: 00:00:09)
    Last MGCP traffic time:         15:31:24 UTC Oct 19 2012 (elapsed time: 00:00:09)
    Last failover time:             None
    Last switchback time:           None
    Switchback mode:                Graceful
    MGCP Fallback mode:             Enabled/OFF
    Last MGCP Fallback start time:  None
    Last MGCP Fallback end time:    None
    MGCP Download Tones:            Disabled
    TFTP retry count to shut Ports: 2
    Backhaul Link info:
        Link Protocol:      TCP
        Remote Port Number: 2428
        Remote IP Address:  10.10.10.100
        Current Link State: OPEN
        Statistics:
            Packets recvd:   11
            Recv failures:   0
            Packets xmitted: 18
            Xmit failures:   0
        PRI Ports being backhauled:
            Slot 1, VIC 1, port 0
    Configuration Auto-Download Information
    =======================================
    Current version-id: 1350042385-8bfc9ed0-f85e-4435-8baf-3ad1ceefb55c
    Last config-downloaded:00:00:00
    Current state: Waiting for commands
    Configuration Download statistics:
               Download Attempted             : 1
                 Download Successful          : 1
                 Download Failed              : 0
                 TFTP Download Failed         : 0
               Configuration Attempted        : 1
                 Configuration Successful     : 1
                 Configuration Failed(Parsing): 0
                 Configuration Failed(config) : 0
    Last config download command: New Registration
    Configuration Error History:
    controller E1 1/1/0
    no pri-group timeslots 1-31
    FAX mode: disable
    #debug isdn q931
    #debug mgcp packet
    009112: Oct 20 12:48:50.374: MGCP Packet received from 10.10.10.100:2427--->
    CRCX 2359 S1/SU1/DS1-0/[email protected] MGCP 0.1
    C: D000000001fbf9aa000000F500000001
    X: 1f
    L: p:20, a:PCMU, s:off, t:00
    M: recvonly
    R: D/[0-9ABCD*#]
    Q: process,loop
    <---
    009113: Oct 20 12:48:50.382: MGCP Packet sent to 10.10.10.100:2427--->
    200 2359 OK
    I: 8
    v=0
    c=IN IP4 10.10.10.254
    m=audio 18274 RTP/AVP 0 100
    a=rtpmap:100 X-NSE/8000
    a=fmtp:100 192-194
    <---
    009114: Oct 20 12:48:50.386: ISDN Se1/1/0:15 Q931d: srl_send_l3_pak:
    source_id = CCM MANAGER 0x0003, dest_id = Q.921 0x0000, prim = DL_DATA_REQ 0x0240
    priv_len = 4 int_id = 0x4636A628 datasize = 64
    009115: Oct 20 12:48:50.386: ISDN Se1/1/0:15 Q931d: data =
    009116: Oct 20 12:48:50.386:           4636A628000000030240043800010000
    009117: Oct 20 12:48:50.386:           0802000105A104038090A31803A9839F
    009118: Oct 20 12:48:50.386:           280B526F6C616E64202D2049546C0601
    009119: Oct 20 12:48:50.386:           81313232307009803636393332313933
    009120: Oct 20 12:48:50.386:
    009121: Oct 20 12:48:50.434: MGCP Packet received from 10.10.10.100:2427--->
    MDCX 2360 S1/SU1/DS1-0/[email protected] MGCP 0.1
    C: D000000001fbf9aa000000F500000001
    I: 8
    X: 1f
    L: p:20, a:PCMU, s:off, t:b8, fxr/fx:t38
    M: recvonly
    R: D/[0-9ABCD*#]
    Q: process,loop
    <---
    009122: Oct 20 12:48:50.438: MGCP Packet sent to 10.10.10.100:2427--->
    510 2360 fx: setting cannot be supported
    <---
    009123: Oct 20 12:48:50.438: ISDN Se1/1/0:15 Q931d: srl_send_l3_pak:
    source_id = CCM MANAGER 0x0003, dest_id = Q.921 0x0000, prim = DL_DATA_REQ 0x0240
    priv_len = 4 int_id = 0x4636A628 datasize = 25
    009124: Oct 20 12:48:50.438: ISDN Se1/1/0:15 Q931d: data =
    009125: Oct 20 12:48:50.438:           4636A628000000030240043800010000
    009126: Oct 20 12:48:50.438:           0802000145080280AF
    009127: Oct 20 12:48:50.462: MGCP Packet received from 10.10.10.100:2427--->
    DLCX 2361 S1/SU1/DS1-0/[email protected] MGCP 0.1
    C: D000000001fbf9aa000000F500000001
    I: 8
    X: 1f
    S:
    <---
    ATD-CCM-GW#
    009128: Oct 20 12:48:50.478: MGCP Packet sent to 10.10.10.100:2427--->
    250 2361 OK
    P: PS=0, OS=0, PR=0, OR=0, PL=0, JI=0, LA=0
    <---
    009129: Oct 20 12:48:50.478: ISDN Se1/1/0:15 Q931d: srl_send_l3_pak:
    source_id = CCM MANAGER 0x0003, dest_id = Q.921 0x0000, prim = DL_DATA_REQ 0x0240
    priv_len = 4 int_id = 0x4636A628 datasize = 21
    009130: Oct 20 12:48:50.478: ISDN Se1/1/0:15 Q931d: data =
    009131: Oct 20 12:48:50.478:           4636A628000000030240043800010000
    009132: Oct 20 12:48:50.478:           080200015A
    ATD-CCM-GW#
    009133: Oct 20 12:49:03.002: MGCP Packet received from 10.10.10.100:2427--->
    CRCX 2362 S1/SU1/DS1-0/[email protected] MGCP 0.1
    C: D000000001fbf9ac000000F500000002
    X: 1e
    L: p:20, a:PCMU, s:off, t:b8, fxr/fx:t38
    M: recvonly
    R: D/[0-9ABCD*#]
    Q: process,loop
    <---
    #sh mgcp statistics
    UDP pkts rx 270, tx 270
    Unrecognized rx pkts 0, MGCP message parsing errors 0
    Duplicate MGCP ack tx 0, Invalid versions count 0
    CreateConn rx 10, successful 1, failed 9
    DeleteConn rx 1, successful 1, failed 0
    ModifyConn rx 1, successful 0, failed 1
    DeleteConn tx 0, successful 0, failed 0
    NotifyRequest rx 0, successful 0, failed 0
    AuditConnection rx 0, successful 0, failed 0
    AuditEndpoint rx 61, successful 61, failed 0
    RestartInProgress tx 4, successful 4, failed 0
    Notify tx 193, successful 193, failed 0
    ACK tx 63, NACK tx 10
    ACK rx 197, NACK rx 0
    IP address based Call Agents statistics:
    IP address 10.10.10.100, Total msg rx 270,
                      successful 260, failed 10
    System resource check is DISABLED. No available statistic
    DS0 Resource Statistics
    Utilization: 0.00 percent
    Total channels: 34
    Addressable channels: 34
    Inuse channels: 0
    Disabled channels: 0
    Free channels: 34
    sh controller e1
    #sh network-clocks
      Network Clock Configuration
      Priority      Clock Source    Clock State     Clock Type
         1          E1 1/1/0        GOOD            E1         
        10          Backplane       GOOD            PLL        
      Current Primary Clock Source
      Priority      Clock Source    Clock State     Clock Type
         1          E1 1/1/0        GOOD            E1     
    Thanks for your help

    The explanation for your syslog message is " The B-channel indicated by this alarm has gone out of service. Some of the more common reasons for a B-channel to go out of service include: Taking the channel out of service intentionally to perform maintenance on either the near- or far-end; MGCP gateway returns an error code 501 or 510 for a MGCP command sent from Cisco Unified Communications Manager (Unified CM); MGCP gateway doesn't respond to an MGCP command sent by Unified CM three times; a speed and duplex mismatch exists on the Ethernet port between Unified CM and the MGCP gateway"
    Recommended action:
    Check the Unified CM advanced service parameter, Change B-channel Maintenance Status to determine if the B-channel has been taken out of service intentionally; Check the Q.931 trace for PRI SERVICE message to determine whether a PSTN provider has taken the B-channel out of service; Reset the MGCP gateway; Check the speed and duplex settings on the Ethernet port.

Maybe you are looking for