IPSEC w/ 2 FCIP tunnels using a single gigE port

A gig1/1 interface on a 9216i is servicing 2 FCIP tunnels (port 3225 & 3737) from 2 other 9216i switches. The FCIP ISL connecting to port 3225 has IPSEC configured and is working (trunking). The FCIP ISL connecting to port 3737 was trunking prior to configuring IPSEC for it, but now with IPSEC configured it is now broken. Looking through the IPSEC trouble shooting section, I'm not seeing any conflicting IPSEC/IKE parameters.
Is it possible to have IPSEC services working for 2 FCIP ISLs connecting to a single gig port? If so, I'm at a loss on how to properly configure it.
Thanks, Craig

Understand and that is the case there is only one crypto map assigned with the appropriate ACL, but still the connecution using port 3737 will not establish a connection. Here cmap definintion.
Crypto Map "cmap30" 10 ipsec
Peer = 211.175.105.69
IP ACL = acl30
permit ip 87.61.121.2 255.255.255.255 211.175.105.69 255.255.255.255
permit ip 87.16.121.2 255.255.255.255 211.175.105.85 255.255.255.255
Transform-sets: tfs30,
Security Association Lifetime: 450 gigabytes*/3600 seconds*
(* global configuration value)
PFS (Y/N): Y
PFS Group: group5
Crypto Map "cmap30" 20 ipsec
Peer = 211175.105.85
IP ACL = acl30
permit ip 87.61.121.2 255.255.255.255 211.175.105.69 255.255.255.255
permit ip 87.16.121.2 255.255.255.255 211.175.105.85 255.255.255.255
Transform-sets: tfs30,
Security Association Lifetime: 450 gigabytes*/3600 seconds*
(* global configuration value)
PFS (Y/N): Y
PFS Group: group5
Interface using crypto map set cmap30:
GigabitEthernet1/1

Similar Messages

ISE 3355 Appliance use of both GigE ports

I am setting up six ISE 3355 appliances 3 in one datacenter 3 in another. They have just installed a new server farm infrastructure using Nexus 5596 and Nexus 2248TP top of rack switches.
I have been looking for documentation on how to do NIC teaming on the 3355 or some way to connect Gig0 to FEX101 and Gig1 to FEX102. Or do I just setup a port channel using LaCP between the two different FEX groups?
Sent from Cisco Technical Support iPhone App

Hi,
This is not supported, you can not team or load balance or use redundant interfaces on the ISE appliances. You can only use a dedicated span port for ISE deployments, or use crossover links for an ipep deployment in HA mode.
thanks,
Tarik Admani
*Please rate helpful posts*

A single UDP port in a multithreaded server

I'm trying to write a server application that creates a thread for every client. The server/client communication is a combination of TCP and UDP, and I want to use a fixed TCP/UDP port on the server side to make it easier to use behind NAT routers. Here's a summary of what I have done and what I want to achieve:
- The server creates a TCP and UDP channel (I'm using the NIO interface) on the specified ports
- The server waits for incoming clients by calling accept() on the TCP channel
- The server creates a new thread for the new client, and gives the TCP and UDP channels as arguments
- The client informs the server about its UDP port over the TCP connection
- The new server thread connect()s the UDP channel to the IP:port pair received over the TCP connection
I believed that connecting the UDP socket to the IP:port of the client in each thread would make it possible to use a single UDP port for the multithreaded application, but it seems that the connect() call affects the parent thread as well. The next client that tries to connect() gets a "Connect already invoked" error. I tried calling clone() on the UDP channel argument I passed to the new thread, but was not allowed to call clone() because it's protected.
Can someone tell me if what I'm trying to do is possible, and if so, how to achieve it?

Peter__Lawrey wrote:It sounds like you want to bind a UDP socket to a listening port and the sender as well. So you can have a thread per sending IP:port. (Not sure why you would want to...)
To my knowledge you can only bind a socket based on the listening port. You could have a dispatcher thread which passes these packets to the thread for that sender.
To me, client/server means a request/response based interaction with a request from the client and the response from the server back to the client. This interaction is typically point to point and lossless.-I wanted one thread per client because it's the simplest thing to implement. For example, I don't have to create data structures for storing state information for each individual client (e.g., bitrate, block size, duration, etc), since each thread has only one single client. Still, I don't want to use hacks like having a dispatcher thread, so if it is correct that UDP ports can't be used in the same way as TCP ports, I guess I'll just have to implement the server as a single-threaded process. :(
As for client/server, a better description would be master/slave (and that's what I'm using in my program), but I thought I'd make it simple and use the more common client/server terms in this thread since it doesn't matter for the question I'm asking.

HT4145 is it possible to use a sngle air port express both for streaming music to an audio system AND as a wireless base station

is it possible to use a single air port express both for streaming music to an audio system AND as a wireless base station

Yes you can - if it is your only router or it is after another Apple router - if you have a non-Apple router then it would have to be hard wired to create its' own wireless network.

Total time to FCIP Tunnel be disconnected

I use MDS9222i to Extend SAN with FCIP.
In my FCIP profile,
tcp min-retransmit-time is 300ms,
tcp max-retransmission is default(Maximum number of re-transmissions is 4).
With these two value,
Can I calculate the time that the FCIP tunnel to be disconnected when WAN circuit is down ?
I think it is 4.5s(0.3s+0.6s+1.2s+2.4s). Is that right?

Hi,
Please try this.
Define three user variables - StartTime, EndTime and Duration.
At the start of the quiz ('On Slide Enter' of the first Question Slide). have an advanced action with the following actions.
Assign: StartTime with cpInfoElapsedTimeMS
Continue
At the end of the quiz ('On Success' or 'On Failure' of the last Question Slide or 'On Slide Enter' of Result Slide), have this advanced action.
Assign: EndTime with cpInfoElapsedTimeMS
Expression: Duration = EndTime - StartTime
Expression: Duration = Duration / 1000
Continue
The variable 'Duration' will have the time taken by the user for the Quiz in seconds.
Let me know if you have any queries.
Thanks,
Thejas

FCIP tunnels configuration and validation

Hello,
I have configured FCIP tunnels before where each tunnel is placed in its own subnet. I couldn't find any documentation that would show that this has to be the case or this is best practice.
I am configuring a scenario where there are two pairs of MDS, one pair per Data Center (Fabric A and B)
So for DC01
Fabric A switch ip address for each interface (there are four gigabit interfaces) are the following (IPs have been changed but concept should remain the same):
Switch A - DC01
GigabitEthernet6/1 - 1.1.1.1
GigabitEthernet6/2 - 1.1.1.2
GigabitEthernet6/3 - 1.1.1.3
GigabitEthernet6/4 - 1.1.1.4
Switch B - DC01
GigabitEthernet6/1 - 1.1.1.5
GigabitEthernet6/2 - 1.1.1.6
GigabitEthernet6/3 - 1.1.1.7
GigabitEthernet6/4 - 1.1.1.8
Switch A - DC02
GigabitEthernet6/1 - 2.2.2.1
GigabitEthernet6/2 - 2.2.2.2
GigabitEthernet6/3 - 2.2.2.3
GigabitEthernet6/4 - 2.2.2.4
Switch B - DC02
GigabitEthernet6/1 - 2.2.2.5
GigabitEthernet6/2 - 2.2.2.6
GigabitEthernet6/3 - 2.2.2.7
GigabitEthernet6/4 - 2.2.2.8
Does anyone see any issues that might arise if tunnels are not necessarily placed in their own subnet?
I have added the full configuration of Switch A and B for DC01 at the very bottom for further clarification.
Switch DC01_A
fcip profile 1
ip address 1.1.1.1
fcip profile 2
ip address 1.1.1.2
fcip profile 3
ip address 1.1.1.3
fcip profile 4
ip address 1.1.1.4
vsan database
vsan 10
interface port-channel 10
switchport trunk allowed vsan 10
interface fcip1
channel-group 10 force
no shutdown
use-profile 1
peer-info ipaddr 2.2.2.1
interface fcip2
channel-group 10 force
no shutdown
use-profile 2
peer-info ipaddr 2.2.2.2
interface fcip3
channel-group 11 force
no shutdown
use-profile 3
peer-info ipaddr 2.2.2.3
interface fcip4
channel-group 10 force
no shutdown
use-profile 4
peer-info ipaddr 2.2.2.4
interface GigabitEthernet6/1
ip address 1.1.1.1 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/2
ip address 1.1.1.2 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/3
ip address 1.1.1.3 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/4
ip address 1.1.1.4 255.255.255.0
switchport mtu 3000
no shutdown
Switch DC01_B
fcip profile 1
ip address 1.1.1.5
fcip profile 2
ip address 1.1.1.6
fcip profile 3
ip address 1.1.1.7
fcip profile 4
ip address 1.1.1.8
vsan database
vsan 10
interface port-channel 10
switchport trunk allowed vsan 10
interface fcip1
channel-group 10 force
no shutdown
use-profile 1
peer-info ipaddr 2.2.2.5
interface fcip2
channel-group 10 force
no shutdown
use-profile 2
peer-info ipaddr 2.2.2.6
interface fcip3
channel-group 11 force
no shutdown
use-profile 3
peer-info ipaddr 2.2.2.7
interface fcip4
channel-group 10 force
no shutdown
use-profile 4
peer-info ipaddr 2.2.2.8
interface GigabitEthernet6/1
ip address 1.1.1.5 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/2
ip address 1.1.1.6 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/3
ip address 1.1.1.7 255.255.255.0
switchport mtu 3000
no shutdown
interface GigabitEthernet6/4
ip address 1.1.1.8 255.255.255.0
switchport mtu 3000
no shutdown

I forgot to mention that I will have host static routes for reachability
So from Switch A DC01
ip route 2.2.2.1 255.255.255.255 interface gigabitethernet 6/1
ip route 2.2.2.2 255.255.255.255 interface gigabitethernet 6/2
ip route 2.2.2.3 255.255.255.255 interface gigabitethernet 6/3
ip route 2.2.2.4 255.255.255.255 interface gigabitethernet 6/4

2800 w/ site-site tunnel using NAT and user tunnels

I am using a 2800 to terminate a site-site IPSec tunnel using a crypto map. It is also used to terminate several user tunnels.
Because of overlapping private address space there is a source NAT rule in place that overloads addresses prior to routing them across the site-site tunnel.
The problem is that the user tunnels are not able to communicate with any host located on the far end of the site-site tunnel. The site-site tunnel (and it's NAT) works just fine for users coming from any other interface on the 2800.
Does anyone have any ideas? I've gone ahead and attached the existing configuration for those that are brave or incredibly smart :) It is a fairly trashed config though, and I'm still trying to clean it up from where it was.
Thank you VERY much ahead of time,
Steve

Duplicate posts. :P
Go here: http://supportforums.cisco.com/discussion/12152361/2nd-site-site-ipsec-tunnel-nat-traversal-setting-fail-establish-however-1st

My family uses a single lap-top as our main internet connection and when we synch our respective I-pods, our I-tunes account seems to wipe-out our playlists, even though we have tried to create separate I-tune accounts. Help!!

My family uses a single lap-top as our home computer and several of us have i-pods that we like to synch, using I-tunes. Although we've tried to create separate I-tune accounts, our i-tunes playlists are getting wiped out when one of us deletes songs on our I-pod and it seems as though I-tunes is not distinguishing our distinct accounts and all i-pods are being synched to reflect the latest i-pod anyone makes on their respective account. It appears as though our distinct I-tune accounts are not being loaded on our lap-top when we sign in and unfortunately, when we're in I-tunes, there is nothing to indicate what account is on the screen. For all the glowing appraisals apple-related products usually receive, we are finding i-tunes and its interface with our respective i-pods to be a very, very frustrating experience.
Can anyone shed some light on this for a family of non-techies? Thx
Pegger64

You need to create separate Windows user accounts if you want to seperate the behaviour of iTunes for each user. That also means separate iTunes libraries for each user.
Windows is a multi-user operating system but you are not using it properly. iTunes is not a multi-user application. No application is. You can't expect it to treat different users differently when they are all using the same computer user account.
Do you understand what I mean?

I and my brother have different apple id's but are using the single itunes library on our home PC.When i am syncing my iphone most of the times the apps that were purchased with my brothers apple id is also getting on my iphone.

i and my brother have different apple id's but are using the single itunes library on our home PC.When i am syncing my iphone most of the times the apps that were purchased with my brothers apple id is also getting on my iphone.
How do i differentiate the apps that were purchased with my apple id and sync accordingly.As i want only the apps that were purchased in my apple id.
I am aware of the fact that i can click on the app and check with "getinfo" to see with whose apple id it is brought.but there are hundreds app which i cannot check one by one.
How do i filter the apps with apple id and sync?

Connect the device to the computer.
Open iTunes.
Select the content desired to sync.
Sync.

HT1660 how can I use one single library for all users on the same laptop?

how can I use one single library for all users on the same laptop?

You are most of the way there. Each user having access to hard drive is the key. If users are limited in file privileges this is harder.
Any files you add to your library and any files she adds to her library are available to the other. Just not automatically. Each user must add the files to their own library using the add file or add folder option from menu bar.
What I have done is set library location to a location outside of My Documents\My Music. On my network storage I have a folder names s:\itunes. Both accounts iTunes are set to use this location for the library.

How can I use two single-dimensional arrays-one for the titles and array

I want to Use two single-dimensional arrays-one for the titles and one for the ID
Could everyone help me how can i write the code for it?
Flower
public class Video
public static void main(String[] args) throws Exception
int[][] ID =
{ {145,147,148},
{146,149, 150} };
String[][] Titles=
{ {"Barney","True Grit","The night before Christmas"},
{"Lalla", "Jacke Chan", "Metal"} };
int x, y;
int r, c;
System.out.println("List before Sort");
for(c =0; c< 3; ++c)
for(r=0; r< 3; ++ r)
System.out.println("ID:" + ID[c][r]+ "\tTitle: " + Titles[c][r]);
System.out.println("\nAfter Sort:");
for(c =0; c< 3; ++c)
for(r=0; r< 3; ++ r)
System.out.println("ID:" + ID[c][r]+ "\tTitle: " + Titles[c][r]);

This is one of the most bizarre questions I have seen here:
public class Video
public static void main(String[] args) throws Exception
int[] ID = {145,147,148, 146,149, 150};
String[] Titles= {"Barney","True Grit","The night before Christmas", "Lalla", "Jacke Chan", "Metal"};
System.out.println("List before Sort");
for(int i = 0; i < Titles.length; i++)
System.out.println("ID:" + ID[i]+ "\tTitle: " + Titles);
System.out.println("\nAfter Sort:");
for(int i = 0; c < Titles.length; i++)
System.out.println("ID:" + ID[i]+ "\tTitle: " + Titles[i]);
Generally you don't use prefix (++c) operators in you for loop. Use postfix (c++).
Prefix means that it will increment the variable before the loop body is executed. Postfix will cause it to increment after.

Can I use a single QuickTime Pro key on more than one computer?

I would like to use QuickTime Pro at both home (Windows Vista) and at work (Windows XP). Can I do this using a single purchased key, or do I need to buy two separate keys, one for each machine?
It's a rather stupid question, but I can't find an straightforward statement one way or the other in the FAQs. Perhaps the answer's too obvious!
Cheers,
Andrew.

Thanks! I thought this would probably be the case, but since iTunes allows me to authorise more than one machine, I thought that it was just possible that QuickTime might do the same. Back to the drawing board ...
Cheers,
Andrew.

Using a single itunes library with multiple iphones?

My wife got an iPhone 3GS recently and I already have a 4S. I plan to use an existing iTunes install on a single PC to manage them both. I see that Apple support articles say it's worth keeping iTunes libaries separate (with separate Windows user accounts) when there are multiple iPhones using iTunes on one PC.
I like to manually manage music, videos and podcasts in my iTunes library rather than use synching. I like the idea of having a shared pool of music, videos and apps for us both to use. I know apps that are purchased on my iPhone or my wife's are linked to a specific apple ID so that means if she transfers any apps that were bought on my phone originally, her phone will ask her for my apple ID password when they get updates. But sharing passwords with eachother isn't a problem.
I can create a second user account for my wife easily, but I kind of have the feeling I'd prefer to share a single library as I say.
Are there any other reasons I need to keep 2 user accounts and 2 iTunes libraries going when I manually manage the transfer of content?
Cheers.

MikeBelfast wrote:
I can create a second user account for my wife easily, but I kind of have the feeling I'd prefer to share a single library as I say.
Adn this can easily be done.
Move your /Music/iTunes/ folder to a Shared directory (such as /Users/Public/ folder) and everyone can use this single library.
Each user must quit iTunes before the other can open it.
Just hold Shift, launch iTunes, select Choose library... and select the iTunes folder in the shared directory.
The big advantage with separate Windows user accounts, data such as photos, calendars, emails, and everything else will be separate.

Is it possible to use a single iPhone with two contact numbers via dual sim or an app?

Is it possible to use a single iPhone with two contact numbers via dual sim or an app?
This would be a useful feature for personal and company numbers but using one mobile, rather than carrying two devices or diverting calls.

Then go ahead and try it. You'll find it's probably a load of crap.
You want 2 numbers, then use Google Voice or TalkaTone
Those are US based only Apps or numbers so no good. I won't be wasting money by just trying something either, especially because using a dual sim would mean purchasing another sim card on either pay as you go or monthly contact.

Simultaneously Connecting Multiple Tables of the same Database to Textboxes of the same Form using a single ADO Control Code using VB6 Enterprise Edition and MS Access 2007

Iv 10 Tables consisting of atleast 10 fields each in a single Database. Bt, Im only able to connect 1 table at a time to a form using an ADO Control. Im able to add data from table 'student' to text-boxes in my form. Bt, hw can I add data from field(0) of
Table 'Student' to Textbox1 and data from field(0) of Table 'Marks' to Textbox2 using VB6??
This is the current sample coding iv got to connect a single table to a form:
Global con As New ADODB.Connection
Global rs As New ADODB.Recordset
Public Function Connect()
If con.State = 1 Then con.Close
con.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" + App.Path + "\bca.mdb;Persist Security Info=False"
End Function
Private Sub Add_Click()
If rs.State = 1 Then rs.Close
rs.Open "select * from student", con, adOpenDynamic, adLockOptimistic
rs.AddNew
rs.Fields(0) = (Text1.Text)
rs.Fields(1) = (Text2.Text)
rs.Fields(2) = (Text13.Text)
rs.Fields(3) = (Text4.Text)
rs.Fields(4) = (Text5.Text)
rs.Fields(5) = (Text6.Text)
rs.Fields(6) = (Text7.Text)
rs.Fields(7) = (Text8.Text)
rs.Fields(8) = (Text9.Text)
rs.Fields(9) = (Text10.Text)
rs.Fields(10) = (Text11.Text)
rs.Update
MsgBox " Record Added"
End Sub
What can I do to add fields from 2 different tables to different text boxes within the same form using a single ado control using vb6 and MS Access 2007??

Hi,
Since VB6 product is not supported in this forum, you may go to these forums for support:
#Where to post your VB 6 questions
http://social.msdn.microsoft.com/Forums/en-US/6a0719fe-14af-47f7-9f51-a8ea2b9c8d6b/where-to-post-your-vb-6-questions
Thank you for your understanding.
Best regards,
Franklin
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

IPSEC w/ 2 FCIP tunnels using a single gigE port

Similar Messages

Maybe you are looking for