ISM-VPN background in ISR 3925

Hi,
I have a 3925 router running  with an "ISM-VPN background process" which is running high and causing the CPU to spike up to 80%.  There is a ISM-VPN card on the router as well.
IOS version on router "c3900-universalk9-mz.SPA.153-1.T.bin"
Seems like this might be an undocumented bug but I'm curious if anyone else has seen this issue before.
Appreciate any insights that can be provided.  Thanks!

Hi,
I had this issue, it was due to the crypto engine failing, below command will show if it has an issue,
sh crypto engine configuration
If there is and issue it will show as HW State : DEAD, the only way I found to re-enable it was to reload the device.

Similar Messages

  • 3945E VS 3945+ISM-VPN-39

    Hello forum,
    Can somebody please advise what will be the optimal hardware configuration to maximize ipsec and sslvpn performance, assuming both platforms will be loaded with FL-39-HSEC-K9 license.
    looking at below articles, it looks that 3945E and 3945+ISM-VPN-39 are equal (give or take) in terms of crypto throughput.
    http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/vpn-internal-service-module-isr-g2/data_sheet_c78-682436.html
    http://anticisco.ru/pubs/ISR_G2_Perfomance.pdf
    Thank you
    ~Evgeni Yampolski

    Both versions are mentioned in the ISR G2 Performance Overview. Perhaps that helps:
    https://supportforums.cisco.com/servlet/JiveServlet/download/3786419-138672/ISR_G2_Perfomance.pdf
    Don't stop after you've improved your network! Improve the world by lending money to the working poor:
    http://www.kiva.org/invitedby/karsteni

  • Module ISM-VPN-29 for C2911

    Hello everybody.
    Can't find out about one thing.
    On cisco.com I have read the next about ISM-VPN-29 module for my C2911
    "The Cisco 2900 Series Module (ISM-VPN-29) can  provide hardware-based IPSec encryption services of 145 and 550 Mbps in  the Cisco 2901, 150 and 600 Mbps in the Cisco 2911, 220 and 700 Mbps in  the Cisco 2921, and 385 and 900 Mbps in the Cisco 2951 (IPSec IMIX and  1400-byte packets)."
    There are two speeds "150 and 600 Mbps in the Cisco 2911".
    For what? And why the differance is so big?
    Please explain me.

    You are already quoting the difference: (IPSec IMIX and  1400-byte packets).
    It's for different traffic. Nearly every networking device can achieve a higher throughput with bigger packets. That are the 600 MBit/s which are measured with packets of 1400 bytes. But with IMIX-traffic the router has to process many more small packets which slows him down. But it's much nearer to the throughput you'll get in reality than the value measured with big packets.
    More on IMIX: https://en.wikipedia.org/wiki/Internet_Mix
    Don't stop after you've improved your network! Improve the world by lending money to the working poor:
    http://www.kiva.org/invitedby/karsteni

  • ISM-VPN-39 breaks High Availality GRE IPSec

    Hello everyone,
    Just wonder if anyone have any experience configuring ism-vpn-39 with gre over ipsec using HSRP virtual IP as the tunnel source and destination endpoints? My configuration is working perfectly fine if I disable ism-vpn-39 with "no crypto slot 0". But as soon as I re-enable this accelerator, all the tunnels drop. I'm using the latest IOS 15.3-2T.
    I've also been having headache with this module and older IOS versions, it either crashes the router or strangely breaks the traffic between the router and the installed switch service module (SM-ES3G-24-P) after about 3 hours of operation. The fix was to upgrade to the latest IOS but then it causes the probem above. Thanks for insight.

    Hi,
    There seems to a few bugs that are resolved in the latest 15.3-2T but seem to still have the same symptoms that you are experiencing. Crashing of the module when icmpv6 pings are issued to the router, the ism-vpn not encapsulating esp packets..etc. You may need to open a tac case to validate that this bugs are fixed and are in a verfied or resolved state.
    Here is a link to the release notes and there are quite a few bugs related to the ism-vpn module.
    http://www.cisco.com/en/US/docs/ios/15_3m_and_t/release/notes/153-2TCAVS.html#wp56114
    Tarik Admani
    *Please rate helpful posts*

  • Cisco ism-VPN-29

    Hi Expert,
    I plan to add ISM-VPN-29 to Cisco 2921. I just want to make sure my ios version can support this card or not.
    Do I need to upgrade ios before install this card?
    Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M4, RELEASE SOFTWARE (fc1)
    Thanks,
    Boren

    You can always refer to product documents or feature navigator
    http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps12202/data_sheet_c78-682436.html
    You need at least 15.2(1)T1, however I suggest a more recent version, no older than 3 months.
    M.

  • Help with Remote access VPN on Cisco router 3925 via Dialer Interface

    Hi Everybody,
    I need help for my work now, I appreciate if someone can fix my problem.I have a Cisco router 3925 and access Internet via PPPoE link.  I want config VPN Remote Access and using software Cisco VPN client. But it doesn't  work.. Here my config router :
    HUNRE#show running-config
    Building configuration...
    Current configuration : 5515 bytes
    ! No configuration change since last restart
    version 15.3
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname HUNRE
    boot-start-marker
    boot-end-marker
    enable secret 5 $1$vEFw$rLfvLglzUgddCVwXDx03K.
    enable password cisco
    aaa new-model
    aaa session-id common
    crypto pki trustpoint TP-self-signed-1050416327
     enrollment selfsigned
     subject-name cn=IOS-Self-Signed-Certificate-1050416327
     revocation-check none
     rsakeypair TP-self-signed-1050416327
    crypto pki certificate chain TP-self-signed-1050416327
     certificate self-signed 01
      3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
      31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
      69666963 6174652D 31303530 34313633 3237301E 170D3134 30393235 31313534
      31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
      4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30353034
      31363332 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
      8100CC79 74FCFABE 81183B70 5A9F4A53 EB609754 7D5F8587 9150B76E 3207A86E
      5B65F9E9 6CDAC21A 6D69221D 1FF61632 14763308 43B2A1CC 8EE5ABAC EF07530E
      3F0D35FE F08C955B 60B52B92 F8F54D53 DD6DD623 01F83493 02F9C49A F0C3483D
      3B48A008 8D96700E 88924BFE DE00201B DE5965DE 32898CAD 9012AB55 76B6F39B
      2D470203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
      551D2304 18301680 14C3418C BC35F3D9 B26B2475 2BB5F826 060525AB B3301D06
      03551D0E 04160414 C3418CBC 35F3D9B2 6B24752B B5F82606 0525ABB3 300D0609
      2A864886 F70D0101 05050003 81810070 AC7C26C6 4606A551 1A3FD6C5 2A5AEAE8
      35DAC86E F8885E26 51F6EEAE 7565D3AA D532C8F3 55F6656F D103F38C 8FBDE7F1
      83E77143 76469040 7FEA41E8 14963DB3 F7F28EA0 C5F2F42C B186B75C AAB04900
      15F9CB38 A16964F5 4E7B4378 35041AA8 AE8EC181 D58D6A62 676E286A 7B9D80E6
      35A0B9FB FB76E976 3D2A19D7 006078
            quit
    ip name-server 210.245.1.253
    ip name-server 210.245.1.254
    ip cef    
    no ipv6 cef
    multilink bundle-name authenticated
    vpdn enable
    vpdn-group 1
    vpdn-group 2
    license udi pid C3900-SPE100/K9 sn FOC1823839B
    license boot module c3900 technology-package securityk9
    username cisco privilege 15 secret 5 $1$aAjB$D3iLyPFTE7O1bHPnKSJcH0
    username kdhong privilege 15 secret 5 $1$nfyX$FO1BPTabCUaE6uKQwpLT.1
    redundancy
    track 1 ip sla 1 reachability
    track 2 ip sla 2 reachability
    crypto isakmp policy 1
     encr 3des
     authentication pre-share
     group 2
    crypto isakmp client configuration group VPN-HUNRE
     key hunre
     dns 8.8.8.8
     domain hunre
     pool IP-VPN
     acl 199
     max-users 100
    crypto ipsec transform-set encrypt-method-1 esp-3des esp-sha-hmac
     mode tunnel
    crypto dynamic-map DYNMAP 1
     set transform-set encrypt-method-1
    crypto map VPN client configuration address respond
    crypto map VPN 65535 ipsec-isakmp dynamic DYNMAP
    interface Embedded-Service-Engine0/0
     no ip address
     shutdown
    interface GigabitEthernet0/0
     ip address 192.168.1.1 255.255.255.0
     ip mtu 1492
     ip nat inside
     ip virtual-reassembly in
     ip tcp adjust-mss 1412
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     description FPT
     no ip address
     ip tcp adjust-mss 1412
     duplex auto
     speed auto
     pppoe enable group global
     pppoe-client dial-pool-number 1
    interface GigabitEthernet0/2
     description Connect to CMC
     no ip address
     ip mtu 1442
     ip nat outside
     ip virtual-reassembly in
     ip tcp adjust-mss 1412
     duplex auto
     speed auto
     pppoe enable group global
     pppoe-client dial-pool-number 2
     no cdp enable
    interface Dialer1
     ip address negotiated
     ip mtu 1452
     ip nat outside
     ip virtual-reassembly in
     encapsulation ppp
     dialer pool 1
     dialer-group 1
     ppp authentication chap pap callin
     ppp chap hostname [USERNAME]
     ppp chap password 0 [PASSWORD]
     ppp pap sent-username [USERNAME] password 0 [PASSWORD]
     ppp ipcp dns request
     crypto map VPN
    interface Dialer2
     description Logical ADSL Interface 2
     ip address negotiated
     ip mtu 1442
     ip nat outside
     ip virtual-reassembly in
     encapsulation ppp
     ip tcp adjust-mss 1344
     dialer pool 2
     dialer-group 2
     ppp authentication chap pap callin
     ppp chap hostname [USERNAME]
     ppp chap password 0 [PASSWORD]
     ppp pap sent-username [USERNAME] password 0 [PASSWORD]
     ppp ipcp address accept
     no cdp enable
    ip local pool IP-VPN 10.252.252.2 10.252.252.245
    ip forward-protocol nd
    ip http server
    ip http authentication local
    ip http secure-server
    ip nat inside source list 10 interface Dialer1 overload
    ip nat inside source list 11 interface Dialer2 overload
    ip nat inside source static 10.159.217.10 interface Dialer1
    ip nat inside source list 199 interface Dialer1 overload
    ip nat inside source static tcp 10.159.217.10 80 210.245.54.49 80 extendable
    ip nat inside source static tcp 10.159.217.10 3389 210.245.54.49 3389 extendable
    ip route 0.0.0.0 0.0.0.0 Dialer1
    ip route 10.159.217.0 255.255.255.0 192.168.1.8
    ip sla auto discovery
    ip sla responder
    dialer-list 1 protocol ip permit
    dialer-list 2 protocol ip permit
    access-list 10 permit any
    access-list 11 permit any
    access-list 101 permit icmp any any
    access-list 199 permit ip any any
    control-plane
    line con 0
    line aux 0
    line 2
     no activation-character
     no exec
     transport preferred none
     transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
     stopbits 1
    line vty 0 4
     password cisco
     transport input all
    line vty 5 15
     password cisco
     transport input all
    scheduler allocate 20000 1000
    ntp master
    end
    However, I cannot ping interfac Dialer 1. I using Cisco vpn client software ver 5.0.07.0290.
    Hopeful for your answers !
    Thanks

    Hi David Castro,
    Thanks for your answer,
    I configed following your guide, but it have not worked yet. I saw that I cannot ping IP gateway Internet . I using ADSL Internet and config PPPoE  and my router receive IP from ISP. Here show ip int brief :
    GigabitEthernet0/0         192.168.1.1     YES NVRAM  up                    up      
    GigabitEthernet0/1         unassigned      YES NVRAM  up                    up      
    GigabitEthernet0/2         unassigned      YES NVRAM  up                    up      
    Dialer1                    210.245.54.49   YES IPCP   up                    up      
    Dialer2                    101.99.7.73     YES IPCP   up                    up      
    NVI0                       192.168.1.1     YES unset  up                    up      
    Virtual-Access1            unassigned      YES unset  up                    up      
    Virtual-Access2            unassigned      YES unset  up                    up      
    Virtual-Access3            unassigned      YES unset  up                    up 
    But I cannot ping Interface Dialer 1, so may be VPN is does not worked. Do you have some ideal ?
    Thanks very much !

  • Really tight VPN ACL on ISR Routers

    Hi Everyone,
    I have an odd situation where I need to config site to site VPN with a very "tight" VPN ACL that allows access to a specific port and host at each end. I need to tunnel TCP traffic from site A encryption domain address 1.1.1.1 to site B address 2.2.2.2 port 2222. I also need to permit the site B host 2.2.2.2 to tunnel TCP to 1.1.1.1 on port 1111. I didn't think setting the tight ACL would be a big deal and I've done lots of site to site VPNs before. But I've always used very general crypto ACLs permitting IP to blocks of addresses. I can get half of the communication going, but not the other half. I believe my crypto ACLs should look like this:
    Site A
    access-list 101 permit tcp host 1.1.1.1 host 2.2.2.2 eq 2222
    access-list 101 permit tcp host 1.1.1.1 eq 1111 host 2.2.2.2
    Site B
    access-list 101 permit tcp host 2.2.2.2 host 1.1.1.1 eq 1111
    access-list 101 permit tcp host 2.2.2.2 eq 2222 host 1.1.1.1
    Thanks for your help.

    Bobby,
    The crypto ACLs should be defined using a IP as protocol. It will create conflicts if you try to use TCP or UDP.
    Now if you need to tight what comes in thru your tunnel, the best way to do this is using ACLs on the internal Interface.
    For example on site A, asumming that the F0/1 is your private interface you could something like this to limit the traffic
    access-list 150 permit permit tcp host 1.1.1.1 host 2.2.2.2 eq 2222
    access-list 150 permit deny ip host 1.1.1.1 host 2.2.2.2
    access-list 150 permit permit ip any any
    access-list 160 permit permit tcp host 2.2.2.2 host 1.1.1.1 eq 1111
    access-list 160 permit deny ip host 2.2.2.2 host 1.1.1.1
    access-list 160 permit permit ip any any
    int F 0/1
    ip access-group 150 in
    ip access-group 160 out
    Your crypto acl should be
    access-list 101 permit ip host 1.1.1.1 host 2.2.2.2 eq.
    In other words, the tunnel must be negotiated using IP as protocol, and then you can limit whatever enters/leaves the tunnel by applying an ACL to the private interface, which is the one the that sees the traffic unencrypted.
    HTH.
    Raga

  • ISR 3925: Phone not Registered

    Hello everyone .
    I have a 3925 router with license:
    ipbasek9
    uck9
    securityk9
    I have to configure the IP phones 7841 and 9971 .
    In the flash , there is no configuration file telephones.
    Can you tell me how? because the phones do not register.
    kind regards

    You need to have IOS feature set  along with license. Licneses are RTU /honour based.
    You can check the comaptibility matrix 
    http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/requirements/guide/33matrix.html
    regds,
    aman

  • ISR G2 GET VPN throughput

    I have been looking for a document detailing the throughput of GET VPN on the ISR G2 routers. I only found a general IPSec throughput for them and I could only find a GET VPN document for the old ISR routers.
    Can anyone help me to find this information?
    Regards,
    Xavier

    Xavier,
    it's always better to ping your Cisco SE for this information.
    I do not believe we have external up-to-date information (especially considering ISM module is out).
    As Cisco employees we cannot provide internal data and majority of test results are labeled "Cisco confidential".
    Providing you with those could get us in trouble :-)
    Marcin

  • 3925 Reboot odd rebooted

    We have 2 router as HA for VPN.
    1 rebooted,  Please help me find what's the reason.
    by sh ver, it looks like someone reload the router. but I check AAA log, no record at that time.
    in router log there is some"configured from console by console." is tis means someone log in router by console cable?
    Show ver:
    System returned to ROM by reload at 21:41:16 GMT Mon Jun 9 2014
    System restarted at 21:43:09 GMT Mon Jun 9 2014
    System image file is "flash:/c3900-universalk9-mz.SPA.152-4.M6a.bin"
    Last reload type: Normal Reload
    Last reload reason: reload
    Show logg result on router is:
    Jun  9 19:43:17.463: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Initialized 
    *Jun  9 19:43:17.639: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Enabled 
    *Jun  9 19:43:32.871: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up
    *Jun  9 19:43:32.871: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
    *Jun  9 19:43:32.871: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to down
    *Jun  9 19:43:32.871: %LINK-3-UPDOWN: Interface GigabitEthernet1/0, changed state to up
    *Jun  9 19:43:33.427: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
    *Jun  9 19:43:33.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
    *Jun  9 19:43:33.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
    *Jun  9 19:43:33.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to down
    *Jun  9 19:43:33.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0, changed state to up
    *Jun  9 19:43:34.887: %AAAA-4-CLI_DEPRECATED: WARNING: Command has been added to the configuration but Type 4 passwords have 
    been deprecated. Migrate to a supported password type
    *Jun  9 21:43:34.903: %SYS-6-CLOCKUPDATE: System clock has been updated from 19:43:34 UTC Mon Jun 9 2014 to 21:43:34 GMT Mon 
    Jun 9 2014, configured from console by console.
    *Jun  9 21:43:35.163: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.96.4.127 port 514 CLI Request Triggered
    *Jun  9 21:43:35.603: %SYS-5-CONFIG_I: Configured from memory by console
    *Jun  9 21:43:35.911: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 15.2(4)M6a, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Tue 15-Apr-14 08:48 by prod_rel_team
    *Jun  9 21:43:35.951: %SNMP-5-COLDSTART: SNMP agent on host emeaxrar3925_02 is undergoing a cold start
    *Jun  9 21:43:35.959: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Jun  9 21:43:35.963: %ETHSW_SM-3-ILP_RECOVERY_COMPLETE: Time taken for recovery after reload = 0 seconds.
    *Jun  9 21:43:35.975: %SYS-6-BOOTTIME: Time taken to reboot after reload =  142 seconds
    *Jun  9 21:43:35.979: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
    *Jun  9 21:43:35.979: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
    *Jun  9 21:43:35.979: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON
    *Jun  9 21:43:36.079: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up
    *Jun  9 21:43:36.087: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 10.96.4.127 port 514 started - CLI initiated
    *Jun  9 21:43:36.295: %VPN_HW-6-INFO_LOC: Crypto engine: slot 0  State changed to: Initialized 
    *Jun  9 21:43:36.295: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0  State changed to: Disabled 
    *Jun  9 21:43:36.307: %VPN_HW-6-INFO_LOC: Crypto engine: slot 0  State changed to: Enabled 
    *Jun  9 21:43:36.307: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
    *Jun  9 21:43:36.307: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
    *Jun  9 21:43:37.008: %LINK-5-CHANGED: Interface Embedded-Service-Engine0/0, changed state to administratively down
    *Jun  9 21:43:37.036: %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to administratively down
    *Jun  9 21:43:37.296: %LINEPROTO-5-UPDOWN: Line protocol on Interface ISM VPN Accelerator, changed state to up
    *Jun  9 21:43:37.695: %LINK-3-UPDOWN: Interface GigabitEthernet1/1, changed state to up
    *Jun  9 21:43:38.008: %LINEPROTO-5-UPDOWN: Line protocol on Interface Embedded-Service-Engine0/0, changed state to down
    *Jun  9 21:43:38.696: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1, changed state to up
    *Jun  9 21:43:40.552: %OSPF-5-ADJCHG: Process 1, Nbr 10.64.99.11 on GigabitEthernet1/0 from LOADING to FULL, Loading Done
    *Jun  9 21:43:46.888: %OSPF-5-ADJCHG: Process 1, Nbr 10.64.99.8 on GigabitEthernet0/0 from LOADING to FULL, Loading Done
    *Jun  9 21:44:06.720: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
    *Jun  9 21:44:13.028: %HSRP-5-STATECHANGE: GigabitEthernet0/1 Grp 3 state Speak -> Standby
    Also I found some log on logging server:
    Jun 10 03:52:16 10.64.97.154 49: Jun  9 21:52:15.024: %SEC-6-IPACCESSLOGP: list 199 permitted tcp 10.109.18.107(57503) -> 0.0.0.0(22), 1 packet  
    Jun 10 03:46:28 10.64.97.154 48: Jun  9 21:46:26.865: %SEC-6-IPACCESSLOGP: list 199 permitted tcp 10.109.18.107(57503) -> 0.0.0.0(22), 1 packet  
    Jun 10 03:44:16 10.64.97.154 47: *Jun  9 21:44:13.028: %HSRP-5-STATECHANGE: GigabitEthernet0/1 Grp 3 state Speak -> Standby
    Jun 10 03:44:10 10.64.97.154 46: *Jun  9 21:44:06.720: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
    Jun 10 03:41:17 10.64.97.154 52: Jun  9 21:41:16.543: %HSRP-5-STATECHANGE: GigabitEthernet0/1 Grp 3 state Standby -> Init
    Jun 10 03:41:17 10.64.97.154 51: Jun  9 21:41:16.543: %RF_INTERDEV-4-RELOAD: % RF induced self-reload. my state = STANDBY COLD-CONFIG peer state = ACTIVE
    Jun 10 03:41:17 10.64.97.154 50: Jun  9 21:41:16.543: %RF-5-RF_RELOAD: Self reload. Reason: Reloading self per request of peer
    Jun 10 03:40:13 10.64.97.154 49: Jun  9 21:40:12.011: %OSPF-5-ADJCHG: Process 1, Nbr 10.64.99.11 on GigabitEthernet1/0 from LOADING to FULL, Loading Done
    Jun 10 03:40:10 10.64.97.154 48: Jun  9 21:40:09.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
    Jun 10 03:39:40 10.64.97.154 47: Jun  9 21:39:39.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1, changed state to up
    Jun 10 03:39:16 10.64.97.154 46: Jun  9 21:39:15.791: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
    Jun 10 03:39:16 10.64.97.154 45: Jun  9 21:39:15.787: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1, changed state to down
    Jun 10 03:38:27 10.64.97.154 44: *Jun  9 21:38:25.420: %HSRP-5-STATECHANGE: GigabitEthernet0/1 Grp 3 state Speak -> Standby
    Jun 10 03:38:20 10.64.97.154 43: *Jun  9 21:38:17.812: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

    Configure AAA auth for console access too and configure "archive" feature on router for next time...
    BR,
    Dragan

  • ISR Security License

    Hello,
    I am going to order ISR 3925 with NPE IOS and NPE Security license. Will it be possible to upgrade NPE security license with Encryption support after ordering, without any charge ?

    CBAC is not supported on the 4451-X.
    IOS Zone-based firewall is supported.
    See slide 53 of Session BRKARC-2016 from Cisco Live Orlando 2013.

  • GETVPN and DMVPN equipment for 250 routers as GM

    Hi,
    I would like to know which router I should use as a key server for 250 GMs, and what router as DMVPN hub.
    I found this deployment guide
    http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6525/ps9370/ps7180/GETVPN_DIG_version_1_0_External.pdf
    on site 24 it says that 2851 with AIM-VPM module has been tested with 200 GM with 15 sec registration time with one key server.
    The problem is that there is a new generation of ISRs. I would like to use a 2900 router but don't know if the 2951 is necessary. 2951 has onboard IPSec acceleration but an adittional ISM-VPN-29 module can be installed.
    In the data sheet (http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps12202/data_sheet_c78-682436.html)
    I did not have found any info if this module is responsible for GETVPN rekeying. I don't want to buy it if it's not really necessary because it's not cheap.
    So my question is which 2900 router should I use as a Key server for 250 GMs and what 2900 router as DMVPN hub?
    I hope that somebody can help me with this.

    DMVPN provides two key advantages for extending MPLS VPNs to the branches, bulk encryption and, more importantly, a scalable overlay model. Since the assumption here is that the branches in this deployment are connected to the hub through a Layer 3 SP service, a tunneled model using GRE is needed to extend MPLS to the branches. Coupled with the fact that there is large number of existing DMVPN deployments, this solution becomes an attractive deployment option.

  • ORA-00257: archiver error. Connect internal only, until freed.

    I have installed SAP in a ORacle Database.
    When i login to Oracle Datbase from the Backend, i am getting the following error.
    ORA-00257: archiver error. Connect internal only, until freed.
    I reqeust you to please let me know of what can be done on this

    PFB th log. Pls help
    Dump file d:\oracle\ism\saptrace\background\alert_ism.log
    Sat Oct 27 00:54:10 2007
    ORACLE V10.2.0.1.0 - Production vsnsta=0
    vsnsql=14 vsnxtr=3
    Windows Server 2003 Version V5.2 Service Pack 2
    CPU                 : 2 - type 586, 2 Physical Cores
    Process Affinity    : 0x00000000
    Memory (Avail/Total): Ph:2965M/3839M, Ph+PgF:16529M/17678M, VA:1928M/2047M
    Sat Oct 27 00:54:10 2007
    Starting ORACLE instance (normal)
    Sat Oct 27 00:54:10 2007
    Specified value of sga_max_size is too small, bumping to 633339904
    LICENSE_MAX_SESSION = 0
    LICENSE_SESSIONS_WARNING = 0
    Shared memory segment for instance monitoring created
    Picked latch-free SCN scheme 2
    Autotune of undo retention is turned on.
    IMODE=BR
    ILAT =10
    LICENSE_MAX_USERS = 0
    SYS auditing is disabled
    ksdpec: called for event 13740 prior to event group initialization
    Starting up ORACLE RDBMS Version: 10.2.0.1.0.
    System parameters with non-default values:
      processes                = 80
      sessions                 = 96
      event                    = 10191 trace name context forever, level 1
      sga_max_size             = 633339904
      shared_pool_size         = 301989888
      shared_pool_reserved_size= 30183260
      filesystemio_options     = setall
      control_files            = D:\ORACLE\ISM\ORIGLOGA\CNTRL\CNTLRISM.DBF, D:\ORACLE\ISM\ORIGLOGB\CNTRL\CNTRLISM.DBF, D:\ORACLE\ISM\SAPDATA1\CNTRL\CNTRLISM.DBF
      control_file_record_keep_time= 30
      db_block_size            = 8192
      db_cache_size            = 301989888
      compatible               = 10.2.0
      log_archive_dest         = D:\oracle\ISM\oraarch\ISMarch
      log_buffer               = 2894848
      log_checkpoint_interval  = 0
      db_files                 = 254
      log_checkpoints_to_alert = TRUE
      dml_locks                = 4000
      undo_management          = AUTO
      undo_tablespace          = PSAPUNDO
      undo_retention           = 43200
      recyclebin               = off
      remote_os_authent        = TRUE
      remote_login_passwordfile= EXCLUSIVE
      job_queue_processes      = 1
      background_dump_dest     = D:\ORACLE\ISM\SAPTRACE\BACKGROUND
      user_dump_dest           = D:\ORACLE\ISM\SAPTRACE\USERTRACE
      core_dump_dest           = D:\ORACLE\ISM\SAPTRACE\BACKGROUND
      optimizer_features_enable= 10.2.0.1
      sort_area_size           = 2097152
      sort_area_retained_size  = 0
      db_name                  = ISM
      open_cursors             = 800
      optimpeek_user_binds   = FALSE
      pga_aggregate_target     = 402443468
      workarea_size_policy     = AUTO
      statistics_level         = typical
    PMON started with pid=2, OS id=3424
    PSP0 started with pid=3, OS id=1240
    MMAN started with pid=4, OS id=3676
    DBW0 started with pid=5, OS id=3664
    LGWR started with pid=6, OS id=3276
    CKPT started with pid=7, OS id=3156
    SMON started with pid=8, OS id=1140
    RECO started with pid=9, OS id=3412
    CJQ0 started with pid=10, OS id=3416
    MMON started with pid=11, OS id=2400
    MMNL started with pid=12, OS id=4044
    Sat Oct 27 00:54:13 2007
    CREATE DATABASE ISM CONTROLFILE REUSE  MAXLOGFILES 255 MAXLOGMEMBERS 3 MAXLOGHISTORY 1000 MAXDATAFILES 254 MAXINSTANCES 50 NOARCHIVELOG CHARACTER SET UTF8 NATIONAL CHARACTER SET UTF8 DATAFILE 'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M EXTENT MANAGEMENT LOCAL DEFAULT TEMPORARY TABLESPACE PSAPTEMP TEMPFILE 'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M UNDO TABLESPACE PSAPUNDO DATAFILE 'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M SYSAUX DATAFILE 'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    LOGFILE GROUP 1 ('D:\oracle\ISM/origlogA/log_g11m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g11m2.dbf') SIZE 50M  REUSE ,
    GROUP 2 ('D:\oracle\ISM/origlogB/log_g12m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g12m2.dbf') SIZE 50M  REUSE ,
    GROUP 3 ('D:\oracle\ISM/origlogA/log_g13m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g13m2.dbf') SIZE 50M  REUSE ,
    GROUP 4 ('D:\oracle\ISM/origlogB/log_g14m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g14m2.dbf') SIZE 50M  REUSE
    Sat Oct 27 00:54:14 2007
    Database mounted in Exclusive Mode
    Sat Oct 27 00:54:20 2007
    Successful mount of redo thread 1, with mount id 2062190453
    Assigning activation ID 2062190453 (0x7aea8775)
    Thread 1 opened at log sequence 1
      Current log# 1 seq# 1 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G11M1.DBF
      Current log# 1 seq# 1 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G11M2.DBF
    Successful open of redo thread 1
    Sat Oct 27 00:54:20 2007
    MTTR advisory is disabled because FAST_START_MTTR_TARGET is not set
    Sat Oct 27 00:54:20 2007
    SMON: enabling cache recovery
    Sat Oct 27 00:54:20 2007
    create tablespace SYSTEM datafile  'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL online
    Sat Oct 27 00:54:22 2007
    Incremental checkpoint up to RBA [0x1.3.0], current log tail at RBA [0x1.3.0]
    Sat Oct 27 00:54:23 2007
    Completed: create tablespace SYSTEM datafile  'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL online
    Sat Oct 27 00:54:23 2007
    create rollback segment SYSTEM tablespace SYSTEM
      storage (initial 50K next 50K)
    Completed: create rollback segment SYSTEM tablespace SYSTEM
      storage (initial 50K next 50K)
    Sat Oct 27 00:54:28 2007
    CREATE UNDO TABLESPACE PSAPUNDO DATAFILE  'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 00:54:34 2007
    Successfully onlined Undo Tablespace 1.
    Completed: CREATE UNDO TABLESPACE PSAPUNDO DATAFILE  'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 00:54:34 2007
    create tablespace SYSAUX datafile  'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO online
    Completed: create tablespace SYSAUX datafile  'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO online
    Sat Oct 27 00:54:36 2007
    CREATE TEMPORARY TABLESPACE PSAPTEMP TEMPFILE  'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Completed: CREATE TEMPORARY TABLESPACE PSAPTEMP TEMPFILE  'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 00:54:36 2007
    ALTER DATABASE DEFAULT TEMPORARY TABLESPACE PSAPTEMP
    Completed: ALTER DATABASE DEFAULT TEMPORARY TABLESPACE PSAPTEMP
    Sat Oct 27 00:54:36 2007
    ALTER DATABASE DEFAULT TABLESPACE SYSTEM
    Completed: ALTER DATABASE DEFAULT TABLESPACE SYSTEM
    Sat Oct 27 00:54:38 2007
    SMON: enabling tx recovery
    Sat Oct 27 00:54:38 2007
    Beginning local checkpoint up to RBA [0x1.7651.10], SCN: 10575
    Completed checkpoint up to RBA [0x1.7651.10], SCN: 10575
    Threshold validation cannot be done before catproc is loaded.
    replication_dependency_tracking turned off (no async multimaster replication found)
    Starting background process QMNC
    QMNC started with pid=14, OS id=3748
    Sat Oct 27 00:54:39 2007
    Completed: CREATE DATABASE ISM CONTROLFILE REUSE  MAXLOGFILES 255 MAXLOGMEMBERS 3 MAXLOGHISTORY 1000 MAXDATAFILES 254 MAXINSTANCES 50 NOARCHIVELOG CHARACTER SET UTF8 NATIONAL CHARACTER SET UTF8 DATAFILE 'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M EXTENT MANAGEMENT LOCAL DEFAULT TEMPORARY TABLESPACE PSAPTEMP TEMPFILE 'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M UNDO TABLESPACE PSAPUNDO DATAFILE 'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M SYSAUX DATAFILE 'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    LOGFILE GROUP 1 ('D:\oracle\ISM/origlogA/log_g11m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g11m2.dbf') SIZE 50M  REUSE ,
    GROUP 2 ('D:\oracle\ISM/origlogB/log_g12m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g12m2.dbf') SIZE 50M  REUSE ,
    GROUP 3 ('D:\oracle\ISM/origlogA/log_g13m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g13m2.dbf') SIZE 50M  REUSE ,
    GROUP 4 ('D:\oracle\ISM/origlogB/log_g14m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g14m2.dbf') SIZE 50M  REUSE
    Sat Oct 27 00:55:11 2007
    Beginning log switch checkpoint up to RBA [0x2.2.10], SCN: 36538
    Thread 1 advanced to log sequence 2
      Current log# 2 seq# 2 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G12M1.DBF
      Current log# 2 seq# 2 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G12M2.DBF
    Sat Oct 27 00:55:56 2007
    Beginning log switch checkpoint up to RBA [0x3.2.10], SCN: 63439
    Thread 1 advanced to log sequence 3
      Current log# 3 seq# 3 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G13M1.DBF
      Current log# 3 seq# 3 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G13M2.DBF
    Sat Oct 27 00:56:36 2007
    Beginning log switch checkpoint up to RBA [0x4.2.10], SCN: 81543
    Thread 1 advanced to log sequence 4
      Current log# 4 seq# 4 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G14M1.DBF
      Current log# 4 seq# 4 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G14M2.DBF
    Sat Oct 27 00:56:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2802K exceeds notification threshold (2048K)
    Sat Oct 27 00:56:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2795K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on PLUGGABLE_SET_CHECK to SELECT_CATALOG_ROLE
    Sat Oct 27 00:56:49 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2791K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on PLUGGABLE_SET_CHECK to SELECT_CATALOG_ROLE
    Sat Oct 27 00:56:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3161K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :select a.*,   case when      input_bytes/decode(output_bytes, 0, null, output_bytes) > 1   then      input_bytes/decode(output_bytes, 0, null, output_bytes)   else 1 end compression_ratio,   sys.dbms_rcvman.num2displaysize(input_bytes) input_bytes_display,   sys.dbms_rcvman.num2displaysize(output_bytes) output_bytes_display  from (select sum(num_files_backed) num_files_backed,       sum(distinct_files_backed) distinct_files_backed,       min(min_first_change#) min_first_change#,       max(max_next_change#)
    Sat Oct 27 00:57:23 2007
    Completed checkpoint up to RBA [0x2.2.10], SCN: 36538
    Sat Oct 27 00:57:29 2007
    Beginning log switch checkpoint up to RBA [0x5.2.10], SCN: 97101
    Thread 1 advanced to log sequence 5
      Current log# 1 seq# 5 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G11M1.DBF
      Current log# 1 seq# 5 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G11M2.DBF
    Sat Oct 27 00:57:30 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2092K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_iont_view to select_catalog_role
    Sat Oct 27 00:57:30 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2092K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_iont_view to select_catalog_role
    Sat Oct 27 00:57:31 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 4682K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:31 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5138K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_nt_parent_view to select_catalog_role
    Sat Oct 27 00:57:31 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5135K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_nt_parent_view to select_catalog_role
    Sat Oct 27 00:57:31 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2251K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2386K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_htable_view to public
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2384K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_htable_view to public
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2298K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2484K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_htable_view to public
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2481K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_htable_view to public
    Sat Oct 27 00:57:32 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3342K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:33 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3566K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_phtable_view to public
    Sat Oct 27 00:57:33 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3562K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_phtable_view to public
    Sat Oct 27 00:57:33 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3397K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:33 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3702K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_phtable_view to public
    Sat Oct 27 00:57:33 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3701K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_phtable_view to public
    Sat Oct 27 00:57:34 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7593K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:35 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8426K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_fhtable_view to public
    Sat Oct 27 00:57:35 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8424K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_fhtable_view to public
    Sat Oct 27 00:57:36 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7676K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:36 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8666K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_fhtable_view to public
    Sat Oct 27 00:57:36 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8664K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_fhtable_view to public
    Sat Oct 27 00:57:37 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8853K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:38 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9776K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_pfhtable_view to public
    Sat Oct 27 00:57:38 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9774K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_pfhtable_view to public
    Sat Oct 27 00:57:39 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8946K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:40 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10060K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_pfhtable_view to public
    Sat Oct 27 00:57:40 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10057K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_pfhtable_view to public
    Sat Oct 27 00:57:41 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7546K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:42 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8378K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_iotable_view to public
    Sat Oct 27 00:57:42 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8376K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_iotable_view to public
    Sat Oct 27 00:57:42 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7626K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:43 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8617K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_iotable_view to public
    Sat Oct 27 00:57:43 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8616K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_iotable_view to public
    Sat Oct 27 00:57:44 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8305K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:45 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9203K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_piotable_view to public
    Sat Oct 27 00:57:45 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9203K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_piotable_view to public
    Sat Oct 27 00:57:46 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8396K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:47 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9475K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_piotable_view to public
    Sat Oct 27 00:57:47 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9473K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_piotable_view to public
    Sat Oct 27 00:57:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2424K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2654K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_table_data_view to public
    Sat Oct 27 00:57:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2651K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_table_data_view to public
    Sat Oct 27 00:57:48 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2430K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:49 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2658K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_table_data_view to public
    Sat Oct 27 00:57:49 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2657K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_10_1_table_data_view to public
    Sat Oct 27 00:57:51 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2526K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:51 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2717K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_view_view to public
    Sat Oct 27 00:57:51 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2716K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_view_view to public
    Sat Oct 27 00:57:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3482K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3785K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_h_view to public
    Sat Oct 27 00:57:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3784K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_h_view to public
    Sat Oct 27 00:57:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 4586K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:54 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5007K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_ph_view to public
    Sat Oct 27 00:57:55 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5004K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_ph_view to public
    Sat Oct 27 00:57:56 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8871K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:56 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9977K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_fh_view to public
    Sat Oct 27 00:57:56 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9976K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_fh_view to public
    Sat Oct 27 00:57:58 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10142K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:57:58 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 11371K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_pfh_view to public
    Sat Oct 27 00:57:58 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 11369K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_pfh_view to public
    Sat Oct 27 00:57:59 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8811K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9920K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_iot_view to public
    Sat Oct 27 00:58:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9919K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_iot_view to public
    Sat Oct 27 00:58:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9583K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10777K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_piot_view to public
    Sat Oct 27 00:58:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10774K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_piot_view to public
    Sat Oct 27 00:58:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2350K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2546K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_h_view to public
    Sat Oct 27 00:58:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2545K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_h_view to public
    Sat Oct 27 00:58:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3449K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3768K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_ph_view to public
    Sat Oct 27 00:58:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3765K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_ph_view to public
    Sat Oct 27 00:58:05 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7736K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:05 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8738K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_fh_view to public
    Sat Oct 27 00:58:05 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8737K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_fh_view to public
    Sat Oct 27 00:58:07 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9008K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:58:07 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10132K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_pfh_view to public
    Sat Oct 27 00:58:07 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10130K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on ku$_m_view_log_pfh_view to public
    Sat Oct 27 00:58:40 2007
    Thread 1 cannot allocate new log, sequence 6
    Checkpoint not complete
      Current log# 1 seq# 5 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G11M1.DBF
      Current log# 1 seq# 5 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G11M2.DBF
    Sat Oct 27 00:58:40 2007
    Completed checkpoint up to RBA [0x3.2.10], SCN: 63439
    Sat Oct 27 00:58:40 2007
    Beginning log switch checkpoint up to RBA [0x6.2.10], SCN: 108137
    Thread 1 advanced to log sequence 6
      Current log# 2 seq# 6 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G12M1.DBF
      Current log# 2 seq# 6 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G12M2.DBF
    Sat Oct 27 00:58:41 2007
    Completed checkpoint up to RBA [0x4.2.10], SCN: 81543
    Sat Oct 27 00:59:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2403K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:59:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2322K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on "_ALL_REPCOLUMN_GROUP" to PUBLIC with grant option
    Sat Oct 27 00:59:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2321K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on "_ALL_REPCOLUMN_GROUP" to PUBLIC with grant option
    Sat Oct 27 00:59:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2490K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    Sat Oct 27 00:59:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2406K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on "_ALL_REPRESOLUTION" to public with grant option
    Sat Oct 27 00:59:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2404K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_3540.trc
    KGL object name :grant select on "_ALL_REPRESOLUTION" to public with grant option
    Sat Oct 27 00:59:37 2007
    Beginning log switch checkpoint up to RBA [0x7.2.10], SCN: 124713
    Thread 1 advanced to log sequence 7
      Current log# 3 seq# 7 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G13M1.DBF
      Current log# 3 seq# 7 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G13M2.DBF
    Sat Oct 27 01:00:22 2007
    Completed checkpoint up to RBA [0x5.2.10], SCN: 97101
    Sat Oct 27 01:01:27 2007
    Beginning log switch checkpoint up to RBA [0x8.2.10], SCN: 145198
    Thread 1 advanced to log sequence 8
      Current log# 4 seq# 8 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G14M1.DBF
      Current log# 4 seq# 8 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G14M2.DBF
    Sat Oct 27 01:03:44 2007
    Completed checkpoint up to RBA [0x6.2.10], SCN: 108137
    Sat Oct 27 01:04:41 2007
    Completed checkpoint up to RBA [0x7.2.10], SCN: 124713
    Sat Oct 27 01:06:29 2007
    Completed checkpoint up to RBA [0x8.2.10], SCN: 145198
    Dump file d:\oracle\ism\saptrace\background\alert_ism.log
    Sat Oct 27 04:22:06 2007
    ORACLE V10.2.0.1.0 - Production vsnsta=0
    vsnsql=14 vsnxtr=3
    Windows Server 2003 Version V5.2 Service Pack 2
    CPU                 : 2 - type 586, 2 Physical Cores
    Process Affinity    : 0x00000000
    Memory (Avail/Total): Ph:3208M/3839M, Ph+PgF:11219M/11678M, VA:1928M/2047M
    Sat Oct 27 04:22:06 2007
    Starting ORACLE instance (normal)
    Sat Oct 27 04:22:06 2007
    Specified value of sga_max_size is too small, bumping to 952107008
    LICENSE_MAX_SESSION = 0
    LICENSE_SESSIONS_WARNING = 0
    Picked latch-free SCN scheme 2
    Autotune of undo retention is turned on.
    IMODE=BR
    ILAT =10
    LICENSE_MAX_USERS = 0
    SYS auditing is disabled
    ksdpec: called for event 13740 prior to event group initialization
    Starting up ORACLE RDBMS Version: 10.2.0.1.0.
    System parameters with non-default values:
      processes                = 80
      sessions                 = 96
      event                    = 10191 trace name context forever, level 1
      sga_max_size             = 952107008
      shared_pool_size         = 461373440
      shared_pool_reserved_size= 45911900
      filesystemio_options     = setall
      control_files            = D:\ORACLE\ISM\ORIGLOGA\CNTRL\CNTLRISM.DBF, D:\ORACLE\ISM\ORIGLOGB\CNTRL\CNTRLISM.DBF, D:\ORACLE\ISM\SAPDATA1\CNTRL\CNTRLISM.DBF
      control_file_record_keep_time= 30
      db_block_size            = 8192
      db_cache_size            = 461373440
      compatible               = 10.2.0
      log_archive_dest         = D:\oracle\ISM\oraarch\ISMarch
      log_buffer               = 2894848
      log_checkpoint_interval  = 0
      db_files                 = 254
      log_checkpoints_to_alert = TRUE
      dml_locks                = 4000
      undo_management          = AUTO
      undo_tablespace          = PSAPUNDO
      undo_retention           = 43200
      recyclebin               = off
      remote_os_authent        = TRUE
      remote_login_passwordfile= EXCLUSIVE
      job_queue_processes      = 1
      background_dump_dest     = D:\ORACLE\ISM\SAPTRACE\BACKGROUND
      user_dump_dest           = D:\ORACLE\ISM\SAPTRACE\USERTRACE
      core_dump_dest           = D:\ORACLE\ISM\SAPTRACE\BACKGROUND
      optimizer_features_enable= 10.2.0.1
      sort_area_size           = 2097152
      sort_area_retained_size  = 0
      db_name                  = ISM
      open_cursors             = 800
      optimpeek_user_binds   = FALSE
      pga_aggregate_target     = 612158668
      workarea_size_policy     = AUTO
      statistics_level         = typical
    MMAN started with pid=4, OS id=1944
    DBW0 started with pid=5, OS id=1936
    LGWR started with pid=6, OS id=3128
    CKPT started with pid=7, OS id=2692
    SMON started with pid=8, OS id=2052
    RECO started with pid=9, OS id=2060
    CJQ0 started with pid=10, OS id=2040
    MMON started with pid=11, OS id=2056
    MMNL started with pid=12, OS id=1128
    PSP0 started with pid=3, OS id=2000
    PMON started with pid=2, OS id=1724
    Sat Oct 27 04:22:35 2007
    CREATE DATABASE ISM CONTROLFILE REUSE  MAXLOGFILES 255 MAXLOGMEMBERS 3 MAXLOGHISTORY 1000 MAXDATAFILES 254 MAXINSTANCES 50 NOARCHIVELOG CHARACTER SET UTF8 NATIONAL CHARACTER SET UTF8 DATAFILE 'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M EXTENT MANAGEMENT LOCAL DEFAULT TEMPORARY TABLESPACE PSAPTEMP TEMPFILE 'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M UNDO TABLESPACE PSAPUNDO DATAFILE 'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M SYSAUX DATAFILE 'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    LOGFILE GROUP 1 ('D:\oracle\ISM/origlogA/log_g11m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g11m2.dbf') SIZE 50M  REUSE ,
    GROUP 2 ('D:\oracle\ISM/origlogB/log_g12m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g12m2.dbf') SIZE 50M  REUSE ,
    GROUP 3 ('D:\oracle\ISM/origlogA/log_g13m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g13m2.dbf') SIZE 50M  REUSE ,
    GROUP 4 ('D:\oracle\ISM/origlogB/log_g14m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g14m2.dbf') SIZE 50M  REUSE
    Sat Oct 27 04:22:36 2007
    Database mounted in Exclusive Mode
    Sat Oct 27 04:22:40 2007
    Successful mount of redo thread 1, with mount id 2062132555
    Assigning activation ID 2062132555 (0x7ae9a54b)
    Thread 1 opened at log sequence 1
      Current log# 1 seq# 1 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G11M1.DBF
      Current log# 1 seq# 1 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G11M2.DBF
    Successful open of redo thread 1
    Sat Oct 27 04:22:40 2007
    MTTR advisory is disabled because FAST_START_MTTR_TARGET is not set
    Sat Oct 27 04:22:40 2007
    SMON: enabling cache recovery
    Sat Oct 27 04:22:40 2007
    create tablespace SYSTEM datafile  'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL online
    Sat Oct 27 04:22:41 2007
    Incremental checkpoint up to RBA [0x1.3.0], current log tail at RBA [0x1.3.0]
    Sat Oct 27 04:22:44 2007
    Completed: create tablespace SYSTEM datafile  'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL online
    Sat Oct 27 04:22:44 2007
    create rollback segment SYSTEM tablespace SYSTEM
      storage (initial 50K next 50K)
    Completed: create rollback segment SYSTEM tablespace SYSTEM
      storage (initial 50K next 50K)
    Sat Oct 27 04:22:49 2007
    CREATE UNDO TABLESPACE PSAPUNDO DATAFILE  'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 04:22:54 2007
    Successfully onlined Undo Tablespace 1.
    Completed: CREATE UNDO TABLESPACE PSAPUNDO DATAFILE  'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 04:22:54 2007
    create tablespace SYSAUX datafile  'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO online
    Completed: create tablespace SYSAUX datafile  'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
      EXTENT MANAGEMENT LOCAL SEGMENT SPACE MANAGEMENT AUTO online
    Sat Oct 27 04:22:57 2007
    CREATE TEMPORARY TABLESPACE PSAPTEMP TEMPFILE  'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Completed: CREATE TEMPORARY TABLESPACE PSAPTEMP TEMPFILE  'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    Sat Oct 27 04:22:57 2007
    ALTER DATABASE DEFAULT TEMPORARY TABLESPACE PSAPTEMP
    Completed: ALTER DATABASE DEFAULT TEMPORARY TABLESPACE PSAPTEMP
    Sat Oct 27 04:22:57 2007
    ALTER DATABASE DEFAULT TABLESPACE SYSTEM
    Completed: ALTER DATABASE DEFAULT TABLESPACE SYSTEM
    Sat Oct 27 04:22:59 2007
    SMON: enabling tx recovery
    Sat Oct 27 04:22:59 2007
    Beginning local checkpoint up to RBA [0x1.75fb.10], SCN: 10621
    Completed checkpoint up to RBA [0x1.75fb.10], SCN: 10621
    Threshold validation cannot be done before catproc is loaded.
    replication_dependency_tracking turned off (no async multimaster replication found)
    Starting background process QMNC
    QMNC started with pid=14, OS id=2128
    Sat Oct 27 04:23:01 2007
    Completed: CREATE DATABASE ISM CONTROLFILE REUSE  MAXLOGFILES 255 MAXLOGMEMBERS 3 MAXLOGHISTORY 1000 MAXDATAFILES 254 MAXINSTANCES 50 NOARCHIVELOG CHARACTER SET UTF8 NATIONAL CHARACTER SET UTF8 DATAFILE 'D:\oracle\ISM\sapdata1\system_1\system.data1' SIZE 350M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M EXTENT MANAGEMENT LOCAL DEFAULT TEMPORARY TABLESPACE PSAPTEMP TEMPFILE 'D:\oracle\ISM\sapdata1\temp_1\temp.data1' SIZE 570M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M UNDO TABLESPACE PSAPUNDO DATAFILE 'D:\oracle\ISM\sapdata1\undo_1\undo.data1' SIZE 700M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M SYSAUX DATAFILE 'D:\oracle\ISM\sapdata1\sysaux_1\sysaux.data1' SIZE 200M REUSE AUTOEXTEND ON NEXT 20M MAXSIZE 10000M
    LOGFILE GROUP 1 ('D:\oracle\ISM/origlogA/log_g11m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g11m2.dbf') SIZE 50M  REUSE ,
    GROUP 2 ('D:\oracle\ISM/origlogB/log_g12m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g12m2.dbf') SIZE 50M  REUSE ,
    GROUP 3 ('D:\oracle\ISM/origlogA/log_g13m1.dbf',
    'D:\oracle\ISM/mirrlogA/log_g13m2.dbf') SIZE 50M  REUSE ,
    GROUP 4 ('D:\oracle\ISM/origlogB/log_g14m1.dbf',
    'D:\oracle\ISM/mirrlogB/log_g14m2.dbf') SIZE 50M  REUSE
    Sat Oct 27 04:23:32 2007
    Beginning log switch checkpoint up to RBA [0x2.2.10], SCN: 36577
    Thread 1 advanced to log sequence 2
      Current log# 2 seq# 2 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G12M1.DBF
      Current log# 2 seq# 2 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G12M2.DBF
    Sat Oct 27 04:24:32 2007
    Beginning log switch checkpoint up to RBA [0x3.2.10], SCN: 63599
    Thread 1 advanced to log sequence 3
      Current log# 3 seq# 3 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G13M1.DBF
      Current log# 3 seq# 3 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G13M2.DBF
    Sat Oct 27 04:25:09 2007
    Beginning log switch checkpoint up to RBA [0x4.2.10], SCN: 81508
    Thread 1 advanced to log sequence 4
      Current log# 4 seq# 4 mem# 0: D:\ORACLE\ISM\ORIGLOGB\LOG_G14M1.DBF
      Current log# 4 seq# 4 mem# 1: D:\ORACLE\ISM\MIRRLOGB\LOG_G14M2.DBF
    Sat Oct 27 04:25:20 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2802K exceeds notification threshold (2048K)
    Sat Oct 27 04:25:20 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2795K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on PLUGGABLE_SET_CHECK to SELECT_CATALOG_ROLE
    Sat Oct 27 04:25:21 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2791K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on PLUGGABLE_SET_CHECK to SELECT_CATALOG_ROLE
    Sat Oct 27 04:25:26 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3161K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :select a.*,   case when      input_bytes/decode(output_bytes, 0, null, output_bytes) > 1   then      input_bytes/decode(output_bytes, 0, null, output_bytes)   else 1 end compression_ratio,   sys.dbms_rcvman.num2displaysize(input_bytes) input_bytes_display,   sys.dbms_rcvman.num2displaysize(output_bytes) output_bytes_display  from (select sum(num_files_backed) num_files_backed,       sum(distinct_files_backed) distinct_files_backed,       min(min_first_change#) min_first_change#,       max(max_next_change#)
    Sat Oct 27 04:25:54 2007
    Completed checkpoint up to RBA [0x2.2.10], SCN: 36577
    Sat Oct 27 04:25:59 2007
    Beginning log switch checkpoint up to RBA [0x5.2.10], SCN: 97222
    Thread 1 advanced to log sequence 5
      Current log# 1 seq# 5 mem# 0: D:\ORACLE\ISM\ORIGLOGA\LOG_G11M1.DBF
      Current log# 1 seq# 5 mem# 1: D:\ORACLE\ISM\MIRRLOGA\LOG_G11M2.DBF
    Sat Oct 27 04:26:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2092K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_iont_view to select_catalog_role
    Sat Oct 27 04:26:00 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2092K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_iont_view to select_catalog_role
    Sat Oct 27 04:26:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 4682K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5138K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_nt_parent_view to select_catalog_role
    Sat Oct 27 04:26:01 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 5135K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_nt_parent_view to select_catalog_role
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2251K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2386K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_htable_view to public
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2384K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_htable_view to public
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2298K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2484K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_htable_view to public
    Sat Oct 27 04:26:02 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 2481K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_htable_view to public
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3342K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3566K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_phtable_view to public
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3562K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_phtable_view to public
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3397K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3702K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_phtable_view to public
    Sat Oct 27 04:26:03 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 3701K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_phtable_view to public
    Sat Oct 27 04:26:04 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7593K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:05 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8426K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_fhtable_view to public
    Sat Oct 27 04:26:05 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8424K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_fhtable_view to public
    Sat Oct 27 04:26:06 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7676K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:06 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8666K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_fhtable_view to public
    Sat Oct 27 04:26:06 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8664K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_fhtable_view to public
    Sat Oct 27 04:26:08 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8853K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:08 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9776K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_pfhtable_view to public
    Sat Oct 27 04:26:08 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 9774K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_pfhtable_view to public
    Sat Oct 27 04:26:09 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8946K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:10 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10060K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_pfhtable_view to public
    Sat Oct 27 04:26:10 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 10057K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_pfhtable_view to public
    Sat Oct 27 04:26:11 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7546K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:12 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8378K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_iotable_view to public
    Sat Oct 27 04:26:12 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8376K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_iotable_view to public
    Sat Oct 27 04:26:12 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 7626K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    Sat Oct 27 04:26:13 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8617K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_iotable_view to public
    Sat Oct 27 04:26:13 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8616K exceeds notification threshold (2048K)
    Details in trace file d:\oracle\ism\saptrace\usertrace\ism_ora_2528.trc
    KGL object name :grant select on ku$_10_1_iotable_view to public
    Sat Oct 27 04:26:14 2007
    Memory Notification: Library Cache Object loaded into SGA
    Heap size 8307K exceeds notification th

  • Novell Client / IPSec Tunnel

    Hi!
    My organiztion has office and central site inter connected through IPSec VPN using two ISR 1841.
    On our central site we have Novell server. At our office we have client PC witch Novell client v 4.91.
    When client copy file to Novell server through IPSec VPN (crypto map on interface) - file on Novell server to come to corrupt.
    When client copy file to Novell server without IPSec VPN (no crypto map on interface) - file on Novell server to come to ОК.
    Our parameters:
    crypto ipsec df-bit clear
    crypto isakmp policy 10
    encr 3des
    authentication pre-share
    group 2
    lifetime 28800
    crypto isakmp key x address y
    crypto map 10 10 ipsec-isakmp
    set peer y
    set transform-set toCenter
    match address Center
    PS: Copy to Windows server is always OK.
    Is it possible to resolve these problem?

    If you just want to allow the IPSec traffic between the Novell to pass through the PIX only, you just need to open up the esp protocol and for the Novell that is inside the PIX and udp port 500

  • Troubles using VRF-aware IPsec w/ crypto maps

    I'm trying to get a lab setup to work with a C2951 (15.2(4)M4) peering with an ASA 5510 (9.1(2)). The config is based on crypto maps, since I want the C2951 to be the initiating side, and as far as I understand, VTIs wouldn't be working together with the ASA due to the default 'any' crypto statements that are being applied on SVTIs.
    So I've set up this IKEv1-, crypto map-based lab, and the tunnel strictly won't come up; it seems that crypto doesn't find any interesting traffic at all (no debug crypto isakmp output pops up).
    What I'm doing for testing is issuing a VRF Ping from a loopback interface of the C2951. I was following the following cheat sheet to configure the IOS box:
    https://supportforums.cisco.com/docs/DOC-13524
    Please see the attached config files and the setup drawing.
    This is the way I'm testing it:
    C2951#sh deb
    Cryptographic Subsystem:
      Crypto ISAKMP debugging is on
    C2951#
    C2951#ping vrf test 10.0.0.1 source lo 1
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
    Packet sent with a source address of 40.0.0.1
    Success rate is 0 percent (0/5)
    C2951#
    Any hints for me, please?

    There are no VRF routes left in the config, and I've cleared the global and the VRF routing table. Even rebooted the box. Still only half of the Pings get answered. There are no crypto ipsec errors, so it should have something to do with routing...but what?
    C2951#sh crypto ipsec sa
    interface: GigabitEthernet0/0
        Crypto map tag: OUR-MAP, local addr 30.0.0.2
       protected vrf: test
       local  ident (addr/mask/prot/port): (40.0.0.1/255.255.255.255/0/0)
       remote ident (addr/mask/prot/port): (10.0.0.0/255.255.255.0/0/0)
       current_peer 20.0.0.1 port 500
         PERMIT, flags={origin_is_acl,}
        #pkts encaps: 14, #pkts encrypt: 14, #pkts digest: 14
        #pkts decaps: 8, #pkts decrypt: 8, #pkts verify: 8
        #pkts compressed: 0, #pkts decompressed: 0
        #pkts not compressed: 0, #pkts compr. failed: 0
        #pkts not decompressed: 0, #pkts decompress failed: 0
        #send errors 0, #recv errors 0
         local crypto endpt.: 30.0.0.2, remote crypto endpt.: 20.0.0.1
         path mtu 1500, ip mtu 1500, ip mtu idb GigabitEthernet0/0
         current outbound spi: 0xEB02ACDA(3942821082)
         PFS (Y/N): Y, DH group: group5
         inbound esp sas:
          spi: 0x1A943A9F(445921951)
            transform: esp-aes esp-sha-hmac ,
            in use settings ={Tunnel, }
            conn id: 18009, flow_id: ISM VPN:9, sibling_flags 80000040, crypto map: OUR-MAP
            sa timing: remaining key lifetime (k/sec): (4225929/3571)
            IV size: 16 bytes
            replay detection support: Y
            Status: ACTIVE(ACTIVE)
         inbound ah sas:
         inbound pcp sas:
         outbound esp sas:
          spi: 0xEB02ACDA(3942821082)
            transform: esp-aes esp-sha-hmac ,
            in use settings ={Tunnel, }
            conn id: 18010, flow_id: ISM VPN:10, sibling_flags 80000040, crypto map: OUR-MAP
            sa timing: remaining key lifetime (k/sec): (4225928/3571)
            IV size: 16 bytes
            replay detection support: Y
            Status: ACTIVE(ACTIVE)
         outbound ah sas:
         outbound pcp sas:
    C2951#sh ip route 10.0.0.0
    % Network not in table
    C2951#sh ip route vrf test 10.0.0.0
    Routing Table: test
    Routing entry for 10.0.0.0/24, 1 known subnets
    S        10.0.0.0 [1/0] via 20.0.0.1, GigabitEthernet0/0

Maybe you are looking for

  • NULL and Empty String

    Hi There, As far as I know, Null is not the same as an empty string; however, when I try this out, I get some unexpected results (well, at least unexpected for my liking): SQL> CREATE TABLE TS (MID NUMBER,   2  MDESC VARCHAR2(20) DEFAULT '' NOT NULL)

  • How do I install Snow Leopard onto a blank hard drive?

    I just got a hard drive for my macbook and I cant install it i boot with the disc holding "c" etc. what do i do?

  • How to burn a slideshow to DVD for anyone to play. I burned a DVD and can play it on my mac, but will not open in windows

    Need to know how to burn a DVD that can be viewed by any DVD player.  I created a DVD from a slideshow created in iPhoto.  I can open it on my computer, but it will not open or even be recognized in my home DVD player.  I asked a friend to try it on

  • Reinstall osx

    My imac was not working properly.  Someone suggested I was having problem with user permissions and I ran disk utility but it didnt help. I created a new user and switched to it and computer works good.  I would like to reinstall my OSX 10.8.3 so tha

  • Where can I purchase the motherboard for T60 model 2623-KEU?

    Hello ALL:    Please advice where can I purchase the motherboard for T60 model 2623-KEU? The BIOS password was locked while term. employee refuse to tell the password. Any way, how much it will cost? Is it possible to replace the motherboard by mysel