Move CA from Win2K3 to Win2012R2 - how to configure ASA

Hi Guys,
i've a littel problem with a ASA in combination with a Microsoft CA.
First, i will describe you the enviroment we have which works
CERTSRV => A Windows Server 2003 Server, with CA in Standanlone, activated NDES / SCEP Service and a RADIUS / IAS Service to let the ASA authenticate VPN User against the local Window User. The CA Root Cert has a key lenght of 512bit
Our goal is the move the CA and the RADIUS to a Windows 2012 R2 Server. Due the restriction of the windows 2012 ca to reject ca certs which less the 1024 bit we cannot simply import the current ca cert-pair into the new ca.
Also we wont upgrade the ca key-pair on our current win2k3 ca, because we cannot estimate the side-effects and the ASA VPNs must work.
So we came to fabulos idea to clone the win2k3 CERTSRV into VM. there we generate a new key-pair with 1024bit length. Then export this key, export the database from live system and import both successfully into the new 2012 R2 CA. SCEP and NAP Services are installed and tested succesfully. We are able to create a new client cert with SCEP.
Our actual problem is that we dont know how to handle the new, upgraded CA in the ASA Configuration.
I added the new CA in the CA Certificates Menu
Here is the relevant part of the ASA log (debug level)
7|Feb 27 2014|11:56:58|713236|||||IP = [CLIENT_IP], IKE_DECODE SENDING Message (msgid=6b028bd2) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 76
7|Feb 27 2014|11:56:58|715046|||||Group = DefaultRAGroup, IP = [CLIENT_IP], constructing qm hash payload
7|Feb 27 2014|11:56:58|715046|||||Group = DefaultRAGroup, IP = [CLIENT_IP], constructing IKE delete payload
7|Feb 27 2014|11:56:58|715046|||||Group = DefaultRAGroup, IP = [CLIENT_IP], constructing blank hash payload
7|Feb 27 2014|11:56:58|713906|||||Group = DefaultRAGroup, IP = [CLIENT_IP], sending delete/delete with reason message
7|Feb 27 2014|11:56:58|713906|||||Group = DefaultRAGroup, IP = [CLIENT_IP], IKE SA MM:49765104 terminating: flags 0x0105c002, refcnt 0, tuncnt 0
7|Feb 27 2014|11:56:58|715065|||||Group = DefaultRAGroup, IP = [CLIENT_IP], IKE MM Responder FSM error history (struct &0xadcda9c0) <state>, <event>: MM_DONE, EV_ERROR-->MM_BLD_MSG6, EV_CERT_FAIL-->MM_BLD_MSG6, NullEvent-->MM_BLD_MSG6, EV_ACTIVATE_NEW_SA-->MM_BLD_MSG6, NullEvent-->MM_BLD_MSG6, EV_VALIDATE_CERT-->MM_BLD_MSG6, EV_UPDATE_CERT-->MM_BLD_MSG6, EV_TEST_CERT
5|Feb 27 2014|11:56:58|713904|||||Group = DefaultRAGroup, IP = [CLIENT_IP], Certificate Validation Failed
3|Feb 27 2014|11:56:58|717027|||||Certificate chain failed validation. Certificate chain is either invalid or not authorized.
7|Feb 27 2014|11:56:58|717030|||||Found a suitable trustpoint ASDM_TrustPoint1 to validate certificate.
7|Feb 27 2014|11:56:58|717030|||||Found a suitable trustpoint ASDM_TrustPoint1 to validate certificate.
7|Feb 27 2014|11:56:58|717030|||||Found a suitable trustpoint ASDM_TrustPoint0 to validate certificate.
7|Feb 27 2014|11:56:58|717029|||||Identified client certificate within certificate chain. serial number: 1F00000951EB42CE6BD7157E2E000400000951, subject name: [CERT ATTRIBUTES].
7|Feb 27 2014|11:56:58|717025|||||Validating certificate chain containing 1 certificate(s).
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Connection landed on tunnel_group DefaultRAGroup
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Trying to find group via default group...
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Trying to find group via IP ADDR...
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Trying to find group via IKE ID...
3|Feb 27 2014|11:56:58|713020|||||IP = [CLIENT_IP], No Group found by matching OU(s) from ID payload:
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Trying to find group via OU...
4|Feb 27 2014|11:56:58|717037|||||Tunnel group search using certificate maps failed for peer certificate: serial number: 1F00000951EB42CE6BD7157E2E000400000951, [CERT_ATTRIBUTES]
7|Feb 27 2014|11:56:58|717036|||||Looking for a tunnel group match based on certificate maps for peer certificate with serial number: 1F00000951EB42CE6BD7157E2E000400000951, [CERT_ATTRIBUTES]
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], Trying to find group via cert rules...
6|Feb 27 2014|11:56:58|713172|||||IP = [CLIENT_IP], Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end is NOT behind a NAT device
7|Feb 27 2014|11:56:58|715047|||||IP = [CLIENT_IP], processing notify payload
7|Feb 27 2014|11:56:58|713906|||||Dump of received Signature, len 256:
7|Feb 27 2014|11:56:58|715076|||||IP = [CLIENT_IP], Computing hash for ISAKMP
7|Feb 27 2014|11:56:58|715001|||||IP = [CLIENT_IP], processing RSA signature
7|Feb 27 2014|11:56:58|715047|||||IP = [CLIENT_IP], processing cert request payload
7|Feb 27 2014|11:56:58|715047|||||IP = [CLIENT_IP], processing cert payload
7|Feb 27 2014|11:56:58|713906|||||IP = [CLIENT_IP], DER_ASN1_DN ID received, len 145
7|Feb 27 2014|11:56:58|715047|||||IP = [CLIENT_IP], processing ID payload
7|Feb 27 2014|11:56:58|713236|||||IP = [CLIENT_IP], IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + ID (5) + CERT (6) + CERT_REQ (7) + SIG (9) + NOTIFY (11) + NONE (0) total length : 3111
7|Feb 27 2014|11:56:58|715063|||||IP = [CLIENT_IP], Successfully assembled an encrypted pkt from rcv'd fragments!
Do you know which is the best practise for us ?
best regards from germany
Edit: I see. I missed some more informationen. Old VPN Client, with certs created on the old Win2k3 CertSrv are working
6|Feb 27 2014|13:27:52|717028|||||Certificate chain was successfully validated with revocation status check.
6|Feb 27 2014|13:27:52|717022|||||Certificate was successfully validated. serial number: 5D974DBD00010000084D, subject name: [CERT_ATTRB] .
7|Feb 27 2014|13:27:52|717030|||||Found a suitable trustpoint ASDM_TrustPoint0 to validate certificate.
7|Feb 27 2014|13:27:52|717029|||||Identified client certificate within certificate chain. serial number: 5D974DBD00010000084D, subject name: [CERT_ATTR].
7|Feb 27 2014|13:27:52|717025|||||Validating certificate chain containing 1 certificate(s).
7|Feb 27 2014|13:27:52|713906|||||IP = [CLIENT_ID], Connection landed on tunnel_group DefaultRAGroup
7|Feb 27 2014|13:27:52|713906|||||IP = [CLIENT_ID], Trying to find group via default group...
7|Feb 27 2014|13:27:52|713906|||||IP = [CLIENT_ID], Trying to find group via IP ADDR...
7|Feb 27 2014|13:27:52|713906|||||IP = [CLIENT_ID], Trying to find group via IKE ID...
Here are the configuration of the trustpoints
crypto ca trustpoint ASDM_TrustPoint0
revocation-check crl
enrollment url http://U.X.Y.Z:80/certsrv/mscep/mscep.dll
fqdn xxxxx
subject-name [CERT_ATTRB]
keypair asa01.key
crl configure
no protocol ldap
crypto ca trustpoint ASDM_TrustPoint1
enrollment terminal
crl configure
crypto ca trustpoint ASDM_TrustPoint2
revocation-check crl none
enrollment url http://W.X.Y.Z:80/certsrv/mscep/mscep.dll
no client-types
crl configure
no protocol ldap
crypto ca trustpoint ASDM_TrustPoint3
crl configure
crypto ca trustpoint ASDM_TrustPoint4
revocation-check crl none
enrollment url http://W.X.Y.Z:80/certsrv/mscep/mscep.dll
no client-types
crl configure
no protocol ldap
crypto ca trustpoint ASDM_TrustPoint5
enrollment terminal
crl configure
crypto ca certificate chain ASDM_TrustPoint0
certificate 2a5a90e900010000083c
quit
certificate ca 1e185567c7bc7e91473edd472e033d78
quit
crypto ca certificate chain ASDM_TrustPoint1
certificate ca 10acffbf9fb6429947e0cdea136cf8eb
quit
crypto ca certificate chain ASDM_TrustPoint2
certificate ca 10acffbf9fb6429947e0cdea136cf8eb
quit
crypto ca certificate chain ASDM_TrustPoint4
certificate ca 10acffbf9fb6429947e0cdea136cf8eb
quit
crypto ca certificate chain ASDM_TrustPoint5
certificate ca 3ae8ce8cf1619498418f9982315e6ad9
quit

This seems to be very useful answer but can you provide me with some code of some link where I can find some help. actually I am new to SSIS
Here are some good examples for filling variables with an Execute SQL Task:
http://dataqueen.unlimitedviz.com/2012/08/how-to-set-and-use-variables-in-ssis-execute-sql-task/
http://dwbi1.wordpress.com/2011/06/06/ssis-updating-a-variable-based-on-database/
And here is how you set the value of a property of the foreach loop with an expression:
Please mark the post as answered if it answers your question | My SSIS Blog:
http://microsoft-ssis.blogspot.com |
Twitter

Similar Messages

How toremove messages from JMS Queue?how to configure queue in spring?

Hi
I have Confiured a JMS configaration in spring applicationConfiguaration.xml file
<bean id="connectionFactory" class="org.apache.activemq.ActiveMQConnectionFactory">
          <property name="brokerURL" value="tcp://localhost:61616"/>
          <property name="useAsyncSend" value="true"/>
     </bean>
     <bean id="queue" class="org.apache.activemq.command.ActiveMQQueue">
     <constructor-arg value="foo"/>
</bean>
     <bean id="broker" class="org.apache.activemq.xbean.BrokerFactoryBean">
          <property name="config" value="classpath:activemq.xml" />
          <property name="start" value="true" />
     
     </bean>
     <bean id="auditInterface"
          class="org.springframework.jms.remoting.JmsInvokerProxyFactoryBean">
<property name="serviceInterface" value="com.infiniti.gpn.auditing.AuditInterface"/>
<property name="connectionFactory" ref="connectionFactory"/>
<property name="queue" ref="queue"/>
</bean>
     <bean id="listenerContainer" class="org.springframework.jms.listener.SimpleMessageListenerContainer">
<property name="connectionFactory" ref="connectionFactory"/>
<property name="destination" ref="queue"/>
<property name="messageListener" ref="auditMessageListener"/>
     </bean>
Sender is sedning messages continusly messages that messages r storing in queue , these r acupying more memory in RAM , due to that jboss is restarting for each request, is there any way to clean up messages in Queue ? if it is there then how will configure that queue in apllicationConfiguaration.xml file?
Thanks in advance
Nara

I suggest posting your question on the [Spring Remoting and JMX forum|http://forum.springframework.org/forumdisplay.php?f=30].

How to remove messages from JMS Queue?how to configure queue in spring?

Hi
I have Confiured a JMS configaration in spring applicationConfiguaration.xml file
<bean id="connectionFactory" class="org.apache.activemq.ActiveMQConnectionFactory">
<property name="brokerURL" value="tcp://localhost:61616"/>
<property name="useAsyncSend" value="true"/>
</bean>
<bean id="queue" class="org.apache.activemq.command.ActiveMQQueue">
<constructor-arg value="foo"/>
</bean>
<bean id="broker" class="org.apache.activemq.xbean.BrokerFactoryBean">
<property name="config" value="classpath:activemq.xml" />
<property name="start" value="true" />

</bean>
<bean id="auditInterface"
class="org.springframework.jms.remoting.JmsInvokerProxyFactoryBean">
<property name="serviceInterface" value="com.infiniti.gpn.auditing.AuditInterface"/>
<property name="connectionFactory" ref="connectionFactory"/>
<property name="queue" ref="queue"/>
</bean>
<bean id="listenerContainer" class="org.springframework.jms.listener.SimpleMessageListenerContainer">
<property name="connectionFactory" ref="connectionFactory"/>
<property name="destination" ref="queue"/>
<property name="messageListener" ref="auditMessageListener"/>
</bean>
Sender is sedning messages continusly messages that messages r storing in queue , these r acupying more memory in RAM , due to that jboss is restarting for each request, is there any way to clean up messages in Queue ? if it is there then how will configure that queue in apllicationConfiguaration.xml file?
Thanks in advance
Nara

Hi,
Even i have a similar kind of requirement where in, i want to clear the JMS Queue Message programmatically, on certain condition.
i am using Spring JMS. The JMS Queue has a listener. In the listener we want to clear the Queue contents based upon the condition.
If anybody has any idea about this, please reply back.
Thanks in Advance.
Manjunath.

How do I move photos from iPhone to iPad, How do I move photos from iPhone to iPad

How do I move from photos from iPhone to iPad to free up space on iPhone?

Whoops.... New to all this! I have an iPhone, an iPad, a MacBook pro and an iMac.... I have recently upgraded my iMac to lion so should be good on iCloud (although, don't understand how this works yet...). I have about 400 pics on iPhone that I'd like to keep - but I am now full on memory so can't really take any more... Was trying to empty iPhone so I could take more photos....
Thanks for your help

How do I move docs from iBooks to GoodReader, How do I move docs from iBooks to GoodReader

I am a novice and a Windows user. I started downloading docs and putting them in iBooks or PDF app depending upon the nature of the doc. I have now decided to use GoodReader as a standard. I cannot move the docs from iBooks or PDF app to GoodReader - I have docs all over the place. How can I rganise them? Any assistance would be appreciated.

There isn't an easy way, as far as I know, to do it directly on the iPad, as the iBooks app doesn't allow you to transfer PDFs to another app. You could open each PDF individually, email it to yourself via the 'share' icon (the icon of the box with the arrow coming out of it towards the top left), and then use 'open in' in Mail to open it in GoodReader - but if there are a lot of them then that will be time-consuming. Or you copy them to GoodReader via your computer's iTunes via file sharing : http://support.apple.com/kb/ht4094
Even though they aren't iTunes purchases, you should be able to copy them from iBooks over to the Books section of your computer's iTunes library via File > Devices > Transfer Purchases, and you can then find where they are stored on your PC by right-clicking one of them in the Books part of your library and selecting 'show in explorer' on the popup - that will tell you where they are stored so that you can add them to GoodReader via 'file sharing'.
I don't know about the other app, but if you can't copy them directly from that app to GoodReader then you might be able to copy them off the iPad via file sharing, and then add them to GoodReader

Trying to transfer movie trailer from iphone to ipad - how do i do it?

I've been reading the forums and they say to copy the project into itunes from the imovie app - which I did on the iphone. However, when I go into itunes on my computer to transfer it to the ipad, the instructions on this forum say to click on the device (the ipad) go to apps - and then click on the app for file sharing. I can't find this specific step. Maybe this was changed when they updated itunes? I have the most recent itunes so how do I do this step?
Also, if I transfer the trailer - does all the associated video I took transfer with it? Or will I have yellow triangles every where?
I have the iphone 4s, ios 6.1.2, ipad 2 ios 6.1.4
I took tons of video on my recent vacation and made 4 trailers - upon getting home, one was deleted, not by me, app crashed and then I opened and it wasn't there!!! I did a soft and hard reset to no avail. Really want to get this off my 16 gb phone and to my 64 gb ipad2 so I can finish it up and submit.
I have about 5 gb of video that I can't delete yet till this is resolved, so need to fix this ASAP so i can delete the associated video and clear space.
Help! Thanks!

A couple of alternatives are to upload it to a Dropbox account. You can then place the file in a "Public" folder and send a link to whoever you want to share with including yourself and then download it to your iPad. You can also download a free app called "Instashare" from the App Store. Both devices will need this app. The app will let you share large files via a WiFi connection but you must both be in close proximity. It's very similar to the new feature "Airplay" coming in iOS 7. Hope this will help

HT201272 I have a bunch of movies missing from my library? How do I get them back?

I followed the tutorial and still nothing. It's as if they never exisited in my library. Where did they go and how do I get them back?

You can re download past purchases for free using the same Apple ID > Downloading past purchases from the App Store, iBookstore, and iTunes Store

I can't add a title to a movie imported from my camera! how come?

This is really frustrating because I have one clip (an entirely different one than the one I want to add a title to) that is "accepting" a title. but the one I imported from my camera (a testimonial from a client) just wont work. nothing happens when I drag and try to drop a title. with the other one, it turns blue and it's clear I can drop a title. I was able to edit my video and remove some clips.
this has happened before. i need to understand why it happens so 1. i can avoid it in the future and 2. stop wasting so much time messing around with this critcal but SMALL piece.
please help!
Fareen

ill try to help...
forgive me i'm no tech. much like pictures cant be edited retitled etc, once uploaded from camera roll. (they can be in camera roll) I think you can do it on the computer after the fact.
as for where to find the video that depends on the computer. I dont know on a mac but windows based you find the file in your library right click and select rename.
hope that helps

How to configure ASA to allow activesync connections ?

To allow Activesync connections (between smartphones and an internal Exchange server) thru an ASA, I think about 3 or 4 potential solutions :
1) do a NAT on the Exchange server and allow activesync TCP connections from any IP to the Exchange server : I tested that and this works, but it is not the most secure solution we can imagine;
2) use a Clienless VPN SSL ASA configuration : I tried it, but got problems certaintly related to the fact that the Activesync client, installed on my Android/Samsung smartphone, does not seem to be able vto pass properly thru the ASA Portal to reach the Exchange server;
3) use an Anyconnect VPN ASA configuration : I tried it , but did not manage to install or use any of the Samsung Anyconnect client available on Android Market; by the way, I saw, in the Anyconnect VPN Client Admin Guide 2.4, that an ActiveSync MSI is available from CISCO (
anyconnect-wince-ARMv4I-activesync-AnyConnectRelease_Number-k9.msi), but I don't see any details about how it is supposed to be used except that it is for Windows environment only, so, not for an Android phone, but I have Windows Mobile smartphones to integrate too, so, maybe it can help me in this case ;
4) if Clientless nor Anyconnect solutions can't work, it might be better to use the ASA Cut-Through proxy function to get a more secure solution than the first one listed above; but I was not successful either with this cut-through proxy function
Any ideas or examples about how to allow activesync connections thru ASA would be welcomed
thanks in advance

Hi,
Generally ASA with CSC will support HTTP,FTP,SMTP,POP3 Scaning and Filtering.
From version ASA IOS 8.4.2 and CSC 6.6.1125.0, it will support HTTPS filtering also.
But here one limitation is that Https filtering will not support earlier versions of internet explorer 9, i.e if you want HTTPS filtering you must use Internet explorer 9 or after versions( As you know that Windows XP machines won't support internet explorer 9). But with firefox HTTPS filtering will support from versions 4.
For your reference use below 8.4.2 release guide
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
Release notes for CSC version 6.6.1125
http://www.cisco.com/en/US/docs/security/csc/csc66/release/notes/cscrn66.pdf
Basic configuration of the CSC
http://www.cisco.com/en/US/docs/security/csc/csc6.1.1569.0/administration/guide/cscappa.pdf
Sending traffic to the CSC module (using ASDM and CLI)
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808dea62.shtml
The troubleshooting guide:
http://www.cisco.com/en/US/docs/security/csc/csc63/administration/guide/csc8.html#wp1147829
Hope this will help you...
Do rate help ful posts..
Regards,
Janardhan

How to configure ASA 5510 V9.1(5) to send Netflow packets to Netflow Analyser 8.0

Hi guys,
I've configured my ASA 5510 Version 9.1(5) to send flow to Netflow Analyser. I think I've done it correctly but what happened is that I can see the ASA in netflow and netflow packets are receiving and increasing every time I refresh the page but there are no traffic as you can see in the attachment file. Also how can I figure out which ifindex is which interface to rename it?
BTW, my netflow version is 8.0 and below is the netflow config:
access-list NETFLOWMONITOREDTRAFFIC extended permit ip any any
flow-export destination INSIDE A.B.C.D 9996
flow-export template timeout-rate 1
flow-export delay flow-create 60
flow-export active refresh-interval 2
class-map NETFLOW
match access-list NETFLOWMONITOREDTRAFFIC
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect ip-options
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect icmp
inspect icmp error
class NETFLOW
flow-export event-type all destination A.B.C.D
class class-default
flow-export event-type all destination A.B.C.D
Hope someone can help me here.
Cheers,
Joe

I did find a workaround by keeping a connection open for communication between the client and server. However, I wish I did not have to do this. Ideally, I would like to be able to establish connections to the server only when needed and have the client JRE remember what certificate the user selected.
Browsers have this feature based on a user session. (i.e. once a user offers up a certificate to a server, the browser will not ask the user which certificate to send for the duration of the session to a given server).

How to configure for the give senario where we from APO demand planning, we provide baseline forecast into TPM

Hello Guru's,
Request for information on smart documentation on the integration between Trade Promotion Management and SCM-Demand Planning from an architecture perspective how to configure for the give senario where we from APO demand planning, we provide baseline forecast into TPM and from TPM promotions values can be considered in to APO demand planning: can anybody give me some insight on it.
Thanks in advance.
Kumar

Hi Praveen
There are several ways you can connect a DP system to a TPM. How are your interfaces and systems setup?
Option1:
Extract the baseline from APO to a BW cube, extract the data out of BW, may be using infospokes/open hub and pass it on to TPM.
2. Have a custom program written in APO-DP to extract the selected keyfigure data at the aggregation level into an interface or a .txt file into APO directory and use some data transfer service such as EDI to take this data and send to TPM.
In my experience it is simple to define an integration process. The much larger and complicated aspects are the date adjustments and the aggregation levels.
Date adjustments:
Understand the basis of the data in APO and TPM. APO is usually at the requested delivery date or material availability date ( when the customer like a store wants the product). However TPMs are usually at the consumption date ( when an end customer like you and me but from store shelf). Depending on the product and business style this can mean several days difference. Let's say it is 25 days on average, you need to add 25 days to APO base line date to get the TPM consumption date.
Aggregation level:
This can be product or customer. If the planning in DP is at product sku level and the TPM is at packs or brand level, you need to aggregate the data up before loading to TPM. The same with customer.
To me the most complex part of the integration is to understand and transform the data in a meaningful way and a strategy to sustain this integration by keeping both DP and TPM in sync in terms of master data. Also important to have a process for identifying exceptions and failures. you send baseline from DP to TPM and if it fails, how do you know? how do you trouble shoot?
Hope these help.

What is Certificate and how to configure it in cacerts file...

Hi,
I got an error wile authenticating LDAP server, saying"unable to find valid certification path to requested target", I came to know that I need to configure LDAP server's certificates in jre/lib/security/cacerts file. but I don't know how to do it.
Could someone explain what is that certificate? how do I get that information from LDAP admins? how to configure certification in my machine and how to use in our logic?
Thanks,
Sumant K

I got the certificate and now I want to add it in my cacerts file .. how do I do that? please give me reply

How to configure modem and airport extreme?

I have a TP-Link modem/wireless router from the provider.
My Airport Extreme is connected to the modem.
The wireless router in the modem has been switched off.
There is a 'double NAT' warning from the AE.
How to configure the TP-L modem and the AE router to get the best results?
Many thanks if some one could help me there.
Gr. Lance

Turning off the wireless on the TP-Link router does not make it a simple modem.
You need to configure the AirPort Extreme in Bridge Mode to operate correctly with another router on the network.
Open AirPort Utility and click on the AirPort Extreme icon, then click Edit
Click the Network tab a the top of the window
Make sure that the setting for Router Mode is "Off (Bridge Mode)"
Click Update to save the new settings
Wait 30 seconds for a green light on the AirPort Extreme, then power off the complete network....all devices....in any order you want.
Wait a minute, then start the TP-Link modem/router first and let it run a full minute
Start the AirPort Extreme next the same way
Keep starting devices one at at a time the same way until the entire network is back up.

How can i move icons from one screen to the other?

How do i move icons from one page to another?

Tap and hold any icon for a couple of seconds. They'll all start to wobble. Tap and drag the one you want to move to the side of the screen and the next screen will appear; drop the icon on whatever screen you want it on.
You can also do it quicker in iTunes - connect the phone and click the Apps tab in the main window. You'll see a picture of your phone with the apps laid out. Just click and drag

How can I move apps from one computer to the other?

How can I move apps from one computer to the other?
(preferably without iCloud)

Backup your iTunes library to an external drive and onto the other computer
http://support.apple.com/kb/ht1751

Move CA from Win2K3 to Win2012R2 - how to configure ASA

Similar Messages

Maybe you are looking for