Nortel VPN Issues Returned with 7.3.1?

When I first bought my Airport extreme, I had to put it on the shelf for a couple of months because it wouldn't allow me to make connections to my firm's NORTEL CONTIVITY VPN server. A subsequent firmware update (maybe 7.2) fixed it.
Now, running 7.3.1, I'm having the very same issue again.
Anyone else.
Kenny

No Love. Thanks for the suggestion, but it didn't do anything. I suspect that a previous post about the version of software is correct. The reason being: Our company has VPN servers in North America, Europe, and Asia. When Apple "Broke" the VPN function the last time, we were still able to connect to Europe (various users of Apple routers in the company). Then, when Apple fixed the problem with a firmware upgrade, we were able to connect to all three servers no problemo.
Now, with the 7.3.1 firmware upgrade, the problem returned exactly as it had before. To wit, we can still connect to Europe, but not the other servers.
Regards
Kenny

Similar Messages

Nortel VPN still broken with Airport Extreme firmware 7.1

I've just recently started using the NAT'ed mode of my 802.11n Airport Extreme and the the Nortel VPN connectivity is still broken with firmware 7.1.
I've setup a side by side config using the new Airport Extreme and my older Airport Express to make sure the issue is indeed with the Airport Extreme.
Here are the details of my setup:
ISP: NTT/GOL B-FLET (PPoE)
Wireless Config #1 - Airport Extreme firmware 7.1
Wireless Config #2 - Airport Express firmware 6.3
Client #1 - Nortel Contivity VPN V06_01.014 Windows XP 802.11g
Client #2 - Nortel Contivity VPN V04_86.033 Windows XP in Parallels 802.11n
The odd thing is that it isn't totally broken. The VPN connection is made and low bandwidth transfers work fine (ie. ssh, http requests), but higher bandwidth transfer fail to complete (ie RDP/RDC, ftp's, Outlook xfers).
When my clients are on the Airport Extreme Network, they have the issue but don't have the issue on the Airport Express network.
Is anyone else still having problems with Nortel VPN ? Does Apple have any suggestions ?
Thanks,
Eliot

I'm using Apani's Nortel VPN client (the most recent version) on my Mac mini, and the Windows version on my Windows XP notebook computer. Both were broken with the original AEBS firmware (7.0), but now both work well with the updated 7.1 firmware.
Keep experimenting - I'm sure you'll get it working.

Strange VPN issue, initiates with ICMP not TCP

Hello All,
I am experiencing a strange issue on a VPN LAN-to-LAN tunnel between two Cisco ASA firewall.
Whenever a remote side tries to connect to a local server over the VPN tunnel with a TCP connection (an HTTP browser connection) all incoming SYN packets get dropped and I can see them in the asp drop capture I am running. The SYN packets are dropped with a message:
"Drop-reason: (acl-drop) Flow is denied by configured rule"
The VPN tunnel gets built and Phase 2 SA is established but there are no encrypted packets going back to the remote end.
Only when the remote side initiates an ICMP ping to the local server then is the Phase2 SA re-established and the packets get encyrpted going back to the remote side. After that a Web Browser connection works fine and can establish an HTTP session with the Web Server.
Has anyone come across such an event?
Attaching the VPN configuration as well as the logs that show the relevant captures of ASP Drops and the Phase 2 SA on the VPN tunnel.
Remote hosts are on the 10.200.10.0/24 subnet and the Web Server is 10.7.0.68 running on port 81.
Thank you.
Dmitry.

This issue was resolved. Re-creating the access lists that matched interesting traffic on both sides of the VPN tunnel fixed the issue. The access lists were matched exactly (except the direction of traffic obviously) to avoid any discrepancies.
Just in case anyone else comes across this problem.

Print double profiling issue returned with 2.3RC

So Canon corrects there print drivers so that double profiling does not happen with LR2.2 and PSCS4 on Leopard, after all the fault was placed on the printer manufacture/drivers by Adobe and Apple.
So what happens LR2.3RC is released and causes the printer drivers to again default to double profiling. Forcing ColorSync again instead of No Correction.
WHAT THE HELL IS WRONG HERE?
Is this a f---ing game or what?
Are the Adobe programmers just that printer/CM challenged?
If you can't get any of this right, why not just do like ID and IL and lets us make our own choices in the printer driver. We don't need printing from PS and LR "IDIOT PROOFED" when choosing Application Manages Color.
You have really shown with the release of LR2.3RC who the real idiots are when it comes to printing with Application Manages Color.

I agree with DYP.
One spends over 600 dollars for a program that lets you control everything and then tries to make it idiot proof. TOO F****** bad if an idiot spends his money then whines the program is too difficult. Suck it up, grow up, read the manual, cruze the internet, take seminars, buy training DVDS. Good grief ! ! !
Now . . I fee better ;-) grin.
ADOBE, are you listening ? ? ? Yea actions, plugins etc are great. Let the user decide on when and if to purchase the crutches.
I come from the "wet" darkroom. I learned the craft and art of the wet darkroom. I am now learning the digital darkroom. An old dog can learn new tricks . . . 71st birthday March 30 this year.
Party on dude,
have fun,
make pictures,
play,
learn.
Yours,
Tom
http://www.tom-elliott-photography.com/special.htm

Nortel VPN Compatibility issue

Hi All,
I'm a newbie in using BPM studio 10.3, I just want to ask something about BPM Studio 10.3. The scenario is every time I run the project on my laptop, the project wont run on my browser. I think the reason is that I'm using Nortel VPN. My question is, do you know how would I set up my studio or my laptop so that the project would run on my browser while using Nortel VPN?

IPSec VPN can be with no problem set up between any cisco routers (and not nesesserely cisco), so there are should be no issues in your case.
If you say that tunnel is established successfully, then problem most probably related to routing issues between sites or incorrect crypto-acl configured. Check if hosts on both sites have correct routing information on how to get to subnets on the other site.
To make more accurate assumptions it would help if you provide config on both sites and describe your topology.

Airport Extreme 802.11n with Nortel VPN client

Hello,
Has anyone had any experience using the Airport Extreme 802.11n) with a PC (sorry, I have both a PC and a Mac)running the Nortel VPN client?
The new router works perfectly with the Mac but I also need to use the VPN on the PC for certain functions in my work. On my previous router (Dlink DIR625), I had to set a dedicated virtual tunnel to port 9550 to solve this issue. I think this might still be true for the Airport Extreme but I don't see how to do it. Any help would be appreciated. Thanks.

I had the same problem and an apple apple care tech walked me through it yeterday.
Call them, they were great.
JK

Error Issue: enable clock spreading returned with 0 sh-2.05a#

Hi I am having some serious issues with my laptop. I believe hat it is having overheating problems and freezes constantly. Lately it gave me error: enable clock spreading returned with 0 sh-2.05a# when I start up and cannot get beyond the gray screen! I am desperate what can I do? I have searched a lot of these posts and cannot find any resolution. Help me please! Thank you in advance!
powerbook G4 Mac OS X (10.2.x)

I am having the exact same problem - my Dad gave me this computer in December and we have been trying to convert our knowledge base from PC!!! confused...
here is the copy and paste from the crash log:
Process: Finder [1760]
Path: /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
Identifier: Finder
Version: ??? (???)
Code Type: PPC (Native)
Parent Process: launchd [118]
Date/Time: 2008-03-03 15:21:43.551 -0500
OS Version: Mac OS X 10.5.2 (9C31)
Report Version: 6
Exception Type: EXC_BREAKPOINT (SIGTRAP)
Exception Codes: 0x0000000000000001, 0x000000008fe0105c
Crashed Thread: 0
Dyld Error Message:
Symbol not found: __CSDeviceSupportsODisk
Referenced from: /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
Expected in: /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
Monday, March 3, 2008 3:47:53 PM US/Eastern
can you help?

Time Capsule - Nortel VPN Client

Has Apple finally addressed the issue(s) with Nortel VPN clients??? I know that this has been an ongoing issue...I lost track of notes...can someone please update me. Thanks!

I tried for about a week to get my Contivity 4_65.09 client to work thru the Time Capsule to no avail. When I called apple, they refused to offer any help. I have not seen any successful updates from anyone. Returned TC on day 14. I really did like it other than this issue, but sadly, not being able to connect to work is a dealbreaker.

Issue found with Oracle 11.2.0.2 left outter joins.

When performing a left outter join, that returns no data - we are seeing an issue with 11.2.0.2 where it does not return any rows at all - where it should in fact return one row with null data. We have thoroughly tested this against 11.2.0.1 as well as 10g and found no issues, but for some reason 11.2.0.2 does not perform as expected.
The following queries demonstrate what we're experiencing, and the subsequent DDL / DML will expose this issue on a 11.2.0.2 oracle DB.
-- QUERIES --
--Query that exposes the LOJ issue (should return one row with 4 null columns)
-- RETURNS: NO ROWS ARE RETURNED
SELECT lt.*
FROM Attr attr
JOIN Obj obj ON attr.id = obj.id
LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
WHERE attr.id = 225;
--PLEASE NOTE, the 'AND 1 = 2' is necessary for our particular use case. While this doesn't make much logical sense here, it is necessary to expose this issue.
--Query - shows the expected behavior by simply adding a column that is not null.
--RETURNS: ONE ROW RETURNED with first 4 columns null, and '225' for obj.id.
SELECT lt.*, obj.id
FROM Attr attr
JOIN Obj obj ON attr.id = obj.id
LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
WHERE attr.id = 225;
--Query - shows that the expected behavior also resumes by swapping the LoJ against obj.id instead of attr.id. Since these tables are joined together by id, this should be ARBITRARY!
-- RETURNS: ONE ROW RETURNED with first 4 columns null, and '225' for obj.id
SELECT lt.*
FROM Attr attr
JOIN Obj obj ON attr.id = obj.id
LEFT OUTER JOIN Loc_Txt lt ON obj.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
WHERE attr.id = 225;
-- DDL --
-- OBJ TABLE --
CREATE TABLE "TESTDB"."OBJ"
     "ID" NUMBER(10,0) NOT NULL ENABLE
     ,"TYPEID" NUMBER(10,0) NOT NULL ENABLE
     ,CONSTRAINT "OBJ_PK" PRIMARY KEY ("ID") RELY ENABLE
commit;
-- LOC_TXT TABLE --
CREATE TABLE "TESTDB"."LOC_TXT"
     "ID" NUMBER(10,0) NOT NULL ENABLE,
     "OBJECTID" NUMBER(10,0) NOT NULL ENABLE,
"TYPEID" NUMBER(10,0) NOT NULL ENABLE,
     "VALUE" NVARCHAR2(400) NOT NULL ENABLE,
     CONSTRAINT "LOC_TXT_PK" PRIMARY KEY ("ID") RELY ENABLE,
     CONSTRAINT "LOC_TXT1_FK" FOREIGN KEY ("OBJECTID") REFERENCES "TESTDB"."OBJ" ("ID") RELY ENABLE
commit;
-- ATTR TABLE --
CREATE TABLE "TESTDB"."ATTR"
     "ID" NUMBER(10,0) NOT NULL ENABLE,
     "ATTRIBUTEVALUE" NVARCHAR2(255),
     CONSTRAINT "ATTR_PK" PRIMARY KEY ("ID") RELY ENABLE,
     CONSTRAINT "ATTR_FK" FOREIGN KEY ("ID") REFERENCES "TESTDB"."OBJ" ("ID") RELY ENABLE
commit;
-- DATA --
insert into obj (id, typeid) values(225, 174);
insert into attr (id, attributevalue) values(225, 'abc');
insert into obj (id, typeid) values(2274, 846);
insert into loc_txt(id, objectid, typeid, value) values(540, 2274, 851, 'Core Type');
commit;
-- DROP TABLES --
--DROP TABLE "TESTDB"."ATTR";
--DROP TABLE "TESTDB"."LOC_TXT";
--DROP TABLE "TESTDB"."OBJ";
--commit;

Whilst I agree that your test cases do show some anomalies, the statement logic does smell a little odd.
In general, I'd be wary of trying to reproduce issues using hardcoded conditions such as "AND 1=2".
As this predicate can be evaluated at parse time, you can get plans which are not representative of run time issues.
However....
The trouble with ANSI - trouble as in it seems to have a lot of bugs/issues - is that it is always transformed to orthodox Oracle syntax prior to execution - you can see this in a 10053 trace file. This is possibly not helped by the distinction ANSI has between join predicates and filter predicates - something that Oracle syntax does not really have without rewriting the SQL significantly.
For more information on a similar sounding ANSI problem, see http://jonathanlewis.wordpress.com/2011/08/03/trouble-shooting-4/
Yours might not even be ANSI related.
If you check the execution plan - particularly the predicates section, then you can see some of the issues/symptoms.
See the "NULL IS NOT NULL" FILTER operation at Id 1.
SQL> select * from v$version;
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
PL/SQL Release 11.2.0.2.0 - Production
CORE    11.2.0.2.0      Production
TNS for Linux: Version 11.2.0.2.0 - Production
NLSRTL Version 11.2.0.2.0 - Production
SQL> SELECT lt.*
2 FROM Attr attr
3 JOIN Obj obj ON attr.id = obj.id
4 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
5 WHERE attr.id = 225;
no rows selected
SQL> explain plan for
2 SELECT lt.*
3 FROM Attr attr
4 JOIN Obj obj ON attr.id = obj.id
5 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
6 WHERE attr.id = 225;
Explained.
SQL> select * from table(dbms_xplan.display);
PLAN_TABLE_OUTPUT
Plan hash value: 1392151118
| Id | Operation            | Name    | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT     |         |     1 |   454 |     0   (0)|          |
|* 1 | FILTER              |         |       |       |            |          |
|   2 |   NESTED LOOPS OUTER |         |     1 |   454 |     4   (0)| 00:00:01 |
|* 3 |    INDEX UNIQUE SCAN | ATTR_PK |     1 |    13 |     1   (0)| 00:00:01 |
|   4 |    VIEW              |         |     1 |   441 |     3   (0)| 00:00:01 |
|* 5 |     TABLE ACCESS FULL| LOC_TXT |     1 |   441 |     3   (0)| 00:00:01 |
Predicate Information (identified by operation id):
   1 - filter(NULL IS NOT NULL)
   3 - access("ATTR"."ID"=225)
   5 - filter("ATTR"."ID"="LT"."OBJECTID" AND "LT"."TYPEID"=851)
Note
   - dynamic sampling used for this statement (level=4)
23 rows selected.
SQL> Whereas in the next example, the FILTER operation has moved further down.
SQL> SELECT lt.*, obj.id
2 FROM Attr attr
3 JOIN Obj obj ON attr.id = obj.id
4 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
5 WHERE attr.id = 225;
        ID   OBJECTID     TYPEID
VALUE
        ID
       225
1 row selected.
SQL> explain plan for
2 SELECT lt.*, obj.id
3 FROM Attr attr
4 JOIN Obj obj ON attr.id = obj.id
5 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
6 WHERE attr.id = 225;
Explained.
SQL> select * from table(dbms_xplan.display);
PLAN_TABLE_OUTPUT
Plan hash value: 2816285829
| Id | Operation            | Name    | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT     |         |     1 |   454 |     1   (0)| 00:00:01 |
|   1 | NESTED LOOPS OUTER |         |     1 |   454 |     1   (0)| 00:00:01 |
|* 2 |   INDEX UNIQUE SCAN | ATTR_PK |     1 |    13 |     1   (0)| 00:00:01 |
|   3 |   VIEW               |         |     1 |   441 |            |          |
|* 4 |    FILTER            |         |       |       |            |          |
|* 5 |     TABLE ACCESS FULL| LOC_TXT |     1 |   441 |     3   (0)| 00:00:01 |
Predicate Information (identified by operation id):
   2 - access("ATTR"."ID"=225)
   4 - filter(NULL IS NOT NULL)
   5 - filter("ATTR"."ID"="LT"."OBJECTID" AND "LT"."TYPEID"=851)
Note
   - dynamic sampling used for this statement (level=4)
23 rows selected.
SQL> However, you might have also noticed that OBJ is not referenced at all in the execution plans - this may indicate where the issue lies, maybe in conjunction with ANSI or it may be nothing to do with ANSI.
The foreign key constraint means that any reference to OBJ can be rewritten and eliminated.
So, if we remove the foreign key constraint, we get the expected one row with all null values returned:
SQL> alter table attr drop constraint attr_fk;
Table altered.
SQL> SELECT lt.*
2 FROM Attr attr
3 JOIN Obj obj ON attr.id = obj.id
4 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
5 WHERE attr.id = 225;
        ID   OBJECTID     TYPEID
VALUE
1 row selected.
SQL> explain plan for
2 SELECT lt.*
3 FROM Attr attr
4 JOIN Obj obj ON attr.id = obj.id
5 LEFT OUTER JOIN Loc_Txt lt ON attr.id = lt.objectid AND lt.typeid = 851 AND 1 = 2
6 WHERE attr.id = 225;
Explained.
SQL> select * from table(dbms_xplan.display);
PLAN_TABLE_OUTPUT
Plan hash value: 1136995246
| Id | Operation            | Name    | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT     |         |     1 |   467 |     1   (0)| 00:00:01 |
|   1 | NESTED LOOPS OUTER |         |     1 |   467 |     1   (0)| 00:00:01 |
|   2 |   NESTED LOOPS       |         |     1 |    26 |     1   (0)| 00:00:01 |
|* 3 |    INDEX UNIQUE SCAN | OBJ_PK |     1 |    13 |     1   (0)| 00:00:01 |
|* 4 |    INDEX UNIQUE SCAN | ATTR_PK |     1 |    13 |     0   (0)| 00:00:01 |
|   5 |   VIEW               |         |     1 |   441 |            |          |
|* 6 |    FILTER            |         |       |       |            |          |
|* 7 |     TABLE ACCESS FULL| LOC_TXT |     1 |   441 |     3   (0)| 00:00:01 |
Predicate Information (identified by operation id):
   3 - access("OBJ"."ID"=225)
   4 - access("ATTR"."ID"=225)
   6 - filter(NULL IS NOT NULL)
   7 - filter("ATTR"."ID"="LT"."OBJECTID" AND "LT"."TYPEID"=851)
Note
   - dynamic sampling used for this statement (level=4)
26 rows selected.Note also that with the constraint in place, I did not get a row returned regardless of whether the outer join was to attr.id or obj.id
Edited by: Dom Brooks on Aug 15, 2011 11:41 AM

Remote access Vpn issue

Dear All,
I have configured remote access vpn without using split tunnel.Everything is working fine.I can access all the inside network which is allowed in acl.
I am facing strange issue now. I have created a pool for remote access vpn with a range 192.168.5.8/29.I can access my internal subnets 10.10.0.0/16.
I have below acess-list for acl-in.
access-list acl-in extended permit ip object-group vpnclients 192.168.5.8 255.255.255.248
object-group network vpnclients
network-object host 10.110.100.26
network-object host 10.106.100.15
network-object host 10.10.10.6
network-object host 10.10.20.82
network-object host 10.110.100.48
network-object host 10.10.20.53
network-object host 10.10.20.54
network-object host 10.60.100.1
network-object host 10.10.10.75
network-object host 10.10.20.100
network-object host 10.10.130.136
network-object host 10.106.100.16
network-object host 10.106.100.9
network-object host 10.170.100.1
network-object host 10.170.100.2
network-object host 10.170.100.21
network-object host 10.101.100.20
network-object host 10.170.100.25
So whichever IPs i have called in vpnclient group is able to access via RA vpn.Issue is when i try to access internal network of 192.168.198.0/24, i am able to access it without adding in vpnclient group. Even for 192.168.197.0/24,192.168.197.0/24 the same. But for 10.10.0.0/16 we can access only after adding in vpnclient group. Any one has face this issue before. Is this because of same network i mean 192.168.0.0 something like that.There is no other staement in acl-in for 192.168.0.0
Regards
-Danesh Ahammad

Hi,
If i read correctly you made the RA vpn "without" split tunnel, correct? if that is the case, all of the traffic will traverse the vpn connection (tunnel all) , the access-list "acl-in" is of no use to it.
try converting it to use split tunnel, i am sure that way you can not access resources that are not mentioned in the list.
~Harry

Any ideas how to better troubleshoot VPN issue?

Hi,
I've recently upgraded my WLAN router to a brand new AVM FRITZ!Box WLAN 7390, in part for its VPN capabilities.
So far, I've been unable to create a working connection.
AVM's VPN is based on Cisco IPSec, and they provide a step-by-step procedure on how configure a Mac-based VPN connection (http://www.avm.de/de/Service/Service-Portale/Service-Portal/VPN_Interoperabilita et/16206.php - unfortunately only available in German, sorry). Following it, I still can't get it to work. Contacting their support I got first the same procedure and after pointing out I already followed it a "we don't support other vendors".
Funny enough, I got a second VPN connection to my work's VPN server just fine, though admittedly there we have a true Cisco box.
My initial setup was based on a 192.x.x.x net on my AVM, I could establish a VPN connection but coudn't ping/ssh/http/you-name-the-protocol in either direction. Our companies net is a 10.x.x.x net so, and as I have also VMware fusion running on my Mac with DHCP enabled on a different 192.x.x.x net plus a third 192.x.x.x net from my Wifi access I decided to reconfigure my AVM net to a 172.x.x.x net and stop VMware services for the tests (ie simplify as much as I could to help troubleshoot).
Alas, instead of being able to establish a non-working VPN connection, now I ain't able to get the tunnel up. IKE Phase 1 completes but Phase 2 doesn't.
Here's the relevant section from kernel.log:
Dec 30 11:47:57 jupiter configd[16]: IPSec connecting to server <myservernameismybusiness>.dyndns.info
Dec 30 11:47:57 jupiter configd[16]: SCNC: start, triggered by SystemUIServer, type IPSec, status 0
Dec 30 11:47:57 jupiter configd[16]: IPSec Phase1 starting.
Dec 30 11:47:57 jupiter racoon[1910]: IPSec connecting to server 77.x.x.x
Dec 30 11:47:57 jupiter racoon[1910]: Connecting.
Dec 30 11:47:57 jupiter racoon[1910]: IPSec Phase1 started (Initiated by me).
Dec 30 11:47:57 jupiter racoon[1910]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Dec 30 11:47:58 jupiter racoon[1910]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Dec 30 11:47:58 jupiter racoon[1910]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Dec 30 11:47:58 jupiter racoon[1910]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Dec 30 11:47:58 jupiter racoon[1910]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Dec 30 11:47:58 jupiter racoon[1910]: IKE Packet: transmit success. (Information message).
Dec 30 11:47:58 jupiter racoon[1910]: IKEv1 Information-Notice: transmit success. (ISAKMP-SA).
Dec 30 11:47:58 jupiter racoon[1910]: IPSec Phase1 established (Initiated by me).
Dec 30 11:47:58 jupiter racoon[1910]: IPSec Extended Authentication requested.
Dec 30 11:47:58 jupiter configd[16]: IPSec requesting Extended Authentication.
Dec 30 11:48:01 jupiter configd[16]: IPSec sending Extended Authentication.
Dec 30 11:48:01 jupiter racoon[1910]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 11:48:01 jupiter racoon[1910]: IPSec Extended Authentication sent.
Dec 30 11:48:02 jupiter racoon[1910]: IKEv1 XAUTH: success. (XAUTH Status is OK).
Dec 30 11:48:02 jupiter racoon[1910]: IPSec Extended Authentication Passed.
Dec 30 11:48:02 jupiter racoon[1910]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 11:48:02 jupiter racoon[1910]: IKEv1 Config: retransmited. (Mode-Config retransmit).
Dec 30 11:48:02 jupiter racoon[1910]: IPSec Network Configuration requested.
Dec 30 11:48:03 jupiter racoon[1910]: IPSec Network Configuration established.
Dec 30 11:48:03 jupiter racoon[1910]: IKE Packet: receive success. (MODE-Config).
Dec 30 11:48:03 jupiter configd[16]: IPSec Network Configuration started.
Dec 30 11:48:03 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-ADDRESS = 172.77.7.14.
Dec 30 11:48:03 jupiter configd[16]: IPSec Network Configuration: SAVE-PASSWORD = 1.
Dec 30 11:48:03 jupiter configd[16]: IPSec Network Configuration: DEFAULT-ROUTE = local-address 172.77.7.14/32.
Dec 30 11:48:03 jupiter configd[16]: host_gateway: write routing socket failed, command 2, No such process
Dec 30 11:48:03 jupiter configd[16]: IPSec Phase2 starting.
Dec 30 11:48:03 jupiter configd[16]: IPSec Network Configuration established.
Dec 30 11:48:03 jupiter configd[16]: IPSec Phase1 established.
Dec 30 11:48:03 jupiter configd[16]: event_callback: Address added. previous interface setting (name: en1, address: 192.168.43.242), current interface setting (name: utun0, family: 1001, address: 172.77.7.14, subnet: 255.255.255.255, destination: 172.77.7.14).
Dec 30 11:48:03 jupiter racoon[1910]: IPSec Phase2 started (Initiated by me).
Dec 30 11:48:03 jupiter racoon[1910]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Dec 30 11:48:03 jupiter configd[16]: network configuration changed.
Dec 30 11:48:03 jupiter configd[16]: IPSec port-mapping update for en1 ignored: VPN is the Primary interface. Public Address: ac4d070e, Protocol: None, Private Port: 0, Public Port: 0
Dec 30 11:48:03 jupiter configd[16]:
Dec 30 11:48:03 jupiter configd[16]: setting hostname to "jupiter.local"
Dec 30 11:48:03 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:06 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:07 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:09 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:09 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:12 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:13 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:15 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:15 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:18 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:18 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:21 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:21 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:24 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:25 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:27 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:27 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:30 jupiter racoon[1910]: IKE Packet: transmit success. (Phase2 Retransmit).
Dec 30 11:48:30 jupiter racoon[1910]: IKE Packet: receive success. (Information message).
Dec 30 11:48:33 jupiter configd[16]: IPSec disconnecting from server 77.x.x.x
Dec 30 11:48:33 jupiter racoon[1910]: IPSec disconnecting from server 77.x.x.x
Dec 30 11:48:33 jupiter racoon[1910]: IKE Packet: transmit success. (Information message).
Dec 30 11:48:33 jupiter racoon[1910]: IKEv1 Information-Notice: transmit success. (Delete ISAKMP-SA).
Dec 30 11:48:33 jupiter configd[16]: SCNC Controller: service_ending_verify_primaryservice, waiting for PrimaryService. status = 1
Dec 30 11:48:33 jupiter configd[16]:
Dec 30 11:48:33 jupiter configd[16]: network configuration changed.
Dec 30 11:48:33 jupiter configd[16]: SCNC Controller: ipv4_state_changed, done waiting for ServiceID.
Dec 30 11:48:33 jupiter configd[16]:
Dec 30 11:48:33 jupiter configd[16]: setting hostname to "jupiter"
When connecting to my work-place it looks like:
Dec 30 12:33:14 jupiter configd[16]: IPSec connecting to server <mycompanyismybusiness>.ch
Dec 30 12:33:14 jupiter configd[16]: SCNC: start, triggered by SystemUIServer, type IPSec, status 0
Dec 30 12:33:14 jupiter configd[16]: IPSec Phase1 starting.
Dec 30 12:33:14 jupiter racoon[1976]: IPSec connecting to server 62.x.x.x
Dec 30 12:33:14 jupiter racoon[1976]: Connecting.
Dec 30 12:33:14 jupiter racoon[1976]: IPSec Phase1 started (Initiated by me).
Dec 30 12:33:14 jupiter racoon[1976]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Dec 30 12:33:14 jupiter racoon[1976]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Dec 30 12:33:14 jupiter racoon[1976]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Dec 30 12:33:14 jupiter racoon[1976]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Dec 30 12:33:14 jupiter racoon[1976]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Dec 30 12:33:14 jupiter racoon[1976]: IPSec Phase1 established (Initiated by me).
Dec 30 12:33:15 jupiter racoon[1976]: IPSec Extended Authentication requested.
Dec 30 12:33:15 jupiter configd[16]: IPSec requesting Extended Authentication.
Dec 30 12:33:21 jupiter configd[16]: IPSec sending Extended Authentication.
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Extended Authentication sent.
Dec 30 12:33:21 jupiter racoon[1976]: IKEv1 XAUTH: success. (XAUTH Status is OK).
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Extended Authentication Passed.
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 12:33:21 jupiter racoon[1976]: IKEv1 Config: retransmited. (Mode-Config retransmit).
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Network Configuration requested.
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Network Configuration established.
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: receive success. (MODE-Config).
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration started.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-ADDRESS = 10.100.1.18.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-MASK = 255.255.255.0.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: SAVE-PASSWORD = 1.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-DNS = 10.100.1.129.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: SPLIT-INCLUDE.
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration: DEF-DOMAIN = iw.local.
Dec 30 12:33:21 jupiter configd[16]: host_gateway: write routing socket failed, command 2, No such process
Dec 30 12:33:21 jupiter configd[16]: installed route: (address 10.100.1.0, gateway 10.100.1.18)
Dec 30 12:33:21 jupiter configd[16]: IPSec Phase2 starting.
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Phase2 started (Initiated by me).
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Dec 30 12:33:21 jupiter configd[16]: IPSec Network Configuration established.
Dec 30 12:33:21 jupiter configd[16]: IPSec Phase1 established.
Dec 30 12:33:21 jupiter configd[16]: event_callback: Address added. previous interface setting (name: en1, address: 192.168.43.242), current interface setting (name: utun0, family: 1001, address: 10.100.1.18, subnet: 255.255.255.0, destination: 10.100.1.18).
Dec 30 12:33:21 jupiter configd[16]: network configuration changed.
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: receive success. (Initiator, Quick-Mode message 2).
Dec 30 12:33:21 jupiter racoon[1976]: IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
Dec 30 12:33:21 jupiter racoon[1976]: IKEv1 Phase2 Initiator: success. (Initiator, Quick-Mode).
Dec 30 12:33:21 jupiter racoon[1976]: IPSec Phase2 established (Initiated by me).
Dec 30 12:33:21 jupiter configd[16]: IPSec Phase2 established.
An earlies test in a Starbucks around here had the same result, during looking at the netstat -nr output I found I got onto a 10.x.x.x net on the Wifi and still could connect to the (different) 10.x.x.x net at work.
My TCP/IP Networking course was around 2000, but the default route seen in the non-working log section looks like bullsh*t to me anyhow: DEFAULT-ROUTE = local-address 172.77.7.14/32
On the other hand, the Phase 2 message seem to indicate a different mode for Phase 2 between the working and the non-working one.
This is from the exported config of my AVM box:
**** CFGFILE:vpn.cfg
* /var/flash/vpn.cfg
* Wed Dec 28 16:01:09 2011
vpncfg {
        connections {
                enabled = yes;
                conn_type = conntype_user;
                name = "[email protected]";
                always_renew = no;
                reject_not_encrypted = no;
                dont_filter_netbios = yes;
                localip = 0.0.0.0;
                local_virtualip = 0.0.0.0;
                remoteip = 0.0.0.0;
                remote_virtualip = 172.77.7.14;
                remoteid {
                        key_id = "<mykeyismybusiness>";
                mode = phase1_mode_aggressive;
                phase1ss = "all/all/all";
                keytype = connkeytype_pre_shared;
                key = "<mykeyismybusiness>";
                cert_do_server_auth = no;
                use_nat_t = no;
                use_xauth = yes;
                xauth {
                        valid = yes;
                        username = "<myuserismybusiness>";
                        passwd = "<mypasswordismybusiness>";
                use_cfgmode = no;
                phase2localid {
                        ipnet {
                                ipaddr = 0.0.0.0;
                                mask = 0.0.0.0;
                phase2remoteid {
                        ipaddr = 172.22.7.14;
                phase2ss = "esp-all-all/ah-none/comp-all/no-pfs";
                accesslist =
                             "permit ip 172.22.7.0 255.255.255.240 172.22.7.14 255.255.255.255";
        ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500",
                            "udp 0.0.0.0:4500 0.0.0.0:4500";
// EOF
**** END OF FILE ****
I also noticed an extra "IPSec port-mapping update for en1 ignored" message in the non-working log section, but I'm not sure a) how significant that might be, and b) how to find out what the ignored update might have been to decide whether not ignoring it would help.
A quick test with the AnyConnect Client from Cisco didn't help either, apparently it establishes an https connection first as I got a window which certificate details from my QNAP behind the AVM Box (I got a port forward for https to it)
So I'm looking for any ideas how to better troubleshoot this VPN issue...
Many thanks in advance!
BR,
Alex

Ok, found a small typo in my config (had at one point a 172.77.7.14 instead of the 172.22.7.14), no I can also connect from the 172.x.x.x net but still no ping etc. The relevant section of the log looks now like this:
Dec 30 16:44:27 jupiter configd[16]: IPSec connecting to server <myservernameismybusiness>.dyndns.info
Dec 30 16:44:27 jupiter configd[16]: SCNC: start, triggered by SystemUIServer, type IPSec, status 0
Dec 30 16:44:28 jupiter configd[16]: IPSec Phase1 starting.
Dec 30 16:44:28 jupiter racoon[2183]: IPSec connecting to server 77.x.x.x
Dec 30 16:44:28 jupiter racoon[2183]: Connecting.
Dec 30 16:44:28 jupiter racoon[2183]: IPSec Phase1 started (Initiated by me).
Dec 30 16:44:28 jupiter racoon[2183]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 1).
Dec 30 16:44:28 jupiter racoon[2183]: IKEv1 Phase1 AUTH: success. (Initiator, Aggressive-Mode Message 2).
Dec 30 16:44:28 jupiter racoon[2183]: IKE Packet: receive success. (Initiator, Aggressive-Mode message 2).
Dec 30 16:44:28 jupiter racoon[2183]: IKEv1 Phase1 Initiator: success. (Initiator, Aggressive-Mode).
Dec 30 16:44:28 jupiter racoon[2183]: IKE Packet: transmit success. (Initiator, Aggressive-Mode message 3).
Dec 30 16:44:28 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:44:28 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (ISAKMP-SA).
Dec 30 16:44:28 jupiter racoon[2183]: IPSec Phase1 established (Initiated by me).
Dec 30 16:44:28 jupiter racoon[2183]: IPSec Extended Authentication requested.
Dec 30 16:44:28 jupiter configd[16]: IPSec requesting Extended Authentication.
Dec 30 16:44:31 jupiter configd[16]: IPSec sending Extended Authentication.
Dec 30 16:44:31 jupiter racoon[2183]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 16:44:31 jupiter racoon[2183]: IPSec Extended Authentication sent.
Dec 30 16:44:32 jupiter racoon[2183]: IKEv1 XAUTH: success. (XAUTH Status is OK).
Dec 30 16:44:32 jupiter racoon[2183]: IPSec Extended Authentication Passed.
Dec 30 16:44:32 jupiter racoon[2183]: IKE Packet: transmit success. (Mode-Config message).
Dec 30 16:44:32 jupiter racoon[2183]: IKEv1 Config: retransmited. (Mode-Config retransmit).
Dec 30 16:44:32 jupiter racoon[2183]: IPSec Network Configuration requested.
Dec 30 16:44:33 jupiter racoon[2183]: IPSec Network Configuration established.
Dec 30 16:44:33 jupiter racoon[2183]: IKE Packet: receive success. (MODE-Config).
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration started.
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-ADDRESS = 172.22.7.14.
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration: SAVE-PASSWORD = 1.
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration: INTERNAL-IP4-DNS = 172.22.7.1.
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration: DEFAULT-ROUTE = local-address 172.22.7.14/32.
Dec 30 16:44:33 jupiter configd[16]: host_gateway: write routing socket failed, command 2, No such process
Dec 30 16:44:33 jupiter configd[16]: IPSec Phase2 starting.
Dec 30 16:44:33 jupiter racoon[2183]: IPSec Phase2 started (Initiated by me).
Dec 30 16:44:33 jupiter racoon[2183]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Dec 30 16:44:33 jupiter configd[16]: IPSec Network Configuration established.
Dec 30 16:44:33 jupiter configd[16]: IPSec Phase1 established.
Dec 30 16:44:33 jupiter configd[16]: event_callback: Address added. previous interface setting (name: en1, address: 192.168.43.242), current interface setting (name: utun0, family: 1001, address: 172.22.7.14, subnet: 255.255.255.255, destination: 172.22.7.14).
Dec 30 16:44:33 jupiter configd[16]: network configuration changed.
Dec 30 16:44:33 jupiter racoon[2183]: IKE Packet: receive success. (Initiator, Quick-Mode message 2).
Dec 30 16:44:33 jupiter racoon[2183]: IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
Dec 30 16:44:33 jupiter racoon[2183]: IKEv1 Phase2 Initiator: success. (Initiator, Quick-Mode).
Dec 30 16:44:33 jupiter racoon[2183]: IPSec Phase2 established (Initiated by me).
Dec 30 16:44:33 jupiter configd[16]: IPSec Phase2 established.
Dec 30 16:44:43 jupiter racoon[2183]: IKE Packet: receive failed. (MODE-Config).
Dec 30 16:44:48 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:44:48 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:44:48 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:44:48 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:44:48 jupiter racoon[2183]: IKE Packet: receive success. (Information message).
Dec 30 16:45:03 jupiter configd[16]: setting hostname to "jupiter.local"
followed by lots of:
Dec 30 16:45:03 jupiter racoon[2183]: IKE Packet: receive failed. (MODE-Config).
Dec 30 16:45:08 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:45:08 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:45:08 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:45:08 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:45:08 jupiter racoon[2183]: IKE Packet: receive success. (Information message).
Dec 30 16:45:28 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:45:28 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:45:28 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:45:29 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:45:29 jupiter racoon[2183]: IKE Packet: receive success. (Information message).
Dec 30 16:45:49 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:45:49 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:45:49 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:45:50 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:45:50 jupiter racoon[2183]: IKE Packet: receive success. (Information message).
Dec 30 16:46:10 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:46:10 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:46:10 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:46:10 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:46:10 jupiter racoon[2183]: IKE Packet: receive success. (Information message).
Dec 30 16:46:30 jupiter racoon[2183]: IKE Packet: transmit success. (Information message).
Dec 30 16:46:30 jupiter racoon[2183]: IKEv1 Information-Notice: transmit success. (R-U-THERE?).
Dec 30 16:46:30 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
Dec 30 16:46:30 jupiter racoon[2183]: IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Response).
Dec 30 16:46:30 jupiter racoon[2183]: IKE Packet: receive success. (Information message).

Customer Returns with Excise Duties.

Hi all,
Can any one explain the steps for Customer Returns with Excise Duties.
I have sold the Material to customer from Manufacturing Plat to customer.
Sales Orderm - VA01
Outbound delivery- VL01N
Pro forma - JEX
Excise Invoice - J1IIN
Invoice - VF01
Now customer wants to return the goods with the same Excise Invoice issued from Plant.
Return Order - VA01
Inbound Delivery - VL01N
Now what are the steps to capture the Excise Details..........?
We are using one more transaction (=/BEV1/SR0) here to keep the goods in to Unrestricted or Blocked stock and it will create Credit memo request automatically.
so please guide me is this step need to be done before Excise details are captured ?
It is very urgent to me. please send me the steps for the above mentioned scenario.
Thanking you.
Regards
Jaya

hi
create return order in VA01 with order type RE with reference to billing (assign order reason)
create delivery in VL01N and do PGR
go to VA02 and remove billing block
create billing document in VF01 with reference to return order.
DO EXCISE JV MAIN MENU IN T.CODE J1IH
SELECT ADDITIONAL EXCISE TAB
ENTER DELIVERY DOCUMENT NUMBER
SELECT DETAILS ICON IN THE EXTREEM LEFT OF THE APPLICATION TOOL BAR
ENTER MATERIAL NUMBER, QUANTITY AND EXCISE DUTY
SELECT DETERMINE G/L ACCOUNTS AND PRESS CONTINUE AND SAVE IT
EXTRACT RG23APART2 IN J2I5
IN PRINT RG23APART2 U CAN C THE OUTPUT
NOTE MAINTAIN NUMBER RANGES FOR RG23APART2.

F3507g mobile broadband driver - Windows 7 - and Cisco Vpn issue

Hi All,
After 3 days trying to install / update latest drivers on my X200/ Windows 7 / 32b, it seems now that my F3507g is now installed correctly…
I can go the a connection over internet and ping some servers BUT when I initiate my Cisco Vpn, ( working perfectly with my Ethernet connection and my Wifi 5300 AGN ) the connection is ok but no incoming or outgoing traffic !!!
Any idea on how to solve that issue ?

Yes, this is a problem with the IPSEC VPN NDIS driver binding your Mobile Broadband driver. You need to read this article and it is explains why and how to work around this issue:
http://www.customsoftwareframeworks.com/blog/fix-vpn-problems-cellular-win7
Good luck

SAPGUI Java 7.20 Rev 6 download and VPN issue

Dear SAP friends please help.
We are trying to connect to SAP via a Mac running Lion and a VPN with SAPGUI for Java Rev 5. We get the logon successfully but never get further than the licence message. We have updated to the latest Java and also tried it in 32 bitz mode. We are unable to download the latest Rev 6 (due to my user authorisation) but we still think this is a VPN issue. Can you please help? I enclose the trace which shows the point at which is stops.
Many thanks
Andrew
16.11. 17:36:05.118 CALL:     <CONTROL SHELLID="101">
16.11. 17:36:05.118 CALL:       <PROPERTY VALUE="0" NAME="120"/>
16.11. 17:36:05.118 CALL:       <PROPERTY VALUE="0" NAME="300"/>
16.11. 17:36:05.118 CALL:     </CONTROL>
16.11. 17:36:05.118 CALL:   </CONTROLS>
16.11. 17:36:05.118 CALL:   <COPY id="copy">
16.11. 17:36:05.118 CALL:     <GUI id="gui">
16.11. 17:36:05.118 CALL:       <METRICS id="metrics" X3="1440" X2="7" X1="7" X0="283" Y3="900" Y2="20" Y1="12" Y0="283"/>
16.11. 17:36:05.118 CALL:     </GUI>
16.11. 17:36:05.118 CALL:   </COPY>
16.11. 17:36:05.118 CALL: </DATAMANAGER>
16.11. 17:36:05.119 CALL: Call 1042: #3#.setMoreDataIndicator(true);
16.11. 17:36:05.122 CON: GuiNiNetConnection: sending DIAG data to writer thread for modus 0
ERROR #############################
16.11. 17:37:10.018 ERROR: GuiNiReaderThread: read failed: Error: connection to partner '172.23.200.109:3200' broken
16.11. 17:37:10.018 ERROR:
16.11. 17:37:10.018 ERROR: Wed Nov 16 17:37:10 2011
16.11. 17:37:10.018 ERROR: Release 720
16.11. 17:37:10.018 ERROR: Component NI (network interface), version 40
16.11. 17:37:10.018 ERROR: rc = -6, module nixxi.cpp, line 5087
16.11. 17:37:10.018 ERROR: Detail NiIRead: P=172.23.200.109:3200; L=10.64.10.112:53387
16.11. 17:37:10.018 ERROR: System Call recv
16.11. 17:37:10.018 ERROR: Error No 60
16.11. 17:37:10.018 ERROR: 'Operation timed out'
ERROR #############################
16.11. 17:37:10.018 CON: -
16.11. 17:37:10.018 CON: GuiNiNetConnection: sending DIAG data to connection for modus -1
ERROR #############################
16.11. 17:37:10.234 ERROR: GuiConnection: Connection closed
16.11. 17:37:10.234 ERROR: Error: connection to partner '172.23.200.109:3200' broken
16.11. 17:37:10.234 ERROR:
16.11. 17:37:10.234 ERROR: Wed Nov 16 17:37:10 2011
16.11. 17:37:10.234 ERROR: Release 720
16.11. 17:37:10.234 ERROR: Component NI (network interface), version 40
16.11. 17:37:10.234 ERROR: rc = -6, module nixxi.cpp, line 5087
16.11. 17:37:10.234 ERROR: Detail NiIRead: P=172.23.200.109:3200; L=10.64.10.112:53387
16.11. 17:37:10.234 ERROR: System Call recv
16.11. 17:37:10.234 ERROR: Error No 60
16.11. 17:37:10.234 ERROR: 'Operation timed out'
ERROR #############################
ERROR #############################

Hello Andrew,
some version of the VPN client on Lion seems to have a known issue according to SAP internal discussions.
I found someone telling, that with F5 SSL VPN Plugin 7000.2011.0907.01, it is working again.
It seems to be available from https://connectfp.sap.com.
For uninstalling old F5 version, see http://support.f5.com/kb/en-us/solutions/public/3000/800/sol3826.html
(many "seems", because I am still on Snow Leopard and can not talk about this issue from my own experience)
Regarding user authorization for downloading software in Service MarketPlace, please refer to [note 1037574|https://service.sap.com/sap/support/notes/1037574].
Best regards
Rolf-Martin

Issue related with Submit to spool.

Hi All,
Please provide you inputs to resolve the below issue :
Requirement : To generate spool before output ALV display.
Issue : when below statement is executed for creating spool.
      SUBMIT report name TO SAP-SPOOL
                        SPOOL PARAMETERS lv_print_parameters
                        WITHOUT SPOOL DYNPRO
                        VIA JOB lv_name NUMBER lv_number
                        AND RETURN.
It returns back to my report program and perform authorization check on selection screen, which fails.
Please let me know how to avoid this authorization check after return from SUBMIT.
Thanks in advance.

Hi,
Try as below,
*Submit report as job(i.e. in background)
data: jobname like tbtcjob-jobname value
                             ' TRANSFER TRANSLATION'.
data: jobcount like tbtcjob-jobcount,
      host like msxxlist-host.
data: begin of starttime.
        include structure tbtcstrt.
data: end of starttime.
data: starttimeimmediate like btch0000-char1.
Job open
call function 'JOB_OPEN'
       exporting
            delanfrep        = ' '
            jobgroup         = ' '
            jobname          = jobname
            sdlstrtdt        = sy-datum
            sdlstrttm        = sy-uzeit
       importing
            jobcount         = jobcount
       exceptions
            cant_create_job = 01
            invalid_job_data = 02
            jobname_missing = 03.
if sy-subrc ne 0.
                                       "error processing
endif.
Insert process into job
SUBMIT report-name and return
                with p_param1 = 'value'
                with p_param2 = 'value'
                user sy-uname
                via job jobname
                number jobcount.
if sy-subrc > 0.
                                       "error processing
endif.
Close job
starttime-sdlstrtdt = sy-datum + 1.
starttime-sdlstrttm = '220000'.
call function 'JOB_CLOSE'
       exporting
            event_id             = starttime-eventid
            event_param          = starttime-eventparm
            event_periodic       = starttime-periodic
            jobcount             = jobcount
            jobname              = jobname
            laststrtdt           = starttime-laststrtdt
            laststrttm           = starttime-laststrttm
            prddays              = 1
            prdhours             = 0
            prdmins              = 0
            prdmonths            = 0
            prdweeks             = 0
            sdlstrtdt            = starttime-sdlstrtdt
            sdlstrttm            = starttime-sdlstrttm
            strtimmed            = starttimeimmediate
            targetsystem         = host
       exceptions
            cant_start_immediate = 01
            invalid_startdate    = 02
            jobname_missing      = 03
            job_close_failed     = 04
            job_nosteps          = 05
            job_notex            = 06
            lock_failed          = 07
            others               = 99.
if sy-subrc eq 0.
                                       "error processing
endif.
Regards,
Santhosh.

Nortel VPN Issues Returned with 7.3.1?

Similar Messages

Maybe you are looking for