Question about SSLM configure

I have a question about our SSLM configure, please see the following example:
service aa-SSL
virtual ipaddr 172.25.17.15 protocol tcp port 443 secondary
server ipaddr 172.24.92.6 protocol tcp port 80
certificate rsa general-purpose trustpoint www.app.aa.com
no nat server
inservice
crypto pki trustpoint www.app.aa.com
revocation-check none
rsakeypair www.app.aa.com
crypto ca import www.app.aa.com pkcs12 tftp:xxx
======================================
Once we finish the configuration, we could find the corresponding cer in SSLM, like:
crypto pki certificate chain www.app.aa.com
My first question is how to remove this cert if we want to decommission aa-ssl environment? Is it only with âno crypto pki certificate chain www.app.aa.comâ
If we have another environment like www.pre.app.aa.com shared the same VIP with www.app.aa.com. My second question is could I create only one ssl entry with wildcard like the following configuration:
service aa-SSL
virtual ipaddr 172.25.17.15 protocol tcp port 443 secondary
server ipaddr 172.24.92.6 protocol tcp port 80
certificate rsa general-purpose trustpoint *.app.aa.com
no nat server
inservice
Please advice! I would appreciate it!

You can remove the certificate but you need to be in certificate chain configuration mode to delete certificates. An example configuration is provided here
http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_c5.html#wp1043434

Similar Messages

A question about CAR configuration

I read the configuring CAR on CCO. I'm a little confused about the conform value. here the URL of the article:
http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800c75ce.html
per the article, to limit a speed of a interface:
Router(config-if)# rate-limit {input | output} bps burst-normal burst-max conform-action action exceed-action action
here is it's 1st sample:
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
interface hssi 0/0/0
rate-limit output 15000000 2812500 5625000 conform-action transmit exceed-action drop
ip address 10.1.0.9 255.255.255.0
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
The CIR is setup to 15Mbps, the normal burst size is 2812500bytes(22.5Mbits), excessed burst size is 5625000bytes(45Mbits)
I think it's mean during a long-term, the average transmit speed is limited to 15Mbps, but at a specific time, the traffic
can be allowed to 22.5Mbits. and a specific time, 44.99Mbits can be allowed as long as the CIR is under 15Mbps.
but below is another sample:
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
interface Fddi2/1/0
rate-limit input access-group rate-limit 100 80000000 64000 80000 conform-action transmit exceed-action drop
ip address 200.200.6.1 255.255.255.0
access-list rate-limit 100 00e0.34b0.7777
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
here, it wants to limit a specific host. the CIR is 80Mbps. normal burst size is 64000bytes(512kbits), exceeded burst size
is 80000bytes(640kbits).
then at a specific time, the traffic can't pass 640kbits, if it pass, will be dropped. My question is since no time the
traffic can more than 640kbits, what's the CIR 80Mbps for?
Thank you a lot.
Regards,
Sha

see the following example. This may help
Chris
Subrate IP Services Example
The following example illustrates how to configure a basic CAR policy that allows all IP traffic. In the example, the network operator delivers a physical T3 link to the customer, but offers a less expensive 15 Mbps subrate service. The customer pays only for the subrate bandwidth, which can be upgraded with additional access bandwidth based on demand. The CAR policy limits the traffic rate available to the customer and delivered to the network to the agreed upon rate limit, plus the ability to temporarily burst over the limit.
interface hssi 0/0/0
rate-limit output 15000000 2812500 5625000 conform-action transmit exceed-action drop
ip address 10.1.0.9 255.255.255.0
Input and Output Rate Limiting on an Interface Example
In this example, a customer is connected to an Internet service provider (ISP) by a T3 link. The ISP wants to rate limit transmissions from the customer to 15 Mbps of the 45 Mbps. In addition, the customer is allowed to send bursts of 2,812,500 bytes. All packets exceeding this limit are dropped. The following commands are configured on the High-Speed Serial Interface (HSSI) of the ISP connected to the customer:
interface Hssi0/0/0
description 45Mbps to R1
rate-limit input 15000000 2812500 2812500 conform-action transmit exceed-action drop
ip address 200.200.14.250 255.255.255.252
rate-limit output 15000000 2812500 2812500 conform-action transmit exceed-action drop
The following sample output shows how to verify the configuration and monitor CAR statistics using the show interfaces rate-limit command:
Router# show interfaces hssi 0/0/0 rate-limit
Hssi0/0/0 45Mbps to R1
Input
matches: all traffic
params: 15000000 bps, 2812500 limit, 2812500 extended limit
conformed 8 packets, 428 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
last packet: 8680ms ago, current burst: 0 bytes
last cleared 00:03:59 ago, conformed 0 bps, exceeded 0 bps
Output
matches: all traffic
params: 15000000 bps, 2812500 limit, 2812500 extended limit
conformed 0 packets, 0 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
last packet: 8680ms ago, current burst: 0 bytes
last cleared 00:03:59 ago, conformed 0 bps, exceeded 0 bps
it's from the article you were looking at near the bottom..
Chris

Question about Integrated Configuration (Advanced Adapter Engine in PI 7.1)

Hello,
When you use Advanced Adapter Engine in PI 7.1 with Integrated Configuration scenario, it bypasses ABAP stack therefore you can't monitor processed message in SXMB_MONI. Instead this message shows up only in RWB Adapter Engine message monitoring. When you select the message from there, you can view the BEFORE mapping payload in Message Content tab. My question is how do you view the AFTER mapping payload when using Integrated Configuration.
Thanks,
Jay

> My question is how do you view the AFTER mapping payload when using Integrated Configuration.
You can't.
So first you have to configure a standard scenario and test the stuff. When everything is fine, remove the standard scenario and create an Integrated Configuration.

Questions about migrating Configurator 4 PS panel to Extension Builder 3.

Hello,
I am in the process of creating a set of Photoshop tools that I'm hoping to release on Adobe Exchange in the very near future. The tools are a set of javascript files that are executed through a simple panel interface consisting of 4 buttons. There is also a logo at the top of the panel that links to a tutorial section on my website (kind of like the Adobe Paper Texture Pro panel if you're familiar with it).
I initially created the panel using Configurator 4 (RIP). Unfortunately, I only recently found out about Adobe's plans to remove Flash based Extension Panel functionality. I've switched over to Extension Builder 3, so I can submit my Extension to Adobe for approval as soon as possible. The main issue is that I am not a programmer. I'm learning, and I'm actually quite pleased with the results so far, but there have been plenty of headaches along the way. As for the migration to Extension Builder 3, I've been able to work around or find solutions to most of the issues, but there are still a few that I'm hoping someone can shed some light on:
How do you create a 'fly-out' menu for a panel? I wasn't sure how to do this in Configurator 4 either, but at least they provided an 'About' menu option above the standard 'Close' and 'Close Tab' menu options.
This is minor, but when dragging the panel around, I noticed that the contents of the panel disappear and you only see the gray background color. The panel from Configurator didn't do this (you could see the contents at all time). Is there a way around this?
As mentioned above, I have a logo that used to link to the tutorial for the tool on my website. I searched around, and it seems like something that is simply not possible to do anymore. This is unfortunate, because I wanted to provide users with easy access to the tutorial page. Is it possible to open a new panel from another panel? That way, I could at least have the tutorial open as a new panel within Photoshop. (I just noticed a potential answer to this in another thread - though it may be slightly over my head)
I took a look at the HTML5, ADOBE authored Adobe Layer Renamer, but that just makes me more nervous because it has the dragging problem AND no additional fly-out menus. Ideally, I'd prefer it if users didn't have to open Adobe Exchange just to see instructions or information about my Extension.
Sorry for the lengthy post, but I appreciate any assistance with these issues!
Lee

Hello Lee,
My name is Jeff.   I am similar to your situation where I am not really much of a programmer, but using scripts exported to .jsx files from actions in PS, and I was using Configurator to build a really massive (hundreds of buttons/scripts accordians etc) panel in 3.0, released it publicly, but retracted because of certain issues and then finally realizing I need to migrate it all over to HTML5 and Extension Builder 3.
I am also at about the same point as you... although I've been trying out the jquery frameworks to build my tabs and other GUI elements... figured out last week how to use custom images for the buttons etc.
I don't know if I am going to need a panel-flyout menu option but I am trying to figure out how to put in regular text-box or pull-down menus... in configurator I found a neat trick to drag and drop accordian-containers into each other... then it acts like a pull-down menu when you have buttons in there.     The problem is html5 and extensionbuilder 3 do not work like this... I can't figure out how to make nested tabs yet or have a GUI pull-down or text-box actually send information to my .jsx files and change them.
Let's keep this forum active and help each other, we all have great ideas to contribute to the extensability of these long-cherished tools and it should not be hard... or else we're all just going to go back to using actions, lol.      For now, I have avoided some issues in configurator, still exporting my panels but with the upcoming release of non-flash-support in PS then people won't be able to use them unless they had the previous PS installed already.      However, you can create your own installers to place the extensions into the right folders, you don't need the .ZXP or exchange to publish or sell your extensions, it's only for a pathway that helps us all to legitamize our projects and become producers through the exchange portal or add-ons or whatever it ends up being.   But personally I am using a freeware program that makes simple installers and having it place the folders into the extension panels folders... then when PS opens there is the extension -- that is all that Extension manager is doing... taking your ZIP (ZXP) and unzipping it to the right folders.
What upsets me is how easy they made it with configurator for me to make a very advanced panel... then pulled the rug out and now it is going to take a lot of work and learning for me to understand how to build the same GUI panels you see attached but in HTML 5.... I will try to share and help out especially with people like us where we have built something in configurator and now we need to port/migrate it to html5/extension builder 3.     Easier said than done. :/
http://adobe.ly/1nrrQjg
http://adobe.ly/1j3U27z
http://adobe.ly/1hYh2nF

Simple question about JSF configuration

I am using Tomcat 5.0 in Windows XP SP2. When I create a web application with JSF and put it into {tomcat_home}\webapps\, everything works perfect. But when I add a context path in Tomcat's server.xml such like
<Context docBase="C:\works\java_projects\jsf_test" path="/jsf_test" reloadable="true" debug="0"/>
And then I put same web application into this context path and try the url like http://machinename:8080/jsf_test/test.faces, it gives me exception as follow
I wonder if anyone knows about that? Thanks a lot!!
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Servlet.init() for servlet Faces Servlet threw exception
     org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
     org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
     org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
     org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
     org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
     org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
     org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
     java.lang.Thread.run(Thread.java:595)
root cause
java.lang.NullPointerException
     javax.faces.webapp.FacesServlet.init(FacesServlet.java:144)
     org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:462)
     org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
     org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
     org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
     org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
     org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
     org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
     java.lang.Thread.run(Thread.java:595)
note The full stack trace of the root cause is available in the Apache Tomcat/5.0.28 logs.
:

FacesServlet.init() processes only the followings: facesContextFactory = FactoryFinder.getFactory(FACES_CONTEXT_FACTORY);
applicationFactory = FactoryFinder.getFactory(APPLICATION_FACTORY);
application = applicationFactory.getApplication();
lifecycleFactory = FactoryFinder.getFactory(LIFECYCLE_FACTORY);
lifecycle = lifecycleFactory.getLifecycle(lifecycleId);NPE occurrs at the third line when it can't find ApplicationFactory.
Check how your container loads the class.

A question about STMS configuration

I have a landscape with 3 systems and I configure the STMS for them.
The DEV is C11, QA is A11 and PRD is L11.
(Note: This is because we have too many systems so that many SIDs such as D11, Q11 and P11 are already used).
I mistakingly configured A11->C11->L11. Because both A11 and C11 have changeable clients, this configuration had been
used for a while before this mistake was discovered.
I wonder whether there is any parameter we can set so that C11 can only be the 1st system in the landscape...?
(note: again this is because we could have similar mistakes down the road.)
I have looked into the tp profile but failed to find one.
Could you help me with this?
Thanks!
Thanks!

Hi,
I am afraid there is any parameter which helps you. As far as I know, it will exactly follow the transport route you configured
Rajeev

Question about processor configure

Dear jmfers,
I learn jmf by copying jmf2 guide's example.
And i'm using j2sdk1.4.2_06
The following is part of my code:
processor.configure();
processor.setContentDescriptor( new ContentDescriptor( ContentDescriptor.RAW ) );
trackControl = processor.getTrackControls();
But each time I run the program, I got the following error.
javax.media.NotConfiguredError: setContentDescriptor cannot be called before configured
at com.sun.media.ProcessEngine.setContentDescriptor(ProcessEngine.java:342)
at com.sun.media.MediaProcessor.setContentDescriptor(MediaProcessor.java:123)
It's said that the processor will block when it's configuring. But it seems that it doesn't work.
Any hints for such errors?
Thanks for reply.

processor.congifure() doesnt block. its syncronous. You should read better the guide ;-)
The solution is create a StateHelper(in apendices) over the processor, try another block system or listen the ConfigureCompleteEvent. There are examples of the 3 in the guide... or you can consult the jmf solutions too.

Few questions about streams configuration

Hi all,
I am currently setting up a test streams environment while going through the documentation, and had a few questions. This will be for a 10.2.0.2 environment across two databases.
1) If I setup a streams admin account of "strmadm", and create the queue under this account. Is it possible to have other user accounts create the rules for the capture and apply? The documentation mentions granting dba to the strmadm account, and we would be prevented from allowing the application developers to have access to this account.
2) What are some of the best sources of info for 10g streams? I have doc 298877.1 and the Oracle documentation, but was wondering if there were any other good sources of info.
3) Our current plan is to have the capture, stage, and propagation monitored by the DBA team, while the apply is managed and coded by the developers. We were thinking to do this we would create a strmadm account in each database, with a queue created by strmadm. We would have a local capture done on database A, and propagate the LCRs to the queue on database B. Once the messages were in queue on database B, it would be the application developers who were responsible for writing the code to properly apply the messages. Does this make sense from a high level, or am I missing something?
Thanks for the help

1)
Sure. You can use any name. even multiple dfifferent accounts.
DBA is requared.
2)
298877.1 is good document but for 10gR1
You can use Streams docs. Just search DBMS_STREAMS_ADM.MAINTAIN... procedures. You will find good source somethere close.
3)
I think DBA team should be responsible for everything excluding DML handlers.
Regards,
Sergey

Basic questions about NWDI structure

Hello All,
I have read some materials about the Java development process within SAP J2EE engine.
Here I just want to confirm with you some knowledge points and ask some questions about the configuration of NWDI before proceeding Java development.
1. There are four systems within SAP Java landscape, the first one is the developer's own PC, on which there should be installed SAP Workplace (actually is a small J2EE engine and the NW developer studio), am I understanding right?
2. Where should the DTR CBS CMS and SLD be installed? on the Consolidation Server? or the TEST Server? or the Production server? or totally on another standalone server?
3. Within one Track (four system), how many DTR server, CBS Server and SLD server should be installed? Does it only need one for each?(All the four system connect to the same DTR/CBS/SLD server?)
4. Can DTR Server, CBS Server and SLD Server be installed on the same host? or should they be installed on separate hosts?
Thank you very much in advance.
Best regards,
Nick

The introduction of this demo contains a nice overview of the system landscape with NWDI, which should answer most of your questions:
http://www.sdn.sap.com/irj/scn/elearn?rid=/library/uuid/c0b1f2c8-54e0-2910-9ab3-b85f15093655
Here's the main page for NWDI here on SDN:
SAP NetWeaver Development Infrastructure (NWDI)

Question about EDI confirguration

Hi guru:
I have question about EDI configuration, let's say I created PO for vendor 0001 ,it is intercompany business, so for our vendor, "us" are their customer, then Sales order will automatically generated which include sold to ,material,etc, my question is how does system determine which sold to be generated once I created PO, where does it come from?

Hi,
We maintain the EDI partner in the table "EDSDC" in a tcode VOE2, and conversion fo extrnal and internal partner no in the EDPAR, in a tcode VOE4.
Regards
baalakrushnan.da

About JSTL configure

Hi,all
I have a question about JSTL configure. I' m learning jsp ,but i don't know how can i use the JSTL under the tomcat5.0 and jdk1.5 in the windows os.
I have installed the Tomcat 5.0 and jdk1.5 in the windows sys right, copyed the standard.jar and the jstl.jar to my working forlder'WEB-INF/lib forlder,and copyed the 15 .ltd file to the WEB-INF forlder. And i have configure the web.xml file .
But JSTL did not worked.
I come from china,is a new. Who can help me,giving me some advises?

Make sure that you have the version 1.1 of jstl. Go to [url http://jakarta.apache.org/site/downloads/downloads_taglibs.html] this jakarta page and click on the jstl 1.1 taglibs.
Copy the jstl.jar and standard.jar onto WEB-INF/lib of your web application.
You neednt copy the tlds seperately. The server will pick up the tlds from the jar files. Neither need you have to have web.xml entries.
Specify that your web application complies to servlet 2.4 standards. Note Tomcat 5.x and above implements the servlet 2.4 spec.
Also your web.xml should have the following declaration
<?xml version="1.0" encoding="ISO-8859-1"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
    version="2.4">
//other elements
</web-app>Finally open a jsp, define the following taglib directive and you are on your way -
<%@page import="java.util.*" %>
<%@taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c"%>
<%
     List data = new ArrayList();
     data.add("A");
     data.add("B");
     data.add("C");
     request.setAttribute("col",data);
%>
<c:out value = "${col}"/><br>
<u>Using a for loop</u>
<c:forEach items="${col}" var="eachItem">
   ${eachItem}
</c:forEach>ram.

Some questions about configuration in MAX.

Hello,everyone!
I have some questions about configuration in MAX(I am a jackaroo for motion control development),I hope I can get your help.
I use PCI-7344+UMI-7764+Servo amplifier+Servo motor,my MAX version is 4.2 and I use NI-Motion7.5
My question as following:
1,In Axis Configuration,for motor type,why I must select stepper but not servo?my motor is servo motor!If I select Servo,my motor can't run,I don't know why.
If I select stepper,though motor can work but I can't test encoder in MAX.
2,In Stepper settings,for stepper loop mode,why I must select open-loop but not close-loop?If I select close-loop,the servo motor doesn't work too.
3,If I want my two servo motors run at different velocity,How shoud I do?It seems I just can set the same velocity in MAX for my two servo motors.
My English is poor,Pls pardon me!I come from China.
Thank you for your help!
EnquanLi
Striving is without limit!

Hi,Jochen,
Thank you for your kindly help!
The manufacturer of the drive and motor that I am using now is Japan SANYO DENKI,drive type is RS1A01AA,motor type is R2AA06020FXP00.
And I use position control mode,thehe encoder's counts per revolution is 131072.I set the electronic gear ratio to 1:1 for drive.
Now,I can use Close-Loop to control the motor but still has some problems.When I configure it to run in closed loop mode, the motors behave strangely and never move to the target position.When I configure it to run in closed loop mode, the motors behave strangely and never move to the target position.The detail situation is as following
1,Motor can't run.
2, Or motor moves to a position, then moves in the same direction agian and eventually stops.
Except for the two points mentioned above,"Following Error" is occured frequently,I don't know why.
I am still not clear why I must set the motor type be stepper in MAX .
And I have another question:what the relationship between the steps and the counts?They have the proportion relations?I notice that there are a section said like this in help document: For proper closed-loop and p-command operation, steps per revolution/counts per revolution must be in the range of 1/32,767 < steps/counts < 32,767. An incorrect counts to steps ratio can result in failure to reach the target position and erroneous closed-loop stepper operation.
I am verry sorry I have too many questions!
I am very appreciate for your kingly help!Thanks again!
EnquanLi
China
Striving is without limit!

A question about Kintex-7 configuration

Hi
I want to design a custom board with Kintex-7 FPGA(XC7K160T). I have a question about it's config. Can i use XCF128XFTG64 for this FPGA? If not, can you tell me what kind of Flash I can use?

Platform flash not supported in 7-series FPGA. Refer http://www.xilinx.com/support/answers/46093.html for details
As per "Table 1-1: Bitstream Length (Page-14) in configuration user guide (http://www.xilinx.com/support/documentation/user_guides/ug470_7Series_Config.pdf) the required bit stream length for XC7K160T device is 53,540,576 bits. By considering overheads the required size of flash is 64 Megabits or larger.
What version of tools are you using? What type of configuration mode are you planning? Refer “Configuration overview” topic (Page -11 onwards ) in http://www.xilinx.com/support/documentation/user_guides/ug470_7Series_Config.pdf to know different types of supported configuration modes.
You need to use CPLD/Microprocessor for slave Selectmap kind of configuration.
Impact tools(In case of using ISE tools) help topics list the supported BPI/SPI flash details in case of planning SPI/BPI kind of configuration modes.

I have a question about Configuration of Post with Clearing

I have a question about confiruation of the post with clearing which is t-doce 'FB05'.
When I make post with clearing on 'FB05', I can change the additional selections.
Where can I control the confiruation of the additional selections in t-code 'FB05'
Please, tell me the menu path.

Hi,
In SPRO, go to
Financial Accounting (New) > Accounts Receivable and Accounts Payable > Business Transactions > Incoming Payments > Manual Incoming Payments > Make Settings for Processing Open Items > Choose Selection Fields
Hope this helps.
Thanks

Question about configuring Etherchannel on Catlyst 3750

Hi, I have a stack witch catalyst 3750, I mean I have 3 switches ( 1 master, 2 slaves)
My question
Can I configure an etherchannel having 2 interfaces on each switch?
How can I do this?
Thanks
Regards

If you have a stack it should present itself as a single switch just put channel-group 1 desirable nonsilent if you are going to another cisco on each of the interfaces you want in the channel . this is for a layer 2 etherchannel . For a layer 3 etherchannel is somewhat more involved and too long to write here , just go to the cisco.com site and search on configuring etherchannels,3750 .

Question about SSLM configure

Similar Messages

Maybe you are looking for