Routing Dependency Assignment Issue

Hello Experts,
We are facing a problem in our system. We are using Variant Configurations and Use Super Task lists. When we replace the object dependency assigned to and operation with another dependency, the dependency works fine while configuring. But when we ALE the Routing from one client to another. The old assignments are carried over instead of the new assignments. When I check the dependency assignments via Table PLPO -> CUOB -> CUKB the old dependency assignments are still shown as they are not getting deleted.
This is not happening for all the VC materials which makes it more puzzling. Any suggestion or advice will be helpful.
Thanks
Rishi...

Hi Nancy,
In transaction OP8B for routing 'N' check if 'TL' Checkbox is selected. If so remove the selection & then try to create a routing, the previous group number will not be taken.
Check & give feedback.
Regards,
Senthilkumar

Similar Messages

I have a WRT54G wireless router. The issue I have is th...

I have a WRT54G wireless router.
The issue I have is that the "wireless network connection" icon light on my laptop stays on continuously and is constantly sending and receiving data even when nothing is open...no Outlook, no browser, no programs.
I have another another desktop PC that is connected thru the same wireless router and the icon light only lights when I open a browser or transmit and receive data thru an action of mine.
With my laptop, as soon as I boot it up, the icon light comes on and stays on with all this data sending and receiving.
Does anyone have any ideas?

You can try to see what connections are active when your laptop is connected. If you're using Windows, bring up command prompt, type "netsat" and see what connections are active to what target(s). Check Task Manager and see what applications or processes are active and using the cpu. Maybe try installing a third-party firewall (ZoneAlarm) that monitors inbound and outbound connections to determine if any rogue applications are running.
"Everybody save your work.......NOW!!"

Error *Chart of dep-dependent assignment to asset class 100306 not possible

Dear All
I got error Chart of dep - dependent assignment to asset class 100306 not possible
Diagnosis
    You tried to assign chart-of-depreciation-dependent data to asset class
    100306.
System Response
    The assignment is not allowed.
Procedure
    In order to be able to assign chart-of-depreciation-dependent data to
    asset class 100306, the following conditions have to be met. You have to
    have already
    1. Defined at least two active charts of depreciation
    2. Assigned asset class 100306 to more than one chart of depreciation
    However, at the moment this asset class is only assigned to chart of
    depreciation 1.
I already checked following this but I didn't found the mistake (already assign COD to company code).
Please anyone help me to solved this.
Thanks in advance.
Best Regards,
Utarat.P

Hi Utarat,
whenever you create an asset the system checks first the table ANKP. If you have chart-of-depreciation-dependend account determination, than an entry in the table ANKP is made. If you than make a copy from such a asset class in the asset class there is another account determination than in the table ANKP and the system takes the account determination from the table ANKP and not from the asset class.
Normally you can't define chart-of-depreciation-dependent assignments (with transaction ANK1) if there is only one chart of depreciation. As a result you'll get error AC012. So, I think there was a second chart which was deleted.
If you'd like to change (or delete) this assignments you can use
the following workaround:
    SM34 -> View ANKA_ALL -> Maintain
       - select asset class ART (for example)
       - then click in the left column on "Chart of dep - dep data"
Regards Bernhard

Collection assign issue in OID provisioning environment

Hy Tom,
I am interested in LDAP with OID PROVISIONING in portal 10g application.
we create a register procedure.
however. i got an error message as ORA-06502: PL/SQL: numeric or value error: NULL index table key value.
After debuging, we found that issue result assign null value .
when we assign as
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
It seems that that we can not assign entry.attr(counter1).attrval(counter2) to other var two time in procedure.
It is server configuration issue or code issue.
Thanks
Newweber
*********************** Code
PROCEDURE pre_add (     ldapplugincontext IN ODS.plugincontext,
               dn IN VARCHAR2,
               entry IN ODS.entryobj,
               rc OUT INTEGER,
               errormsg OUT VARCHAR2
IS
ret                INTEGER;
l_portal_user      wwsec_person.USER_NAME%type;
l_first_name      wwsec_person.FIRST_NAME%type;
l_last_name      wwsec_person.LAST_NAME%type;
l_email      wwsec_person.EMAIL%type;
l_work_phone      wwsec_person.WORK_PHONE%type;
l_mobile      wwsec_person.MOBILE_PHONE%type;
counter1           pls_integer;
counter2           pls_integer;
retval                pls_integer := -1;
s                integer;
user_session           DBMS_LDAP.session;
user_dn           varchar(256);
user_array           DBMS_LDAP.mod_array;
user_vals           DBMS_LDAP.string_collection;
user_binvals           DBMS_LDAP.blob_collection;
indx                number := 1;
BEGIN
l_portal_user      :=null;
l_first_name      :=null;
l_last_name      :=null;
l_email      :=null;
l_work_phone      :=null;
l_mobile      :=null;
l_description      :=null;
rc := 0;
errormsg :=null;
-- Create a mod_array
user_array := dbms_ldap.create_mod_array(entry.binattr.count + entry.attr.count);
-- Create a user_dn
user_dn := substr(dn,1,instr(dn,',',1,1))||'cn=users,dc=e-hms,dc=net';
FOR l_counter1 IN 1..entry.attr.COUNT LOOP
     FOR l_counter2 IN 1..entry.attr(l_counter1).attrval.COUNT LOOP
     ckerror('second loop get value--'|| entry.attr(l_counter1).attrname || '[' || l_counter1 || ']' ||'.val[' || l_counter2 || '] = ' ||entry.attr(l_counter1).attrval(l_counter2));
if entry.attr(l_counter1).attrval(l_counter2)     is null then
ckerror('handle null attribule ');
else
-- get value
          ckerror('get value2'||entry.attr(l_counter1).attrname);
IF entry.attr(l_counter1).attrname ='givenname' then
               l_first_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('givename/firstname--'||l_first_name);
     elsif entry.attr(l_counter1).attrname ='sn' then
               l_last_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('sn/lastname--'||l_last_name);
          elsif entry.attr(l_counter1).attrname ='mail' then
               l_email := entry.attr(l_counter1).attrval(l_counter2);
               ckerror(' email--'||l_email);
          elsif entry.attr(l_counter1).attrname ='mobile' then
               l_mobile :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('mobile--'||l_mobile);
          elsif entry.attr(l_counter1).attrname ='telephonenumber' then
               l_work_phone :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('work telphone--'||l_work_phone);
          elsif entry.attr(l_counter1).attrname ='cn' then
               l_portal_user :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('cn/username--'||l_portal_user);
          elsif entry.attr(l_counter1).attrname ='description' then
               l_description :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('description--'||l_description );
          else
          ckerror('handle other entry name--'||     entry.attr(l_counter1).attrname);
          ckerror('handle other entry--'||entry.attr(l_counter1).attrval(l_counter2) );
          end if;
end if;
ckerror('end compare at second loop');
ckerror('NULL ASSIGN ISSUE FOR 72 --'||entry.attr(counter1).attrval(counter2));
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
END LOOP;
ckerror('end first loop');
--- put ldap
dbms_ldap.populate_mod_array(user_array,DBMS_LDAP.MOD_ADD, entry.attr(counter1).attrname,user_vals);
user_vals.delete;
END LOOP;
processs other (l_firstname...) vars in SQL sataement
EXCEPTION
WHEN OTHERS THEN
ckerror( 'Exception in PRE_ADD plugin. Error code is ' || TO_CHAR(SQLCODE));
ckerror( ' ' || Sqlerrm);
rc := 909;
errormsg := 'Error code:'|| rc||' exception: pre_add data';
END;

Hy Tom,
I am interested in LDAP with OID PROVISIONING in portal 10g application.
we create a register procedure.
however. i got an error message as ORA-06502: PL/SQL: numeric or value error: NULL index table key value.
After debuging, we found that issue result assign null value .
when we assign as
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
It seems that that we can not assign entry.attr(counter1).attrval(counter2) to other var two time in procedure.
It is server configuration issue or code issue.
Thanks
Newweber
*********************** Code
PROCEDURE pre_add (     ldapplugincontext IN ODS.plugincontext,
               dn IN VARCHAR2,
               entry IN ODS.entryobj,
               rc OUT INTEGER,
               errormsg OUT VARCHAR2
IS
ret                INTEGER;
l_portal_user      wwsec_person.USER_NAME%type;
l_first_name      wwsec_person.FIRST_NAME%type;
l_last_name      wwsec_person.LAST_NAME%type;
l_email      wwsec_person.EMAIL%type;
l_work_phone      wwsec_person.WORK_PHONE%type;
l_mobile      wwsec_person.MOBILE_PHONE%type;
counter1           pls_integer;
counter2           pls_integer;
retval                pls_integer := -1;
s                integer;
user_session           DBMS_LDAP.session;
user_dn           varchar(256);
user_array           DBMS_LDAP.mod_array;
user_vals           DBMS_LDAP.string_collection;
user_binvals           DBMS_LDAP.blob_collection;
indx                number := 1;
BEGIN
l_portal_user      :=null;
l_first_name      :=null;
l_last_name      :=null;
l_email      :=null;
l_work_phone      :=null;
l_mobile      :=null;
l_description      :=null;
rc := 0;
errormsg :=null;
-- Create a mod_array
user_array := dbms_ldap.create_mod_array(entry.binattr.count + entry.attr.count);
-- Create a user_dn
user_dn := substr(dn,1,instr(dn,',',1,1))||'cn=users,dc=e-hms,dc=net';
FOR l_counter1 IN 1..entry.attr.COUNT LOOP
     FOR l_counter2 IN 1..entry.attr(l_counter1).attrval.COUNT LOOP
     ckerror('second loop get value--'|| entry.attr(l_counter1).attrname || '[' || l_counter1 || ']' ||'.val[' || l_counter2 || '] = ' ||entry.attr(l_counter1).attrval(l_counter2));
if entry.attr(l_counter1).attrval(l_counter2)     is null then
ckerror('handle null attribule ');
else
-- get value
          ckerror('get value2'||entry.attr(l_counter1).attrname);
IF entry.attr(l_counter1).attrname ='givenname' then
               l_first_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('givename/firstname--'||l_first_name);
     elsif entry.attr(l_counter1).attrname ='sn' then
               l_last_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('sn/lastname--'||l_last_name);
          elsif entry.attr(l_counter1).attrname ='mail' then
               l_email := entry.attr(l_counter1).attrval(l_counter2);
               ckerror(' email--'||l_email);
          elsif entry.attr(l_counter1).attrname ='mobile' then
               l_mobile :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('mobile--'||l_mobile);
          elsif entry.attr(l_counter1).attrname ='telephonenumber' then
               l_work_phone :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('work telphone--'||l_work_phone);
          elsif entry.attr(l_counter1).attrname ='cn' then
               l_portal_user :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('cn/username--'||l_portal_user);
          elsif entry.attr(l_counter1).attrname ='description' then
               l_description :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('description--'||l_description );
          else
          ckerror('handle other entry name--'||     entry.attr(l_counter1).attrname);
          ckerror('handle other entry--'||entry.attr(l_counter1).attrval(l_counter2) );
          end if;
end if;
ckerror('end compare at second loop');
ckerror('NULL ASSIGN ISSUE FOR 72 --'||entry.attr(counter1).attrval(counter2));
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
END LOOP;
ckerror('end first loop');
--- put ldap
dbms_ldap.populate_mod_array(user_array,DBMS_LDAP.MOD_ADD, entry.attr(counter1).attrname,user_vals);
user_vals.delete;
END LOOP;
processs other (l_firstname...) vars in SQL sataement
EXCEPTION
WHEN OTHERS THEN
ckerror( 'Exception in PRE_ADD plugin. Error code is ' || TO_CHAR(SQLCODE));
ckerror( ' ' || Sqlerrm);
rc := 909;
errormsg := 'Error code:'|| rc||' exception: pre_add data';
END;

Verizon 4G LTE Broadband Router - Does Verizon Issue You With A Public IP Address?

Hi,
http://www.verizonwireless.com/home-office-solutions/4g-lte-broadband-router-with-voice/
Regarding the above Verizon 4G LTE Broadband Router, does Verizon issue you with a public IP address that can be accessed from outside of their network or do they issue you with a private IP addresss just like they do with their JetPacks?
Thank you!

That's an excellent question olimits7! It will be my pleasure to assist with your inquiry. Our voice and data services are transmitted using a 10-digit mobile number on our network. May I ask do you have the mobile number on your account? If you are interested in a private IP address then we can discuss options. Please advise so we can begin.
Thank you…
ArnettH_VZW
Follow us on Twitter @VZWSupport

9@ Route Pattern Matched Issues

Unfortunately I have to deal with a lot of 9@ route patterns in our deployment. I understand weird things happen when 9@ is used, but even this one is boggling my mind. So I was hoping someone could help me understand why it's doing what it's doing.
I have a CSS with a collection of partitions. I'll call the 3 I'm interested in the following: One-PT, Two-PT, Three-PT.
One-PT has a route pattern of 9@ with the Local filter applied going to Gateway 1.
Two-PT has a route pattern of 9@ with the Local filter applied going to Gateway 2.
Three-PT has a route pattern of 9.XXXXXXXXXX with no filter applied (those are 10 Xs) going to Gateway 3.
My phone is assigned to the CSS with these 3 partitions. When I dial 9 981 xxx xxxx DNA says that 9@ from One-PT is always matched. If I remove One-PT from the CSS, then 9@ in Two-PT is matched. Only if I remove those 2 partitions does Three-PT get matched.
Now, as I said above I understand 9@ can introduce weird routing issues, but I thought that the route pattern with 9 and 10 Xs would be more specific and it would be matched. Obviously I was wrong, but I'm trying to understand why I was wrong. Is this because the 10 digit number dialed matches the NANP and the Local filter matches a NANP area code? Thus it's the more exact match?
Thanks!

Hi,
As per the following link
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/5_0_4/ccmsys/ccmsys/a03rp.html#wp1050657
"Using the @ Wildcard Character in Route Patterns
Using the @ wildcard character in a route pattern provides a single route pattern to match all NANP numbers, and requires additional consideration.
The number 92578912 matches both of the following route patterns: 9.@ and 9.XXXXXXX. Even though both these route patterns seem to equally match the address, the 9.@ route pattern actually provides the closest match. The @ wildcard character encompasses many different route patterns, and one of those route patterns is [2-9][02-9]XXXXX. Because the number 2578912 more closely matches [2-9][02-9]XXXXX than it does XXXXXXX, the 9.@ route pattern provides the closest match for routing."
Also, check the following post
https://supportforums.cisco.com/discussion/10698966/9-route-pattern
HTH
Manish

OSB, xquery and Assign issue

Hello all
I have an issue that I cannot quite understand...
I have a very simple proxy service, that I would like to receive an xml of this form:
<SO so_att1="soatt" xsi:noNamespaceSchemaLocation="Split.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
     <MLI mli_att1="mli1att">
          <LI li_att1="li1_att1">
               <name>String</name>
               <value>String</value>
               <action>String</action>
          </LI>
          <LI li_att1="li2_att1">
               <name>String</name>
               <value>String</value>
               <action>String</action>
          </LI>
          <LI li_att1="li3_att1">
               <name>String</name>
               <value>String</value>
               <action>String</action>
          </LI>
          <LI li_att1="li4_att1">
               <name>String</name>
               <value>String</value>
               <action>String</action>
          </LI>
          <LI li_att1="li5_att1">
               <name>String</name>
               <value>String</value>
               <action>String</action>
          </LI>
          <name>String</name>
          <value>String</value>
          <action>String</action>
     </MLI>
</SO>
in order to transform it to a general data model of this form:
<CDM>
     <Item so_att="soatt" mli_att="mli1att">
          <name>MLI1_name</name>
          <value>MLI1_value</value>
          <action>MLI1_action</action>
     </Item>
     <Item so_att="soatt" mli_att="mli1att" li_att="li1att">
          <name>LI1_name</name>
          <value>LI1_value</value>
          <action>LI1_action</action>
     </Item>
     <Item so_att="soatt" mli_att="mli1att" li_att="li2att">
          <name>LI2_name</name>
          <value>LI2_value</value>
          <action>LI2_action</action>
     </Item>
     <Item so_att="soatt" mli_att="mli1att" li_att="li3att">
          <name>LI3_name</name>
          <value>LI3_value</value>
          <action>LI3_action</action>
     </Item>
     <Item so_att="soatt" mli_att="mli1att" li_att="li4att">
          <name>LI4_name</name>
          <value>LI4_value</value>
          <action>LI4_action</action>
     </Item>
     <Item so_att="soatt" mli_att="mli1att" li_att="li5att">
          <name>LI5_name</name>
          <value>LI5_value</value>
          <action>LI5_action</action>
     </Item>
</CDM>
The common idea is to split the XML in to pieces with attributes inheritance. I have created 3 Assign actions. the 1st one has the xquery for seperating the MLI nodes with the correct attribues:
for $i in (1 to fn:count($body/MLI))
return
<Item so_att1 = "{ data($body/@so_att1) }"
mli_att1 = "{ data($body/MLI[$i]/@mli_att1) }">
for $name in $body/MLI[$i]/name
return
<name>{ data($name) }</name>
for $value in $body/MLI[$i]/value
return
<value>{ data($value) }</value>
for $action in $body/MLI[$i]/action
return
<action>{ data($action) }</action>
</Item>
And it is saved in variable MLI
The 2nd one is similar to this and saves to variable LI while the 3rd assign concats the variables like this: fn:concat('<CDM>', $MLI, $LI, '</CDM>') and saves in new variable...
My problem comes, when I run on server the proxy. It is echoing (of course, cause there is no routing) but the incoming message passes only from third assign, ignoring the first and the second... Any idea why this is happening? The xqueries while tested inside the XQuery editor, works like charm...
Thank you in advance

Not sure if this is what you mean, but if you want to store elements in a variable during your XQuery you can use the "let" command.
This way you can use them during your Xquery but it doesn't replace the Assign or Replace action in your message flow.
let $x := 1
let $y := $x + 1

CUP UWL and HR assignement issues

Hello all,
Does anyone know if:
1/ is there a possibility to send a request for approvel to the UWL task list or only to the CUP task list?
2/ is there a restriction of opening a request for another user based on an organizational assignment? (the requestor will be able to open a request for a user who is in the same HR org unit as the requestor)
Thanks

I am using Role mapping in my company.
Our need for role mapping is due to our CUA composite structure containing shell roles with pointers (RFC target destinations) to the child systems containing single roles with authorisations.
Mapping overcame a limitation in RAR to analyse the authorisations obtained through RFC pointers.
So far we have only used a sample set of composites with singles mapped to them but will be uploading thousands next week.
The potential issues you face depend on your authorisation concept in use.
For example, in your mapping reflects your Composite/Single Role assignment, then you will face the following.
Adding a composite using CUP will also add the singles mapped to the composite. So in the CUA system you will see the same single role twice, one in blue (assigned via composite) and one in black (assigned via CUP Mapping).
I'm happy to discuss further on the phone if easier where we can share more of our challenges.
Thanks,
Babak

No Portal Roles assigned issue

Hi Experts ,
We had recently integrated CRM with portal , but some users inspite of having the portal roles assigned to their id were getting an Access Denied page (we had customized the "no portal roles assigned " error page ) . Knowing the dependency of portal on IE and browser settings , this issue is sometimes resolved by clearing cache , cookies , and changing a few browser settings etc on IE 6.0 . If this doesn't work then upgrading to IE 7.0 definetly helps . Since this is just a workaround , I would like to know if anyone has experienced such a thing before and has a solution for this . Your inputs will be highly appreciated .
Regards
Mayank

Hi Mayank,
This is an error which happens when there is No roles assigned to the user. I am not sure how your systems are designed for User Management. Say for example in some cases LDAP is used to maintain Group to User Relationships and Portal Roles are connected to Groups therfore all users in the group is assigned to the Role. In some cases UME is used.
Having said that you can disable the cache for the browser. You have to compromise with the performance however, this will ensure that everytime the user logs in, the request will always go to the server.
Regards
Avik

Route Reflectors Design issue

Hi,
I am having this design issue with route reflectors and could use some help.
I have 18 routers fully meshed in an MP-iBGP session and i am going to introduce route reflectors into the network to minimize the total number of TCP sessions
My problem is that some of these routers have outboud policies with one another. for example i have a route map on router 1 affecting only router 2 and would like to keep it this way
is there any way to do that through route reflectors ?
Thank you
Hadi

Hi Riccardo,
I have 18 routers in a full MP-iBGP mesh topology. Some pairs of these routers have the following policy :
I have a route-map matching on Route Targets and i am setting the next hop to be different from the rest of the RT for that site.
This way, the prefixes originating from site A for example will reach site B with different next hops depending on how i set it in my route-map.
These policies are only between pairs of routers i.e. router#1 needs only to affect router#2
How can i achieve this using RRs
Thank you
Hadi

Virgin super hub 2 router - IP address issues for 3055A printer

Help - please! I have spent hours trying to get my printer to work; Virgin upgraded my router and since then my printer works randomly at best. I have seen other posts on this an tried various fixes but none seem to work. I believe it is to do with not being able to assign a static IP address?
I have two settings 2G and 5G, after speaking to Virgin they set up a range of IP adrresses that should work with my 2G setting; but does not, they said if it did not work I would need to go back to them to 'see what they could do' but tought I would post here first in case there is a fix I am unawre of; not sure if i can go through the pain of speaking to all and sundry at Virgin again!!
Thanks

Hello Avonveiw,
Welcome to the HP Support Forums!
I would like to offer a way of getting the Deskjet 3055A setup onto your network. This printer will only connect to the 2.4 Ghz portion offered on your router.
Since this printer does not have a traditional Wireless Setup Wizard, we will have to use a wireless computer to connect the printer to the network.
On the printer;
Restore Network Defaults; Wrench button> Wireless> Restore Defaults.
Ensure Wireless light is blinking blue, if not, go back to Wireless and enable wireless.
On the computer, connect to the network that should look like this: HP-Setup-50-Deskjet 3055A J611.
Open a web browser, type 192.168.223.1 in the address bar, then press enter.
Click Network> Wireless (802.11)> Wireless Setup Wizard.
Once connected to the 2.4 Ghz network, connect the computer back to your network and try printing.
Let me know if this helps.
JERENDS
I work on behalf of HP
Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" to the left of the reply button to say “Thanks” for helping!

ASA Class C IP addressing, routing subnet design issue, brainstorming, comments welcome!

I am carving up an internet Class C for customer. This class C is used by 3 distinct QA, Corporate and Production firewalls. I want to carve up IP space so there is a /26 for each environment. The issue I have is the firewalls may need communication with each other via the public IP space. Currently I don’t have any L3 switches in between the firewalls and the edge internet router. So with subnetting, it would seem I need to push everything through the internet router for the intra-firewall communication.
I would rather not push this traffic through the edge router, so I came up with an idea to allocate all firewall outside interface IP’s in the 4th (last remaining) /26. That way, I can allow firewalls to communicate over the primary interface IP’s, which will all be in the same subnet – without going through a routing “engine”/device.
For the actual environment subnets (NAT's on respective firewalls), I create a static route on the edge router pointing to each of the firewall’s primary IP’s for the respective environment routes (the first 3 - /26’s).
This is still a beta design, but I have done this before on small scale when ISP gave me 2 subnets for example, assuming I was going to put a router in between the customer firewall and ISP. I would use the “routed subnet” on the ASA interface, and then pull the NAT’s from the other subnet. The ISP would have to add a static route directing the NAT subnet to the “routed subnet” correct IP - which would be the firewall outside interface primary IP.
I recently found out that with ASA OS 8.4.3 and up, ASA will not proxy arp for IP’s not in its local interface subnet. This means the ISP/router will have to assign static ARP entries on the edge router. This can get messy after the first few NAT entries. So I am debating the design now. I think this kind of stuff going forward won’t be worthwhile with newer ASA 8.4.3 code.
Any ideas on how to communicate between different ASA’s, while still carving up the Class C into usable smaller subnets? The primary reason for doing this in the first place is to support routing on the edge router. I am thinking it might be time to ask for another Class C to do the routing functions, and keep the firewalls all at Layer 2 in one /24 - Class C?

I recently found out that with ASA OS 8.4.3 and up, ASA will not proxy arp for IP’s not in its local interface subnet.
That is a surprise especially as using a different subnet than the one used to connect the ASA to the router for NAT is quite a common setup.
Anyway as we are brainstorming here are a couple of options that spring to mind. Please feel free to shoot them down
For both solutions you still have 4 x 26, the first 3 for each firewall to use as NAT and then the last /26 for the firewall interfaces + the ISP internal interface.
Option 1
======
when you allocate the IP to the firewall outside interfaces and the ISP internal interface they come out of the last /26 range but you use a /24 subnet mask. The router will arp out for all addresses within the /24 subnet but the firewalls should only answer via proxy arp for any statically mapped NAT entries that they have. They will answer because the /26 they use for NAT are within the range of their outside interface IP because that is using a /24.
Obviously because the interfaces are in the same /24 range they will be able to talk to each other wihout bouncing off the router.
Option 2
=======
pretty much the same as option 1 except the ISP router uses a /26 subnet and has routes for easch /26 NAT subnet pointing to the relevant firewall. This way you don't have as many arps being sent by the ISP router. The firewalls still have to use a /24 mask to enable them to talk with each other. And the firewalls and router still need to have IPs from the last /26.
Both would need testing and i may have missed something but i would have thought both would work.
Jon

Vendor Payment-Cheque Assignment Issue

Hi,
I am facing one of the issue related to vendor payment. Issue description is as below.
1. We do have weekly payment parameter creation (F110) and one of the parameter was created on Wednesday.
2. Another job use to run for that parameter (where vendor name is mention) and creates payment document for open item for mention vendor (clearing document)
3. Then cheque will gets assign to all those payment documents created in step 2 using program RFFOUS_C.
4. There are total 616 documents selected by program RFFOUS_C but out of which this program assign cheques only for 590 documents and remaining 26 payment documents kept as it is and no cheques were assign and not even consider in cheque file too.
5. I am confuse why system not consider these 26 documents were I didnu2019t see any difference in document and all documents were having same payment method too.
Can someone advise me where could be the problem?
Thanks
Parag

No. If you see my original issue i mention in that all the documents clear successfully. Only 26 clearing document dont have cheques assing and thats why vendor payment is hanging. Say for example if you go in FB03 and put your clearing document and once inside that document click on environment menu where CHEQUE INFORMATION is option. If Cheque number will be assign to that particular document then system will immidiately show you cheque details. In my case no cheque is assing by program RFFOUC_C. So why is it so?
Parag

Analysis Authorization - Assignment Issue

Hi,
Created a analysis auth: and assigned the same to one user. But the issue is that the assignment holds true for all the users. how can i make it assigned to one single user? Is this suppose to work this way or am i assuming things?
Thanks,
Sri

Hi Sri,
I doubt your issue.
please search the forums first before posting questions. This avoids redundant effort and saves time and resources of your peers.
There are many threads available if you search with the search criteria Authorization.
Cheers
SAP NetWeaver BI Organisation

DNS Router & Server Setup Issues

I'm running a Mac OS X Server on my local network. I have a D-Link 655 router that connects the machines and conencts to the internet.
I'd like to use OS X Server's DNS instead of my ISP's. In the D-Link Router I've set the DNS to the OSX server in the WAN section. Unfortunately it doesn't allow my clients on the network to connect to the internet when I do this.
If I set the DNS on the client to the OS X server it works fine. Or if I set the DNS on the router to my ISP's (or Google's) it works fine too.
Is this a route configuration issue? Or is this an OS X Server issue?
Any thoughts on how I might figure out where the problem lies and how to solve it?
Thanks in advance

Your DHCP server needs to pass out the IP address of your DNS server (only).
In general, you should not include any references your ISP DNS servers anywhere on your network. Not in your DHCP server, not in your clients, and not as a forwarder within your own DNS server configuration.
When you make the change, renew the leases of the devices that have the old address if needed, and alter the hard-set DNS server settings in the devices that don't use DHCP.
The one sort-of exception to this: your DNS server should have its Network settings DNS server address set as 127.0.0.1; as the localhost address. Not as its IP address.
And in general, routers don't do DNS. (Though it's common for folks to refer to devices that provide routing, NAT firewall, potentially VPN servers and other services as a "router", technically routers don't typically include DNS services. And very few gateway devices - even the fancy ones and expensive ones - implement DNS services.) Routers (and particularly the usual sorts of network gateways) can generallty have a DNS configuration for two reasons; to forward DNS requests to an upstream DNS server(s), and to have a DNS server address for an embedded DHCP server to pass out to DHCP clients.
In your particular case, the IP network connectivity is very likely present in both of your test configurations, it's that your clients aren't getting DNS translations.
Probably more than you ever cared to learn about setting up DNS services on OS X Server.

Routing Dependency Assignment Issue

Similar Messages

Maybe you are looking for