SAPConsole710 - multiple profiles connectivity problem

Hi,
We have installed SAPConsole 710 and telnet server in same box. We have created profiles for DEV and QAS system. When I set default to DEV, then i am able to connect only DEV system.
If i remove set as default option i am unable to connect any of the SAP system. Please help me to resolve the problem.
Regards,
Suraj

ACEs in access-list 111 are not in the correct order. ACEs in ACLs are processed top down. You are hitting the permit before the deny for 192.168.50.x, therefore the traffic is attempting to be routed out the NAT for the Internet connection, not through the IPSEC tunnel. Move the permit statement last after the 3 deny statements.
Sent from Cisco Technical Support iPad App

Similar Messages

CISCO876 multiple atm connections problem

I am having BIG problem! We are testing hub & spoke configuration
CISCO876>>ALCATEL DSL SYSTEM<<CISCO876
HUB SPOKE
2 vlans 2 vlans
One VLan should be used for VIDEO traffic and another for VPN! Current
configuration is behaving very unstable, links are going down every 5
min and connection between HUB and SPOKE is not WROKING unfortunaly?! :
Can some give me clue what to do next?
Here is the configs:
Building configuration...
Current configuration : 1592 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname BUNDLE
boot-start-marker
boot-end-marker
enable password pass
no aaa new-model
resource policy
ip cef
interface BRI0
no ip address
encapsulation hdlc
shutdown
interface ATM0
no ip address
atm ilmi-keepalive 5 retry 5
dsl operating-mode auto
hold-queue 224 in
interface ATM0.1 point-to-point
description Subinterface for ViSS
ip address 192.168.1.2 255.255.255.252
ip virtual-reassembly
no snmp trap link-status
atm route-bridged ip
pvc 1/32
interface ATM0.2 point-to-point
description Subinterface for LSVPN
ip address 192.168.2.2 255.255.255.252
ip virtual-reassembly
no snmp trap link-status
atm route-bridged ip
pvc 0/35
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
description ViSS port
switchport access vlan 10
interface FastEthernet3
description LSVPN port
switchport access vlan 20
interface Vlan1
no ip address
interface Vlan10
description LAN for ViSS
ip address 10.10.1.1 255.255.255.0
interface Vlan20
description LAN for LSVPN
ip address 10.10.2.1 255.255.255.0
ip route 10.10.1.0 255.255.255.0 ATM0.1
ip route 10.10.2.0 255.255.255.0 ATM0.2
no ip http server
no ip http secure-server
control-plane
line con 0
no modem enable
line aux 0
line vty 0 4
password pass
login
scheduler max-task-time 5000
webvpn context Default_context
ssl authenticate verify all
no inservice
end
HUB CONF :
Building configuration...
Current configuration : 1592 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname BUNDLE
boot-start-marker
boot-end-marker
enable password pass
no aaa new-model
resource policy
ip cef
interface BRI0
no ip address
encapsulation hdlc
shutdown
interface ATM0
no ip address
atm ilmi-keepalive 5 retry 5
dsl operating-mode auto
hold-queue 224 in
interface ATM0.1 point-to-point
description Subinterface for ViSS
ip address 192.168.3.2 255.255.255.252
ip virtual-reassembly
no snmp trap link-status
atm route-bridged ip
pvc 1/32
interface ATM0.2 point-to-point
description Subinterface for LSVPN
ip address 192.168.4.2 255.255.255.252
ip virtual-reassembly
no snmp trap link-status
atm route-bridged ip
pvc 0/35
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
description ViSS port
switchport access vlan 10
interface FastEthernet3
description LSVPN port
switchport access vlan 20
interface Vlan1
no ip address
interface Vlan10
description LAN for ViSS
ip address 10.10.3.1 255.255.255.0
interface Vlan20
description LAN for LSVPN
ip address 10.10.4.1 255.255.255.0
ip route 10.10.3.0 255.255.255.0 ATM0.1
ip route 10.10.4.0 255.255.255.0 ATM0.2
no ip http server
no ip http secure-server
control-plane
line con 0
no modem enable
line aux 0
line vty 0 4
password pass
login
scheduler max-task-time 5000
webvpn context Default_context
ssl authenticate verify all
no inservice
end
Waiting for replys!

I am not getting error. I've debugged atm events,ilmi I've not seen any errors. Subinterfaces atm0.1 and atm0.2 are UP UP but one of pings(LSVPN) hub>spoke to the other side is request time out.On the other side spoke>hub same ping(LSVPN) is giving request time out.

Problem about financial reporting studio(assign multiple db connection)

Hi,
I need to assign multiple database connections to a grid in Oracle Hyperion Financial Reporting Studio
To do this, I performed the following steps:
- Open a report.
- In a grid, select one column for which I want to change the database connection.
- In the Column Properties sheet, click the Select Database Connection button, .
- In the Select a Database Connection dialog box, select a database connection from the Database Connection drop-down list, then Click OK.
- In the Map Dimensions Between... dialog box, map dimensions between the default database connection and the selected database connection. I do this by selecting a dimension from the pull-down list in the right column for each dimension in the left column.
- Optional: Select an alias table for the new database connection.
- Click OK.
But after last step I have received next error:
*; nested exception is:*
java.lang.NullPointerException
Can someone explain the source of this error?
And help me please solve this problem because I didn’t receive figures in that column where I changed database connection.
Thank you in advance!

I'm sure that both DB connections has the same dimension hierarchy. I can open the repot, but in it I don't see figures in that column where I've changed database connection...

Single network connection using multiple profiles

Apologies if this has already been asked - I have searched!
Is there a way of setting up netcfg - or a wrapper script - so that it tries multiple profiles but then stops when it finds one that works? These profiles might be a mix of wired or wireless - so simply using net-auto-* doesn't look like a solution (unless I'm misunderstanding them?).
My laptop often lives in my office where it is connected to a wired connection. But, being a laptop, it is sometimes moved and will need, in most cases, to connect to a wireless connection.
I'd like the system, during boot, to try profiles in a given order and stop when one connects - is this possible?

Sounds like what netcfg normally does if you enable the service? Or net-profiles as the initscript was called. (This is based on documention, never used this myself.)
https://wiki.archlinux.org/index.php/Ne … t-Profiles
Edit: I run net-auto-wired and -wireless with POST_UP and PRE_DOWN commands to stop net-auto-wired when a cable is plugged in and restart it when the cable is removed. Seemed to work pretty well, but I think I've never actually used a wired connection since I set that up...
Last edited by Raynman (2012-11-21 16:47:30)

Our home network has multiple devices connected by iCloud. Having problem with Calendar. On one iMac, all the events are duplicated. How can I correct that problem? Under the Calendar accounts, I had my Apple id listed and also just iCloud.

Our home network has multiple devices connected by iCloud: 2 iMacs, 2 iPhone 4s, 1 MacPro Laptop, and 1 iPad 2. When using Calendar, all the events were
duplicated on my husbands iMac. On his computer, under Calendar accounts, I had included iCloud and also my iCloud ID. I thought that because I had two accounts listed that were connected to iCloud, that might be the cause of the duplication. When I deleted ithe calendars from one of the accounts, it resulted
in deleting all of the events on all of our network devices!
I have since entered some new events into Calendar from my iMac and from my iPhone. These appear correctly on all devices except my husband's iMac where they are again all duplicated.
I have two questions: 1) How can I eliminate the duplicated events on my husband's computer and 2) How do I retrieve the old wiped out Calendar events from
Time Capsule. I don't know how to find Calendar in the Time Capsule. If I find the Calendar information in Time Capsule, how do I transfer it to my current Calendars?
I was obtaining phone help from one of the Apple techs at Apple Support, but our call was disconnected part way through. Didn't know how to reconnect with the tech.
Thanks for any help.

The warranty entitles you to complimentary phone support for the first 90 days of ownership.

Multiple SharePoint Connections Appearing

Has anyone else encountered multiple SharePoint connections appearing for the same server in Office 2013. We are using Office 365 and I work on office across multiple devices. This anomaly seemed to pop up when I started using Office for iPad,
though I've no idea if its connected. I can remove the extra account and then all works fine, but on reboot the extra account reappears and then I can't open files from the web interface - most frustrating.

Hi,
It could be that the cache for the account was still being stored in the registry.
I suggest you try the method below to delete the Office profile that may still be cached:
Important
Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it,
back up the registry for restoration in
case problems occur.
From Registry Editor, browse to: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Identity\Identities
Choose the Office profile that you want to delete, and then choose Delete.
From the Identity hive, navigate to the Profiles node, choose that same identity, open the shortcut menu (right-click), and then choose
Delete.
The steps above are quoted from this article below, you may also learn something useful from it:
https://technet.microsoft.com/en-us/library/jj683102.aspx?f=255&MSPPError=-2147217396
Regards,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

RFC Receiver adpater Connection problem , Help us to solve ?

Hi Friends ,
 Our scenarilo is Mail to RFC. It was running fine. In RFC Receiver adapter i have given Maximium connection property to 1 .
 While multiple set data passed to rfc will connection problem will come ?
 Most data not uploaded . I am getting the following error.
 If i set max connection to 5 . It is 5 times or more than that it is pusing the data .
 i am getting the following error while i set the Max connection to 1 . . Any other place i need to change configuration ?
 - Error: 2007-09-24 10:51:22 GMT-05:30: Message processed for interface YRFC_EXT_WARR: com.sap.aii.af.rfc.afcommunication.RfcAFWException: error while processing message to remote system:com.sap.aii.af.rfc.core.client.RfcClientException: resource error: could not get a client from JCO.Pool: com.sap.mw.jco.JCO$Exception: (106) JCO_ERROR_RESOURCE: Connection pool RfcClient[CC_EXTE_WAREN_2W_RFC_RECEIVER]e7fa21f86ec535e883636c0beffc0f0c is exhausted. The current pool size limit (max connections) is 1 connections.
 Please give the description . I have referred many likns . Help us to solve this problem .
Regards.,
V.Rangarajan
Message was edited by:
 ranga rajan

Hi,
Have a look at this.This will help you.
1.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f3f93ee7-0c01-0010-2593-d7c28b5377c2
2. https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/3103eb90-0201-0010-71af-be6f4a6f61d1
Regards,
Akshay Jamgaonkar.
Reward points if find useful.
Message was edited by:
 Akshay Jamgaonkar

Unending connectivity problems -- and Desktop Help...

I'm wasting so much time on connectivity problems that it's positively wearying. Prior to the installation of BT Infinity here in April, I had a low quality broadband service because of the length of the line from the exchange: if I could get a download speed of 1.2Mbps and an upload of a quarter of that, I was doing well.
BT advised that thanks to fibre optic, my Internet should run much faster. So we had Infinity installed. I'm registered with Speedtest.net so am able to see my performance record.
The average download speed is now aroun d 6Mbps and the average upload, more than that at 7Mbps. How an upload speed can consistently be faster than a download escapes me.
But I'm not familiar with the ways of Internet connectivity and try as a I might, can't get my head around it.
This desktop computer runs Vista OS. Vista was **bleep** when it came out and is renowned for its botched handling of Internet connections. So I'm not blaming BT for the literally unending connectivity problems that are occurring now, with line drops, speeds slowing to a crawl, and no guarantee that any connection will last. But it would be good to actually use BT software to help fathom out what's going wrong here, and today's typical morning which looks like this:
1) Boot up computer. Automatic connection to hub via Netgear USB wireless adapter. Hub is on ground floor of this 3-storey property but signal strength from hub is excellent, as confirmed by inSSIDer monitoring, currently showing 54 with no other networks anywhere near that figure.
2) Perhaps 5 minutes after connection established, it's then lost. 'Local Only' is displayed. This is, apparently, a known Vista problem. But Microsoft has issued a fix for it. I know this, because it took 100 hours of ploughin g the Net to find out that MS had finally admitted to one more Vista screw-up. I've used the Microsoft router "fix it" before and it didn't work ("failed to process") so uninstalled it and have DL'd it again now and run it. This time it says it has fixed everything.
3) Computer is re-booted to make the fix effective. Computer connects to Internet. Speedtest.net check yet again confirms that upload speed is faster than download speed.
4) Connection dies. So much for Microsoft Fix It.
5) Windows diagnostics reports that it can re-set the IP profile (or something.) I click yes. The re-set goes through. Connectivity is restored. 10 minutes later, connectivity is lost. Just a red X in the tray. No connection of any kind, not even that daft 'Local Connection' only alert.
6) Reboot. Yet again. BT Desktop Help was installed here and ran OK when we were using our Netgear DSG34 router. But since the change to the BT Hub, the BT program has never run at all. So-oo. . . It has been uninstalled. And then re-DL'd and re-installed. And though the installation has been completed, clicking on 'launch' has failed to launch anything. But anyway. An hour ago, in one of the brief periods today when the Internet connection was holding up, I Revo-ed out the earlier install, DL'd BT desktop Help and re-installed it. . . and I'm still at the same stage as always, with a Firefox browser page that's open and completely blank and has been for the past 30 minutes. The URL is:
file:///C:/Program%20Files/BT%20Broadband%20Desktop%20Help/btbb/Start.html
Repeated page re-loading gets nowhere. Malwarebytes PRO is turned OFF to prevent any possibility of blocking and the antivirus is termporaily SUSPENDED. This PC runs on Windows standard firewall but even turning that OFF doesn't get the page to load. Copying the address into Internet Explorer in case there's a Firefox problem merely results in Firefox being opened and the same blank page running there.
7) After all that. . . Connection lost yet again and this time, Windows cannot connect at all. It reports that the "wireless network security key is not correct". I happen to know that it is, because this is maybe the 20th time it has reported this in the past 10 days and every time I have to key in the "correct" key all over again. . . at which point Windows still says it isn't correct and cannot repair.
Turning off the computer completely, unplugging from the wall, holding in the power switch for a full minute to clear the circuits, traipsing up and dowen three flights of stairs to turn off the hub, then wait, then turn the power back onm again. . . Ah, wot fun times I'm having here with my particular versioin of Infinity (as in, an infinity of connectivcity problems.)
Summary: I seem to be being simultaneously hit with one issue after another.
I'm bewildered as to why ever since Infinity was installed here, my upload speed is generally faster than my download speed. I'm not happy with endless Internet connection failures though am thinking that Vista is playing a large part here with its "wrong security key" and unending 'Local Only / Limited Connection' failures. I do miss my Netgear router and the ability to access a fantastic help menu and re-boot directly from the desktop without having to keep going up and down three flights of sdtairs to do so (I haven't been able to find out how toe access the BT Hub remotely.)
Above all though: I'm really tired of repeatedly trying to run freshly downloaded and installed BT Desktop Help software but getting no further than a blank page because the program has stalled.
If anyone has any advice / suggestions, other than to buy a carrier pigeon, that'd be much appreciated.
Thanks.

Thanks again to John and gg30340. Here's an update:
1) BT Desktop Help removed completely from this computer. The uninstaller itself mopped up everything, which surprised me. But anyway.
2) Bt Home Hub manager set up and working. Had to input serial number and create new password. All of this sounds fairly easy and would be if one had the device near the desk. But the idiots who built this property shoved the BT master socket inside the garage next to the door. Our two home computers are on the third floor. To ensure the wireless signal strength is OK, the Hub and Infinity module/device/whatever it's called are on a high shelf. It's a major job to even reach the darn things, never mind read the labels seeing as how the BT Infinity engineer was good enough to tidy up the cabling and make a very tight connection to the wall socket.
3) I had hoped to be able to back up the Hub's settings, seeing as the software provides for Advanced Settings / System / Backup. But not on mine (Hub 3.0). All that System allows is choosing which internet clock to define the accurate time. Everything else in System is just a pattern of short lines as if trying to indicate that there's some text there but it's invisible.This is now my second encounter with BT software which, for whatever reason, isn't functioning as it should on this PC.
4) Hub reset to factory fresh, according to BT guide.
5) Reset appears to have achieved nothing apart from requiring the password to be popped in again. After reset, it wasn't even possible to connect to the hub manager. Internet connectivity was eventually established for all of 30 seconds and then, gone.
6) Computer was shut down and then booted anew. Internet connectivity is still. . . dreadful. One minute everything's fine and then, literally,. the next minute a webpage won't load. Even opening the Hub Manager has taken three attempts, i.e., disconnecting from the Internet, re-connecting, failing, and trying twice more until success. Yet all the time these failures are occurring, the tray icon is showing a steady, unwavering green icon for Local and Internet access -- despite the fact, there manifestly isn't any.
7) Speedtest. net tests are actually showing upload and download 'trajectories' going slower and slower and finally halting at some point on the arc, then after a period of up to 30 seconds, suddenly becoming animated again. Speed test results with broadband speed checker UK and Think Broadband's checker are so at variance with one another, and with Speedtest, net, that it seems all three are using different technologies in pursuit of the same thing. Either way, upload speeds continue to be much, much faster than download speeds, a state of affairs I certainly have never encountered before.
8) Speedtest net tests taken in the past 10 minutes, with one test following on from its predecessor, begin at 8.24 down/8.88 up, followed by 5.24 down / 6.40 up, followed by a mind-numbingly lonnnnng 0.62 down / 8.70 up -- in other words, a continuous yo-yoin g of Internet connectivity to the pooint that it actually might as well not even be here (I've had to make five attempts just to get on to this forum. . .)
9) BT Speedtest will necessitate disconnection of everything downstairs and all boxes being lugged up here. This is actually going to require uncoililng tied-off cabling and hanging off a stepladder to do so -- though I surely can't be the only person in Britain who doesn't have a nice, handy BT master socket in their study or lounge. That said though: until we switched to Infinity, we *never* experienced these kinds of horrendous connectivity problems and never had need to unplug the Netgear router downstairs and bring it upstairs to connect directly to tjhe desktop PC so BT's own test could be run.
I'll just have to get to work dismantling stuff tomorrow. However, I have to say that after a factory re-set which has changed nothing at all, I'm beginning to think there's a problem with the BT line itself (hence why I'm happy to follow the advice here, though less than happy at the prospect of the messing about involved.)
Thanks, you two, for your patient help, and also for clarifying the situation re the three signal paths being shown on inSSIDer. At least I know that's usual now! And now, hopefully, when I press 'Post', I won't be faced with an endlessly spinning Firefox circle culminating in what may well be, or seem to be, the 57,938th time today of seeing "Page Not Found". . .

Multiple Samsung Stratosphere problems after FF1 update

There have been multiple posts on various issues users have found after the recent Stratopshere FF1 update. Some were replys to older posts and some only touched on a single issue. I wanted to consolodate into one thread, and hopefully get teh attention of Verizon to maybe reply here.
For reference, a lot has been discuss here --> https://community.verizonwireless.com/message/874446
Summary: Verizon and Samsung have finally updated the Stratosphere almost 1 year after release. This updated the phone from Android 2.3.5 to Android 2.3.6. Going by filename, this is known as the FF1 update. This update went live at the end of August 2012, and most users were upgraded before mid September 2012.
There were some noticable changes in this update:
-Lock screen has changed. The puzzle piece and glass lock options have been removed. New options have been added, such as facial recognition unlock.
-Call answering screen has changed, introducing the option to ignore call with a message.
-Camera now has digital zoom ability.
-Ability to uninstall the 2 games the phone comes with (Need for Speed and Lets Golf)
-Phone icon has changed ever so slightly
-Wifi icon now included up and down arrows to indicate data is being sent or recieved
-Wallpaper no longer "stretches" over multiple screens - ie, it no longer scrolls as you move from screen to screen
-The visual voicemail app has been improved (I have personally not used this feature)
-Callback number is now supported in text / picture messages
-Android core OS updated from 2.3.5 to 2.3.6 (both versions are still Gingerbread)
-Update to how the device deals with the end of scrolling. It used to rubber-band bounce back, now it will just give a green bar and expand the bar as you scroll. (I cannot fault Samsung for this change as this was at teh core of an Apple lawsuit and has been changed in newer versions of Android.)
-(I am sure there are more. please list any others you may have noticed)
I have found some problems, and others have confirmed that this is (at least) somewhat widespread:
-The biggest problem is with wifi connectivity. Upon an initial connection to wifi, everything works great. After somewhere between 15minutes and 2 hours, problems start happening. Its as if the wifi keeps hanging or reconnecting. Download speeds (tested with the SpeedTest.com app) slow to about one third of normal. Apps like Facebook that require a constant connection will just time out.
-It appears the signal strength for 3g and 4g connections is lower. There are places where I used to get a 4g connection, and now I only get 3g. Some palces I fall back to just 2g digital.
Another minor issue i found was with text messages. When you reply to a message, it no longer automatically focuses the text in the input box. You have to first click into the box to start typing. Not a huge deal, but one more step to take over and over. Minor annoyence.
At my house, I struggle to get a 3g or 4g signal. I depend on wifi for my data connection. So with the wifi connection problem introduced by teh FF1 update, my phone is somewhat useless to me now while at home. Here are teh troubleshooting steps I have been through so far to attempt to fix the wifi problem:
-Complete factory reset on my phone. (did not help)
-Pull battery and SIM card out of phone for 15 minutes. (did not help)
-Went to a Verizon store. The guy at the store was helpful, and said he also had a Stratosphere and was getting the same wifi problems after the update. He said all he could do was to send me out a replacement phone. I got the replacement phone, and it had the same problems.
-I read in multiple palces that Android 2.3.6 has a bug within wifi and DHCP. Apparently if you have a DHCP lease set to "forever", the phone will keep requesting a new address. Setting the DHCP server on the router to something like 2 weeks, or using a static IP is supposed to solve this. I have a NetGear N900 router, and I can not change teh DHCP lease time. It appears, however, that my router is not sending out "forever" leases. But just to make sure, I gave my phone a static IP. (None of these steps made any difference).
The only thing that temporarily fixes the problem is a reboot of the phone. This will again give you anywhere from 15min to 2 hours of good wifi use before problems start happening.
I have now had this update for over a week, and on 2 phones. I still can't maintain a wifi connection for much longer than 15 minutes without problems starting up.
I am asking Verizon or Samsung to at least confirm this issue if possible. Maybe there are newer revs of the Stratopshere hardware that don't have this problem. Or there is something unique about my (and apparently others) situation. But it seems like Verizon's current stance is to offer a repalcement phone (as currently all Stratospheres are within their 1 year manufacture warranty as the phone has not been ouy for quite 1 year yet).
I am asking for a workaround for this problem, or a true fix adressed by a new software update, or at least allow us to roll back to the original Andorid 2.3.5 software.
I have had my original Stratosphere for almost a year with no wifi problems - then get the FF1 update and have had nothing but problems on 2 different phones.
Thank you for your time.

Thanks for starting a comprehensive thread on problems with this update. I want to add one more.
I have Bluetooth in my car (a 2004 model), and previously the phone has connected to it practically instantly when I start the car. Since the update, I have never been able to connect the phone to the car by Bluetooth. Several times the phone has made a standard notification sound at the moment it should be connecting to Bluetooth, though no notification appears. I have no idea what that could mean.The car's Bluetooth shows up as paired in the list of devices in Settings > Wireless & networks > Bluetooth settings. I haven't seen this widely reported as an update issue, but perhaps some others have experienced it too.
UPDATE: I finally did some testing, and found that the notification was to signal the extremely brief appearance of a dialog indicating that the car's Bluetooth was requesting a connection. Accepting that request let the phone connect with the car, and calls went to the car's sound system as they should. When I turned the car off and back on (just the electrical system; not wasting any gas on this!), the connection was established immediately, so apparently the acceptance only had to be done once. Nevertheless, it did have to be done, and the dialog notification disappears within seconds. I believe it would have been possible to go into Bluetooth settings and accept the connection request there if I missed the notification; but not seeing the notification, I might not know to do this.
One further observation: When I turned the phone's Bluetooth off and back on after a connection had been established, leaving the car on the whole time, the two did not reconnect. I believe that may be different from before the update, but I'm not really sure.
Message was updated by David Rensberger

How to provide access to multiple users connected to a Dumb switch? (multi-auth/multi-domain)

Good morning everybody,
I am writing on behalf of not being able to implement a desired outcome in our company network. In fact the situation is as follows:
What I want to do is to be able to authenticate users (802.1x authentication) in our company radius server and authorize them access by having a dynamic VLAN assignment in a multi-user environment on one and the same port of a Cisco 2960 switch. So far, the authentication and authorization has been working completely smoothly (there are no problems with itself). The concept involves the configuration of both DATA and VOICE VLANs as I there is also phone authentication implemented. In order to simulate this environment I introduce a Dumb switch connected to my Cisco 2960 Catalyst.
What I have successfully managed to get to work so far is this:
1) On one switch port I have tried the “authentication host-mode multi-domain” and it worked perfectly for a PC behind a telephone, or with one PC connected to a the dumb switch + the telephone connected to another port of the dumb switch. Logically it is the same situation as there is a separation in two domains – DATA and VOICE. Bellow is an output from show authentication sessions for this scenario.
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
2) On the other hand, when I try the same scenario with the “authentication host-mode multi-auth”, the switch still separates the traffic in two domains and is able to authenticate all users, AS LONG AS they are in the same VLAN.
show authentication sessions:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
However, I cannot succeed authentication of many users from DIFFERENT VLANs, neither in multi-auth nor in multi-domain modes.
What I want to get is an output like this:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
I want the switch to authenticate the users anytime they connect to itself and for them to have an instant access to the network. (I tell this because I tried scenario 1) with multi-domain mode and authentication violation replace, and it worked but, two users never had access to the “Internet” simultaneously!!!
The configuration of the interface connected to the Dumb switch is as follows.
interface FastEthernet0/x
description Connection to DUMBswitch
switchport mode access
switchport voice vlan XXX
switchport port-security maximum 10
switchport port-security
switchport port-security violation protect
authentication host-mode multi-auth
authentication priority dot1x
authentication port-control auto
authentication timer reauthenticate 4000
authentication violation replace
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
The way I see it is explained in the following steps:
- PC1 connects to the Dumb switch. This causes the Cisco switch to authenticate user1. This creates an auth. session with its MAC address linked to a domain DATA.
- When PC2 connects to the Dumb switch, this causes the violation replace which replaces the recent authenticated MAC address with the MAC of PC2. I would like it once authenticated to appear in the authentication sessions with a link to a new DATA domain linked to the VLAN assigned from the RADIUS server.
Is this possible? I think (in theory) this is the only way to provide authenticated access to multiple users connecting through Dumb switch to the network.
Has anybody ever succeeded in such a configuration example and if yes, I would be love to get some help in doing so?
Thank you
Stoimen Hristov

Hi Stoimen,
I have done a setup similar to yours with the only exception being VLAN assignment. When I used dACLs only, it makes things somewhat easier as the VLAN no longer matters. Remember that the switchport is in access mode and will only allow a single VLAN across it (with the exception of the voice VLAN). I think that is the real cause of your problem.
From what I can see, you have 2 options available to you:
1) Use dACLs instead of VLAN assignment. This means that an access list will be downloaded from the radius server straight to the authenticated user's session. I have tested this and it works perfectly. Just Google Cisco IBNS quick reference guide and look for the section that deals with Low Impact mode.
2) Get rid of the dumb switches and use managed switches throughout your network. Dumb switches will always be a point of weakness in your network because they have no intelligence to do advanced security features like port security, 802.1x, DHCP snooping, etc.
Hopefully someone else will chime in with another option.
Xavier

Cant open multiple profiles at the same time on Outlook.

So i have done some research and found that you can use command line switches to open different profiles in Outlook.
e.g. "C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE" /profiles "ProfileName"
What i want to do is open two different profiles at the same time. So i already have one profile open, i use the method above, however it simply opens a copy of the profile i already have open rather than the one i defined in the command line switch?
I know it works because if i don't have a profile open it opens the profile i specify. Is this by design? If so what is the point in having a profile switch? If someone could help me get this working it would be great.
Thanks in advance.

Hi Eric,
Thanks for confirming this. We already have all the mailboxes that she wants on her main profile. The problem is that Outlook cant handle processing all of these at the same time and continuously crashes and hangs. As i said previously the .ost for her profile
was 16GB, i have managed to reduce to 9GB but Microsoft themselves say that anything above 5GB needs extra hardware power for a good user experience.
http://support.microsoft.com/kb/2695805/en-gb
Up to 5 gigabytes (GB): This file size should provide a good user experience on most hardware.
Between 5 and 10 GB: This file size is typically hardware dependent. Therefore, if you have a fast hard disk and lots of RAM, your experience will be better. However, slower hard disk drives,
such as drives that are typically found on portable computers or early-generation solid-state drives (SSDs), experience some application pauses when the drives respond.
More than 10 GB: When the .ost file reaches this size, short pauses begin to occur on most hardware.
Very large (25 GB or larger): An .ost file of this size increases the frequency of short pauses, especially while you are downloading new email messages. However, you can use Send/Receive
groups to manually sync your mail. For more information about Send/Receive groups, see the "Are you synchronizing many RSS feeds?" section.
I find it surprising that you cant have multiple profiles with different mailboxes when you consider you can only have an .ost up 5GB to have a good user experience. Maybe this is something the developers can put into the next version of Outlook? Or release
as a patch?

IPOD CONNECTIVITY PROBLEM WITH WINDOWS XP VIA USB 2.0

Enough is enough.
I have an ipod touch and I am having difficulty connecting it to my pc via usb 2.0.
I have searched the entire web and came across many cases similar or the same as mine. It's time for apple to face the fact that there is something wrong with either the apple mobile service or the apple usb drivers or the itunes software that causes connectivity problems with win xp.
For the record my case is this:
I got my itouch 3 days ago. I installed itunes 8.0. Then I plugged in my ipod to a usb extension cable port connected to a usb at the back of my desktop computer. At first I got the "this usb device can perform faster if you plug it to a usb 2.0 port etc." message. So I did. I removed the extension cable and connected it directly to one of the usb ports at the back. The first time it synchronized, it seemed fine. So I decided before I do anything with it, to update it to the 2.1 version. I made my account and bought (very bad policy there apple, it should be free or at least cheeper than 8 euro) the 2.1 update. I clicked to update the i-touch. While it was updating it crashed during the restore process (because it was disconnected but I didn't know that at the time). I unplugged it, resetted and plugged it back and managed to continue the restoring process until it was updated. After figuring out itunes I chose the "manage files manually option", kept everything unchecked in the sync options except the applications. I noticed there were random disconnections here and there but I didn't pay much attention because they weren't very frequent.
The next day I plug in the touch again and suddenly I hear that annoying "connecting-disconnecting" sound from windows while my touch kept disappearing and reappearing in itunes. Suddenly my playlists disappeared from the touch. Nothing was in the touch any more. How could that happen since i had chosen to manage my files manually instead of synchronizing? So I unplugged the touch again, restarted the touch, restarted the pc, stopped and restarted the apple mobile service, unistalled and reinstalled itunes, searched microsoft support and read many usb troubleshooting documents in the web. Nothing happened. The touch randomly keeps disconnecting from the usb. I eventually managed to put my stuff back in and keep them there.
Here's what I know:
1) There is nothing wrong with my usb ports. I don't use usb hubs, they are usb 2.0, the voltage (500mA) is correct in the device manager. Everything else works fine there.
2) The ipod touch does not support disk mode so you can't see it under "my computer" and this is not a problem.
3)There is nothing wrong with the ipod, it works perfectly.
4) This is not a usb cable physical problem.
5) The five R's are irrelevant with this situation.
Uninstalling and reinstalling itunes doesn't solve the problem, neither does hard resetting the ipod.
6) Older PC configurations seem to be more affected by this but it doesn't have to do with unsupported specific chipsets.
Here's what needs investigating:
1) There may be a problem with the apple mobile service running on win XP.
2) There may be a problem with the apple usb driver and win XP or older motherboards.
3) There may be a 2.1 firmware issue with usb 2.0 connectivity.
Workaround so you don't go nuts:
Use USB 1.1 instead of 2.0. It is A LOT slower but it keeps the connection stable and you can work with the ipod. Just start copying and go do something else for the next hour. So far it works for me.
This is a serious issue that needs immediate attention. I've stumbled across forum discussions dating to 2005 with this problem (with older ipods of course).

I think this needs to be put down to the eternal PC/Mac argument. Apple dont want to fix this as they want everyone to buy a Mac. Its a business, understandable, but in turning away PC buyers they alienate a huge percentage of the market.
Now, I had my first iTouch stolen. It synced, for the most part, very well, just occasionally it removed settings and music, but ticking boxes each time I sync'd sorted that, Its a workflow procedure.
SO, now that my Touch has been replaced, iTunes cannot see it. The PC can identify it on USB1 or USB2, My work lap top can see it and has indeed upgraded it to V2 software, just in case that was the issue, but no. For some really weird reason Itunes on my desktop cannot see the new pod.
This does not make sense with the argument that Apple software doesnt work on a PC, but doesnt help that none of the Apple support staff, phone or in-store have a clue about Windows operations.
Because my Touch has now been trying to connect to 6 separate installs of itunes, multiple USB ports, multiple USB cables, a complete overhaul of the registry settings (everything else still works), and the loss of all my previous settings and backups from the last Touch... but still, the PC says its an ipod but cant install it, iTunes sits there, dumb.
The only thing I can do now is sell the device as brand new as it has never had music on it and is just a week old...
It has changed the MiniMac I was going to have for my new flat screen TV into a PC and suggests that anyone with a PC should stick to devices that run on PC, of which there are many, just without the user interface of the dear departed IPod Touch.
Thanks

M website in Verizon's Site Builder can't be crawled by Google-server connectivity problem-

I made a one-page website in Verizon's Site Builder program, then "added my site" at Google. Google says it can't crawl it. Don't know if crawling is necessary but seems good to have it working regardless. Google says there's -server connectivity problem-. Would that be Verizon? (I purchase FIOS)
I have another website made in same Verizon program & don't have a problem with it at Google. It's almost identically made, & also one page. So why the difference?.
Anyone know how to fix or understand this? How to correct server connectivity problem? or how to reach Verizon support service about this? (no support is available at Site Builder) .
FYI, the -add a site- & website tool dept. at Google is called Webmaster Tools. Free tools for websites.
I'm so disappointed all my efforts contacting tech supports at Verizon hasn't offered concrete answers. They pass me on to other depts. one after another...
Would appreciate direction with this. Many thanks.
Solved!
Go to Solution.

I've gotten a response, and it would seem that since my webpage comes up fine when typed in browser, that there isn't anything more that Verizon can provide. That it would be on Google's end to assist. But Google says there is a server connection problem.
In the end, the website seems to work fine and I'll leave it at that. And for whatever crawling provides, I guess I will pass on that.
thanks for the response.
also, the area for == private support messages == can be located below your post via your profile page. (i think that's how it works.)

Org detemination when user attached to multiple profiles in IC webclient

Hi,
I am having a problem with org determination in IC webclient when a particular user is attached to multiple profiles.
The scenario is as follows:
1. Log into IC webclient
2. Indentify and confirm an account
3. Select and confirm an IBase
The IBase here is basically used for partner determination.
4. Go to the Service Ticket and enter you details and save it.
The issue is as follows:
When the user who is logged into the IC webclient is attached to a single profile then org determination happens correctly and the partner determination procedure is subsequently triggered to determine all the partners from the IBase.
Now when the user is attached to multiple irg units because of some business reasons then the org determination does not happen because the user is attached to multiple org units in the org structure and hence the subsequent partenr determination is also not invoked.
I am sure of one thing that if the org determination happens correctly then the partner determination will also happen correctly and the all the partners from the IBase will be determined.
My query:
After the user has uniquely selected a profile indicating which org unit he wants to currently work with how do I ensure that the org determination succeeds. In other words how do I ensure that the org determination now occurs based on the profile selected in IC web client.
Thanks and regards
Murli Rao

Hello Vin,
 I have created a new rule. This is a copy of rule 10000194.
The problem I am faced with is that the function module mentioned in the rule is not invoked.
My observations are as follows:
1. In function module CRM_ORGMAN_DETERMINE_ORGOBJS the there is a call which is as follows:
 CALL FUNCTION 'CRM_ORGMAN_FIELD_CATALOG_VALUE'
 EXPORTING
 iv_ref_guid = iv_ref_guid
 iv_ref_kind = iv_ref_kind
 iv_scenario = iv_scenario
 iv_act_object = iv_act_object
 is_reference_partner_wrk = is_reference_partner_wrk
 is_orgman_com = is_orgman_com
 iv_container_mix = iv_container_mix
 iv_bal_log = iv_bal_log
 IMPORTING
 et_act_cont = lt_act_cont
 EXCEPTIONS
 no_values_found = 1
 OTHERS = 2.
 Now the call above is used to get the container values which will be used during rule determination. I have not maintained any container objects in the rule itself. But since the rule is attached to an Organizational data profile the following are a part of the container:
Sales Organisation, Distribution Channel, Division, Sales Office, Sales Group.
Unfortunaely there is no value determination available for these objects. Hence when the above function module return the variable lt_act_cont has 5 rows and the value of sy-subrc = 1 because there was no value determination.
2. The same thing happens for the default rule 10000194. But the lines after the function module will tell as to why for the standard rule the function module is called and not for my rule. The lines are as follows:
 IF ( sy-subrc = 0 ) OR ( lt_act_cont[] IS INITIAL ) OR
 ( iv_act_object = 'AC10000194' ) OR
 ( iv_act_object = 'AC14000178' ).
As you see the rule has been hardcoded and hence everythings seems to work fine.
How can I overcome this issue.
Thanks and regards,
Murli Rao

Enable multiple profiles for data entry profile in HRESS_A_CATS_1

Hi,
We are trying to migrate from JAVA web dynpro to abap web dynpro.
Can any one tell me how to activate multiple profiles in cats record & release application.
I created one custom application configuration for hress_a_cats_1 from hress_ac_cats_1 and togged on the multiple profiles feild. But, when i test the configuration hresss_ac_cats_1 it still calls the standard config but not my custom config.
I have even assigned this custom config but it does not call what else do i need to do ?

Harsha i have this problem in ABAP Stack so no iviews. Thanks though.
Teja,
Thanks for the answer.
What i did exactly is went to T-code: lpd_cust where we maintain all the applications.
Open the Role: ESS and Instance MENU.
Drilled down to : Employee Self Service-> Working Time-> Time Recording-> Record Working Time
Click on Advanced parameters
Change the configuration name to custom name from standard.

SAPConsole710 - multiple profiles connectivity problem

Similar Messages

Maybe you are looking for