Secondary ip address - using as NTP-Source

Hello,
if i configure a secondary ip address on a primary inerface.
How can i force some services to use this secondary ip address as source-address.
For example, NTP, Tacacs, ... and so on.
I am loooking for something similar to ntp source-interface on routers.
Thanks
Andreas

Hello,
You even do not need to set a secondary ip address.
You can use single IKE identity so the VPN peer is identified by all of its peers with a single IKE identity which is achieved by using a loopback address (always up) that must be advertised by your routing protocol or by the mean of a static route.
This will save resources in the case when crypto map is bound to different interfaces for access link redundancy or in your case when you are planning to change the interface ip address, so the IKE SA will exist between the two peers regardless of which ip address is used.
In the other side you can point IPSec ?set peer? command to the peer loopback interface.
Additional features might help:
- IPSec keepalive/ DPD (Dead Peer Detection), this will intercept peer failure at time.
- Another feature that will clear the IPSec SA if a maximum idle timeout is reached.
I successfully tested the configuration, take a look at routers configuration file.
I hope I answered your question.
Have a good work,
AJN

Similar Messages

How is NTP reply routed when requesting router uses loopback as source address

The Cisco NTP Best Practices White Paper and DISA STIGs recommend setting the NTP source address to a loopback interface (e.g. "ntp source loopback0").
But this only seems to work if the requesting (NTP client) router is the default gateway for the NTP server.
Specifically, the NTP server will attempt to reply to the requesting router's loopback-based source address (taken from the NTP request packet). Since that address will always be non-local from the perspective of the NTP server, the NTP server will encapsulate the reply in a Layer 2 frame addressed to its default gateway. If the gateway was the source of the original NTP request, that should work. But in most other situations that gateway won't know how to reach a loopback-based address, and will discard the reply.
I have verified this in tests with routers running both 12.4 and 15.1 releases (and NTP debugging enabled). When the NTP source is a loopback address, NTP replies never reach the requesting router. With the default NTP source address (i.e. based on the exit interface) everything works fine.
Obviously, you could employ workarounds, such as static routes or injecting loopback addresses into your routing protocols. But that seems uglier than leaving NTP source addresses at their defaults.
Why is this "best practice" so commonly advocated without mention of some significant caveats regarding routing? Am I missing something?
Thanks,
Mark

Michel:
Thanks for the response. Actually, I understand what kind of routing workarounds could allow NTP to function in spite of this "best practice." But I am mystified as to why a Cisco "NTP best practice" paper (http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a0080117070.shtml) and various security policies would call for setting a loopback address as the NTP source when that practice will often cause more problems than it solves.
The stability of a loopback address is nice when that address is used to uniquely identify the platform for a routing protocol or syslog. A loopback-based source address can also simplify ACL management, since that address won't change if an interface or link failure forces the router to send traffic from a different interface. But I keep seeing security configuration guides/policies that call for also using a loopback address as the source for two-way protocols, such as FTP and NTP. That just doesn't make sense to me when you balance the routing implications against the limited security benefits (stable device identification, simplified ACL maintenance, and obfuscation of device addresses).
I was hoping to learn that some obscure command might allow me to control which NTP exchanges use the loopback-based source address. For example, the loopback source address would work fine on outgoing NTP broadcasts (and probably in replies from NTP servers). But I would prefer that NTP client requests use a source address based on the exit interface. That way replies can be routed back to the client without cluttering up routing tables with routes to loopback addresses.
So far, it looks like I'll need to chalk this up to poor coordination between the network security and network administration communities.
Thanks again,
Mark

Message Tracking logs for secondary smtp address

Hi,
There are many people sending mails to secondary smtp address instead of primary smtp address. How can i pull the report of message tracking logs if they sent it to secondary smtp address using get-messagetrackinglog cmdlet?
Sankar M http://messagingdevelopment.blogspot.in/

Hi Sankar,
If I don't understand your description, it seems that you want to get the message tracking log on an mailbox with primary SMTP address and secondary SMTP address.
If it is the case, please add both primary SMTP address and secondary SMTP address to the "Recipients" parameter. More details to see:
http://technet.microsoft.com/en-us/library/aa997573(v=exchg.150).aspx
Thanks
Mavis Huang
TechNet Community Support

My secondary e-mail address used on my daughter's ipod can no longer work. It states, that it is already in use with another apple id. She used it for weeks before this happened.

My secondary e-mail address used on my daughter's ipod can no longer work. She uses this as her imessage texting. First it needed to be verified. Once I tried to verify it on appleid support, It states, that it is already in use with another apple id. She used it for weeks before this happened.

Maybe:
iOS: Troubleshooting FaceTime
iOS: Troubleshooting FaceTime and iMessage activation

VRF selector using PBR or Source IP address

Could anyone can tell which is the better choice of VRF selector using PBR or Source IP address? From Cisco doc, VRF selection based on Source take advance over PBR. My feeling is that PBR may match more criterias than just match source IP address.
Thanks

I would personally use the "VRF selection based on source IP address" only where the "VRF selection using PBR" is not available since the latter is a superset of the former.
Hope this helps,

Is there possible to specify the source ip address used for Radius

I have a cat6509 configured to talk to Radius server (ACS), as I understood that the IP address used by Cat6k to talk to ACS is by using the nearest interface ip, can i explicitly specify the source address used by Cat6k in this case ?
thanks in advance.

I am not clear whether you are asking about talking to Radius from the switch or from the MSFC? If it is from the MSFC you are correct that by default it will use as source address the address of the outbound interface. On the MSFC you can use the command: ip radius source-interface to specify what address to use.
On the switch I think that it will source its packets to Radius using the management/console IP address rather than the outbound interface. So no command is needed to specify the source interface.
HTH
Rick

Secondary IP Addresses

I added a secondary IP address to an interface and I cannot ping any hosts on that subnet unless I use extended ping commands and ping from the secondary IP addresses as the source. Why would that be?

Hi GP,
Thanks for the quick reply. The problem is I cannot ping that subnet from any other host on the other subnets. When I run a "show ip route" the subnet I am looking for is directly connected as are the other subnets I am trying to ping from. I.e:
int vlan1
ip address 205.205.X.X 255.255.255.0
ip address 209.115.X.X 255.255.255.0 secondary
ip address 10.0.5.1 255.255.255.0 secondary
I use the 10.0.5.1/24 subnet to access equipment that don't need public IP addresses. Shouldn't I be able to ping from a host on the 205.206.x.x network and be able to reach the 10.0.5.x network since they are both directly connected?
Any light you can shed would be greatly appreciated.

How to create a report using XML data source from Crystal Report Designer

Hi,
Iu2019m having Crystal Report Designer XI R2 SP4. Iu2019m trying to create a report using XML data source stored on disk. This is a customer order report and the xml is structured in such a way that it has an order details header part (master) and then it has several order lines (detail). One order line can have several order line characteristics (detail-detail). So what I need to know is now I can design this layout from the designer. If this was done using views I can do it with sub-reports but using xml data this seems to be different. Can you help me to design this layout? I have included the xml and xsd as well.
Thank you in advance.
Regards,
Chanaka
XML
<?xml version="1.0" encoding="UTF-8"?>
<CUSTOMER_ORDER_CONF_REP_REQUEST xmlns:xsi="http://www.w3.org/2001/XMLSchema" xmlns="urn:ifsworld-com:customer_order_conf_rep">
    <CUSTOMER_ORDER_CONF_REP>
        <ORDER_NO>D555809</ORDER_NO>
        <PRINTED_DATE>2009-03-26T08:52:54</PRINTED_DATE>
        <AUTHORIZE_NAME>Chanaka</AUTHORIZE_NAME>
        <CUSTOMER_NO>CU-1473-INV</CUSTOMER_NO>
        <CUST_NAME>Mr.Johan Matts</CUST_NAME>
        <SHIP_ADDR_1>93,Main Street</SHIP_ADDR_1>
        <SHIP_ADDR_2>Negambo Road</SHIP_ADDR_2>
        <SHIP_ADDR_3>Watthala</SHIP_ADDR_3>
        <SHIP_ADDR_4>SRI LANKA</SHIP_ADDR_4>
        <BILL_ADDR_1>93,Main Street</BILL_ADDR_1>
        <BILL_ADDR_2>Negambo Road</BILL_ADDR_2>
        <BILL_ADDR_3>Watthala</BILL_ADDR_3>
        <BILL_ADDR_4>SRI LANKA</BILL_ADDR_4>
        <CUSTOMER_PO_NO>112984638</CUSTOMER_PO_NO>
        <CUSTOMER_FAX>112984639</CUSTOMER_FAX>
        <CUSTOMER_EMAIL>abcbababab</CUSTOMER_EMAIL>
        <ORDER_LINES>
            <ORDER_LINE>
                <LINE_NO>1</LINE_NO>
                <CUSTOMER_PART_NO>NW-IP11</CUSTOMER_PART_NO>
                <CUSTOMER_PART_DESC>iPod</CUSTOMER_PART_DESC>
                <SALE_UNIT_PRICE>1200</SALE_UNIT_PRICE>
                <PRICE_TOTAL>1200</PRICE_TOTAL>
                <DISCOUNT>0</DISCOUNT>
                <PRICE_QTY>1</PRICE_QTY>
                <ORDER_LINE_CHARACTERSTICS>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID xsi:nil="1"/>
                        <CHARACTERISTIC_VALUE xsi:nil="1"/>
                    </CHARACTERISTIC_ITEM>
                </ORDER_LINE_CHARACTERSTICS>
            </ORDER_LINE>
            <ORDER_LINE>
                <LINE_NO>2</LINE_NO>
                <CUSTOMER_PART_NO>NW-IP24</CUSTOMER_PART_NO>
                <CUSTOMER_PART_DESC>XGA Projector</CUSTOMER_PART_DESC>
                <SALE_UNIT_PRICE>500</SALE_UNIT_PRICE>
                <PRICE_TOTAL>1500</PRICE_TOTAL>
                <DISCOUNT>0</DISCOUNT>
                <PRICE_QTY>3</PRICE_QTY>
                <ORDER_LINE_CHARACTERSTICS>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>1</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>Free Instalation</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                </ORDER_LINE_CHARACTERSTICS>
            </ORDER_LINE>
            <ORDER_LINE>
                <LINE_NO>3</LINE_NO>
                <CUSTOMER_PART_NO>NW-IP02</CUSTOMER_PART_NO>
                <CUSTOMER_PART_DESC>Sony DVD Player</CUSTOMER_PART_DESC>
                <SALE_UNIT_PRICE>1000</SALE_UNIT_PRICE>
                <PRICE_TOTAL>1000</PRICE_TOTAL>
                <DISCOUNT>0</DISCOUNT>
                <PRICE_QTY>1</PRICE_QTY>
                <ORDER_LINE_CHARACTERSTICS>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>1</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>Free 5 DVDs</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                </ORDER_LINE_CHARACTERSTICS>
            </ORDER_LINE>
            <ORDER_LINE>
                <LINE_NO>4</LINE_NO>
                <CUSTOMER_PART_NO>NW-IP99</CUSTOMER_PART_NO>
                <CUSTOMER_PART_DESC>Flatscreen TV</CUSTOMER_PART_DESC>
                <SALE_UNIT_PRICE>1500</SALE_UNIT_PRICE>
                <PRICE_TOTAL>1350</PRICE_TOTAL>
                <DISCOUNT>10</DISCOUNT>
                <PRICE_QTY>1</PRICE_QTY>
                <ORDER_LINE_CHARACTERSTICS>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>1</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>Free Delivery</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>2</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>1 year additional warranty</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                </ORDER_LINE_CHARACTERSTICS>
            </ORDER_LINE>
            <ORDER_LINE>
                <LINE_NO>5</LINE_NO>
                <CUSTOMER_PART_NO>NW-IP56</CUSTOMER_PART_NO>
                <CUSTOMER_PART_DESC>Sony MP3 Player</CUSTOMER_PART_DESC>
                <SALE_UNIT_PRICE>200</SALE_UNIT_PRICE>
                <PRICE_TOTAL>400</PRICE_TOTAL>
                <DISCOUNT>0</DISCOUNT>
                <PRICE_QTY>2</PRICE_QTY>
                <ORDER_LINE_CHARACTERSTICS>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>1</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>Free carry belt</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>2</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>Free promotional 4GB memory bar</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                    <CHARACTERISTIC_ITEM>
                        <CHARACTERISTIC_ID>3</CHARACTERISTIC_ID>
                        <CHARACTERISTIC_VALUE>No warranty on memory bar</CHARACTERISTIC_VALUE>
                    </CHARACTERISTIC_ITEM>
                </ORDER_LINE_CHARACTERSTICS>
            </ORDER_LINE>
        </ORDER_LINES>
    </CUSTOMER_ORDER_CONF_REP>
</CUSTOMER_ORDER_CONF_REP_REQUEST>
XSD
<?xml version="1.0" encoding="UTF-8"?>
<?report module="ORDER" package="CUSTOMER_ORDER_CONF_REP" ?>
<xs:schema targetNamespace="urn:ifsworld-com:customer_order_conf_rep" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:ifsworld-com:customer_order_conf_rep" elementFormDefault="qualified" attributeFormDefault="unqualified">
<xs:element name="CUSTOMER_ORDER_CONF_REP_REQUEST">
<xs:complexType>
<xs:all minOccurs="1" maxOccurs="1">
<xs:element name="CUSTOMER_ORDER_CONF_REP">
<xs:complexType>
<xs:choice minOccurs="0" maxOccurs="50">
<xs:element name="ORDER_NO" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="PRINTED_DATE" type="xs:dateTime" nillable="true" minOccurs="0"/>
<xs:element name="AUTHORIZE_NAME" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUSTOMER_NO" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUSTOMER_PO_NO" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUST_NAME" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="SHIP_ADDR_1" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="SHIP_ADDR_2" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="SHIP_ADDR_3" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="SHIP_ADDR_4" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="BILL_ADDR_1" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="BILL_ADDR_2" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="BILL_ADDR_3" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="BILL_ADDR_4" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUSTOMER_FAX" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUSTOMER_EMAIL" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="ORDER_LINES" nillable="true" minOccurs="0">
<xs:complexType>
<xs:sequence minOccurs="0" maxOccurs="unbounded">
<xs:element name="ORDER_LINE">
<xs:complexType>
<xs:choice minOccurs="0" maxOccurs="39">
<xs:element name="LINE_NO" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="SALE_UNIT_PRICE" type="xs:float" nillable="true" minOccurs="0"/>
<xs:element name="PRICE_TOTAL" type="xs:float" nillable="true" minOccurs="0"/>
<xs:element name="DISCOUNT" type="xs:float" nillable="true" minOccurs="0"/>
<xs:element name="PRICE_QTY" type="xs:float" nillable="true" minOccurs="0"/>
<xs:element name="CUSTOMER_PART_NO" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="4000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CUSTOMER_PART_DESC" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="4000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="ORDER_LINE_CHARACTERSTICS" nillable="true" minOccurs="0">
<xs:complexType>
<xs:sequence minOccurs="0" maxOccurs="unbounded">
<xs:element name="CHARACTERISTIC_ITEM">
<xs:complexType>
<xs:choice minOccurs="0" maxOccurs="6">
<xs:element name="CHARACTERISTIC_ID" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="CHARACTERISTIC_VALUE" nillable="true" minOccurs="0">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:maxLength value="2000"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
</xs:choice>
</xs:complexType>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:choice>
</xs:complexType>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:choice>
</xs:complexType>
</xs:element>
</xs:all>
</xs:complexType>
</xs:element>
</xs:schema>

Hi Sourashree,
Thank you for the response and ideas you have given me so far. I can get the fetch the data from the data source without any problem. That is I do the following,
1.     New Report
2.     From Create New Connection-> XML
3.     Provide the u201CLocal XML Fileu201D and have u201CSpecify Schema Fileu201D checked -> Next
4.     Provide the u201CLocal Schema Fileu201D -> Finish
Then I can see the following under XML
+ CUSTOMER_ORDER_CONF_REP_REQUEST
        CUSTOMER_ORDER_CONF_REP_REQUEST
     CUSTOMER_ORDER_CONF_REP_REQUEST/CUSTOMER_ORDER_CONF_REP
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES/ORDER_LINE
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES/ORDER_LINE/ORDER_LINE_CHARACTERSTICS
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES/ORDER_LINE/ORDER_LINE_CHARACTERSTICS/CHARACTERSTIC_ITEM
And from here if I add the following three I can get all the fields I need to the report
     CUSTOMER_ORDER_CONF_REP_REQUEST/CUSTOMER_ORDER_CONF_REP
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES/ORDER_LINE
     CUSTOMER_ORDER_CONF_REP_REQUEST/ CUSTOMER_ORDER_CONF_REP/ORDER_LINES/ORDER_LINE/ORDER_LINE_CHARACTERSTICS/CHARACTERSTIC_ITEM
Then I come to the Linking section. Here I canu2019t link anything. There is a common field called u201CInternal_IDu201D but I canu2019t link using it. So I get a message when I click Next. From here I add all the fields.
For this point onwards only I need help. How do I group, add fields and design the layout so I can get an report output as follows.
Date
Order number                                   Authorized code
Customer No
Name
Phone
Fax email
Shipping address 1                              Billing Address 1
Shipping address 2                              Billing Address 2
Shipping address 3                              Billing Address 3
Shipping address 4                              Billing Address 4
Order Line 1 detailsu2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026                      LINE_NO     CUSTOMER_PART_NO          CUSTOMER_PART_DESC     SALE_UNIT_PRICE     PRICE_QTY     DISCOUNT     PRICE_TOTAL
Characteristic details belonging to Order line 1       CHARACTERISTIC_ID 1 CHARACTERISTIC_VALUE1
                                       CHARACTERISTIC_ID 2 CHARACTERISTIC_VALUE2
                                       CHARACTERISTIC_ID 3 CHARACTERISTIC_VALUE3
Order Line 2 detailsu2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026
Characteristic details belonging to Order line 2
Order Line 3 detailsu2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026
Characteristic details belonging to Order line 3
Order Line 4 detailsu2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026
Characteristic details belonging to Order line 4
Order Line 5 detailsu2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026u2026
Characteristic details belonging to Order line 5
How can I achieve this kind of a layout using the give xml and xsd? Should I use grouping if so how should I do the grouping?
I have included the full xml and xsd in the first mail I posted but I canu2019t see it now. I can include that again if you want.
Regards,
Chanaka

Any limit to number of secondary ip addresses?

Hi,
Is there any limit to the number of secondary ip addresses on an interface of a router?
I just took over an existing live system.
The previous engineer configured secondary ip addresses on a single physical interface.
Currently, there are 1 main ip address and 2 secondary ip addresses.
I am not allowed to change the existing configuration nor disrupt the existing live system, so I cannot use sub-interface.
When I tried to add 1 more secondary ip addresses, to make it 1 main ip and 3 secondary ip address,
but no matter how I tried, I cannot ping to the end device of this NEW secondary ip address subnet
So I removed one of the existing secondary ip address, I discovered I can ping to the end device of the NEW seconday address!!!
But when I put back the one I removed, I can no longer ping to the end device of the NEW secondary address AGAIN!
I suspect that there is a limit to the number of secondary addresses that can be configured on the physical address.
But, I check the link http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012d8f7.shtml#q21, it says
Q. What are the maximum number of secondary IP addesses that can be configured on a router interface?
A. There are no limits on configuring secondary IP addresses on a router interface. For more information, refer to Configuring IP Addressing.
I think Cisco could be wrong when saying "There are no limits".
Can someone kindly help me confirm whether there are any limits to the number of secondary ip addresses on an interface of a router?
thank you

Hi,
The main ip and secondary ip addresses are all subnetted into 255.255.255.240.
Main IP 172.16.21.155
Secondary IP#1 = 172.16.21.141
Secondary IP#2 = 172.16.21.93
New Secondary IP#3 = 172.16.21.226
As a test, I simply remove any of the existing secondary ip addresses, and it works!
But when I put back any of the addresses I removed, the new one does not work again.
If it is ture there is no limit, can it be due to other factors like the router hardware?
Pls kindly advice.
Thank you.
Rgds,
Rachel

Tor resolves ip address using port 80 [SOLVED]

Hey everyone,
I'm trying to provide a service to fellow internet users that don't like their internet traffic to be snooped on. To explain my situation I'll tell something about my setup.
I use a router to access the internet. I let a router set up a vpn connection to my vpn provider. Then I tell it, using iptables, to redirect all http and https traffic through the VPN tunnel and let all other traffic go over the standard WAN. Not entirely true, I also redirect all udp and icmp traffic through the vpn tunnel.
I have a server that I want to act as the TOR relay. I want it to use the WAN acces and not go over the VPN. This makes sure I don't burden my vpn provider with a bunch of traffic that can just use my WAN acces.
When setting up the TOR relay I use port 4436 as the relay port and port 9030 as the Directory port. My router directs all this traffic over the WAN. I also port forward these ports in the router towards the server.
The TOR relay seems to work but not entirely. I have the following message log: (I have replaced the ip addresses that belong to my WAN and VPN tunnel with "<wan-ip>" and "<vpn-ip>" to make it clearer. )
sep 04 17:29:48.164 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 17:35:08.532 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 154.35.32.5).
sep 04 17:35:09.883 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 17:55:08.476 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 18:15:08.476 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 18:26:44.664 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 18:26:45.117 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 194.109.206.212).
sep 04 18:26:49.342 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 76.73.17.194).
sep 04 18:26:58.255 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 18:33:01.221 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 18:36:52.096 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 212.112.245.170).
sep 04 18:37:10.626 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 18:56:51.965 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 19:16:51.967 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 19:27:44.011 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 19:27:44.092 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 171.25.193.9).
sep 04 19:27:44.095 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 19:27:44.098 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 194.109.206.212).
sep 04 19:27:50.211 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 76.73.17.194).
sep 04 19:27:55.398 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 19:28:08.914 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 19:29:45.764 [Warning] We just marked ourself as down. Are your external addresses reachable?
sep 04 19:37:51.966 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 212.112.245.170).
sep 04 19:37:55.358 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
What I think will fix the problem is that TOR should not resolve my ip address using http or https since that will provide the wrong ip address. When trying to access that ip address at another port (in this case 9030) will obviously not work. However there is no setting to do that. Is there any way to archieve this?
Please ask if anything is unclear.
Regards,
Berend
--edit--
I was able to set the Address field in the torrc file. This means I can hardcode the ipaddress I want it to use (WAN). However that address can change every 6 months or so. If someone has a better solution that would be very welcome.
Last edited by Berend (2013-09-05 00:47:25)

Berend wrote:@progandy
I don't have any experience with that.
I guess I can tag them with a TOS so my router knows what to do with it. But how would I give that tag?
Select the packtes with owner and then depending on what your router supports you can set either DSCP or TOS. dscp is the current standard, tos is deprecated.

Change vendor address using bapi

Hi all,
How to change vendor address using bapi.
The address,and vendornumber coming from XL file.
Based on the vendor number I want to change the address.
Please give me the example.
regards,
rakesh.

Hi Vijay,
Please help me in the following.
As Vendor/Customer Master dont have all the address fields ( like Street4-5), we use FM BAPI_ADDRESSORG_SAVEREPLICA to overcome this problem.
In my case i have created one Custom load program to upload address data using
BAPI_ADDRESSORG_SAVEREPLICA and then LSMW project to upload rest of the data.
In this case when i upload rest of the data by LSMW using BI standard program ( having NODATA indicator "/" in my source file for the fields already uploaded using BAPI above) , address data which uploaded through FM should get populate automatically (by concept of Central Address management) but in my case <b>for some of the Account Group it is not getting populated,</b> please suggest.
regards
Sonal

Configure Domain Controller ( PDC emulator) as NTP source for Cisco switch 6509

Hi All,
My Org consists of 2 DC one Physical and One Virtual. All Roles are on Physical machine. I ran a W32tm /Query /Configuration command on PDC emulator and the results are confusing.My PDC is using time source VMICTimeProvider a syou can see below.
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
My first Question is that Is it Ok for PDC emulator to use this time source or should I change to some Other source like pool.ntp.org or time.windows.com,0x1.
My Second Question is that I have a core switch cisco 6509 and I want this switch to use my NTP server (PDC emulator ) as NTP source,but at present I cannot as I am getting this error on switch.(no select intersectionTP )
Can Any one help ... Its is urgent
Thanks in Advance
EagleAsh

You should not make your DCs sync their time with your Hypervisor. This usually ends with time synchronization problem so I would recommend to disable that on your DCs and domain joined VMs and use an external NTP server to sync time on your PDC while using
your AD forest topology for time sync on other DCs and domain-joined computers.
I have already started a Wiki article that describes how to configure time sync in an AD domain and you might consider using the GPO configuration option that is stated: http://social.technet.microsoft.com/wiki/contents/articles/18573.time-synchronization-in-active-directory-forests.aspx
For the CISCO switch, I would recommend asking them in CISCO forums.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

Adding secondary IP address

When adding a secondary IP addess to the public side of the BM 3.7
server do we need to specify the mask or can we just do a add secondary
ipaddress 111.111.111.111

Hi Pete,
the secondary Ip address must be in the same subnet as the primary IP
address, therefore you don't need to add a mask.
For instance, if the primary is
192.168.1.1/255.255.255.0
you can
ADD SECONDARY IPADDRESS 192.168.1.56
Note that if you want to bind an IP address that is NOT in the same
subnet as the primary IP address, you've to use inetcfg.
Caterina
Novell Support Connection Volunteer Sysop

NTP source interface failure

NTP always uses the outbound interface, regardless of configuration of source interface.
Managed to get it to work by combining the source interface on the server command line. So instead of:
ntp server xxxxx
ntp source Loopback0
we used the command
ntp server xxxx source Loopback0
Be sure to eliminate the other ntp server and source commands.

If you're referring to applets, the command is "source-interface" as an argument to the mail action:
action X mail to "[email protected]" from "[email protected]" server 10.1.1.1 subject "Test" body "this is a test" source-interface Gi0/0

Secondary IP address in ASA5510/PIX515e

Hi All,
Just want to know if there is a way to configure secondary IP address on the outside/public interface of ASA/PIX.
One of our clients have used most of their IP on the subnet given by their ISP. They use those IP's for statically
mapping to Servers inside their local LAN. Thus, they requested another block/subnet from their ISP. They will also
use this for static mapping/port forwarding to other servers in their network. The current UTM they are using is allowing this
but they would like to use ASA/PIX as their main Firewall. Is this even possible or is there
a workaround for this kind of scenario?
Many Thanks!

Lloyd
Pix/ASA firewalls do not support using secondary addressing on an interface. However the good news is that they don't need to.
As long as the ISP routes the new block of IP addresses to the outside interface of your firewall then you simply use the new block of IPs as you have the existing block ie. you set up static translations and allow access via the access-list.
The new IP block does not actually have to be allocated to an interface.
Jon

Secondary ip address - using as NTP-Source

Similar Messages

Maybe you are looking for