Shop configuration for internal users

Hi SDN,
We are using ecommerce 7.0 for SAP ECC 6.0.
I've seen at the shopadmin that there is a possibility to configure an eshop for internal users. There its possible to create a scenario "B2B For Internal Users".
So in my point of view. I have to define a b2b configuration at XCM. And then i should see that new scenario after login.
But that works abolutely not. The shop with scenario "B2B For Internal Users" is not displayed. I only see all the configurations of type "Internet Sales B2B".
Why?? both this scenarios are B2B scenarios. So both has to been displayed?
How to configure a shop for internal users?
One more point which i understand not... Why is this configuration for internal users a B2B scenario and not a BOB?
The internal user has to select the customer...so thats the same like a BOB shop??
Please explain me that things What im understanding wrong here?
Thanks and best regards,
Toni

Similar Messages

Maximum message size for internal users

Hi,
Is it possible to configure a maximum message size for internal users and also create exceptions?
The templates available in Transport Rules only allow for "when size of any attachment is greater or equal". This is not ideal as users can add 50 X 1MB attachaments to an email etc.
Configuring Transport settings or Receive Connectors do not allow for exceptions.
Thank you.

Hi Prakash,
Thanks for the link to the thread. The AD site link configuration is valid but does not account for the required exceptions. E.g User A can send unlimited size message to User B but not to User C.
The thread also mentions the Transport Rule configuration stated in my original post but that configuration has one major flaw. Users can circumvent the control by splitting attachments.

Keep track of the shopping cart for anonymous user

Hi,
I have the following problem on b2c site. Anonymous user can browse through the site and adds items to the shopping cart. At the checkout the login page is prompted, however login page is located on the different application server where the actual login happening. After that control is returned to my server where I need to create login object and associate the shopping cart with it. My problem is how to maintain shopping cart without losing it.
I came with that solution : On checkout attach shopping cart to context object with unique key, then pass this unique key to the remote server, then remote server passes it back to me together with the login id, then I create new session and attach shopping cart to it after retrieving shopping cart from the context.
I hope it will work, however I think there is a standard solution for this type of the problems. Any ideas, hints, suggestions are strongly appreciated.
We use WebLogic 9.0 and Servlets.

Do you have a problem keeping track of the shopping cart for a user who is logged in? No, I didn't think so. So give the anonymous user an internal name, just for your own convenience. Then keep track of the shopping cart for the user with that name. You already know how to do that.

Individuall shopping lists for each User - SRM-MDM 3.0

Hello everybody,
I want to implement a SAP SRM-MDM scenario with SRM-MDM 3.0. The SRM-MDM 3.0 has the poissiblity to create shopping carts for every 'MDM User'. But that's not enough for our users.
Is it possible to create different shopping lists for each user?
I already use the setting: sl_user with the attribute SY-UNAME but it doesn't work
10                                    http://...:50100/SRM-MDM/SRM_MDM     URL
19     sl_user          SY-UNAME               SAP-Feld
20     username          User1               Festwert
30     password          <blank>                                        Festwert
40     server          s27sr7               Festwert
50     catalog          SR7_MDM3_Catalog_4_Produktiv_2     Festwert
60     uilanguage          SY-LANGU               SAP-Feld
70     datalanguage     SY-LANGU               SAP-Feld
I hope anybody can help me.
Regards,
Andi

@everybody: Thanks for your fast reply!
@Girish: Yes, I think we have the same problem
@Padhi: It is not a prictically solution to create every SAP SRM User (3.000) in the SAP SRM-MDM Catalog. In comparison to other catalog systems (e.g. heiler) this have to be a standard feature
@Kanth: That's correct, you can activate the shopping list option for the MDM User. But the MDM User only defines the rights and masks. For the MDM it is not necessary to login with your SAP / SAP SRM Username.
Note [1153525|https://websmp130.sap-ag.de/sap(bD1kZSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1153525] describe the long-needed function in SRM-MDM. But it seems, that this feature only work in SRM-MDM 2.0.
Maybe anybody know anything else about this problem... I'm thankful about every hint!
Regards,
Andreas

SCOT configuration for internal & external email system in EP.

Hi,
I want to add SCOT configuration for internal & external email system in SAP EP 7.0 ?
What all steps I need to do ? any good documents on this ?

Hi Haider,
I have read the link you have given me to configure SCOT. I have 3 doubt plzz clarify.
Doubt No. 1:
In that link its mentioned that I have to add 2 profile parameter in the transaction RZ10 namely icm/server_port_<>* and is/SMTP/virt_host_<>*
My question is Can I put any value which i like in place of * like can I add either icm/server_port_2 OR icm/server_port_3 OR icm/server_port_4 in icm parameter AND ALSO
Can I put any value which i like in place of * in is/SMTP/virt parameter like can I add either is/SMTP/virt_host_0 OR is/SMTP/virt_host_1 OR is/SMTP/virt_host_2 .
Doubt No. 2:
What port value I have to put in the profile parameter    icm/server_port_2 in RZ10. Can I put any port value ? and automatically that port will work? say suppose I addded this profile parameter in RZ10
icm/server_port_2 = PROT=SMTP,PORT=25000,TIMEOUT=180          so automatically 25000 port will work ? or will it give error?
Doubt No. 3:
When I go to SMICM transaction and go to services , I get the following:
No. Log         Service name/port     Host name           Keep Alive    Proc TimeOut   Active
1     HTTP               8000                  epv.sopm.com           30                     60               Yes
2     SMTP               0                       epv.sopm.com            30                    60                Yes
3     HTTPS             8001                 epv.sopm.com            30                    180               Yes
This means that HTTP port is 8000,   HTTPS port is 8001. My question is why in SMTP its showing 0, why no port is shown?
I have not added any profile parameter like icm/server_port_2 = PROT=SMTP,PORT=25000,TIMEOUT=180     for SMTP in RZ10 as of now.
Is this the reason for this ?

How Lync desktop sharing works for internal users

Hi,
How Lync desktop sharing, Aplication sharing & A/v conferencing works Internally ?
is it uses Webconfrencing Edge server & A/V Conf Edge server for internal users also...
I have confusion on this please help me and guide me how to deploy internally.
does it works with edge server internally if yes how ?
Thanks !!!

No internal to internal conferencing, A\V and desktop share does not use the Edge Server. This is all handled by the Front End Server\s.
For assistance on deploying please refer to http://gallery.technet.microsoft.com/Lync-Server-2012-9d6fe954
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Lync Sorted blog

Endeca : multi invoice pay throwing correct error for internal user but it is failing to throw the same error for external user

Hi,
1) Internal User expected exception:
Exception: Payments,apply credits,disputes and print are not supported when multiple customer/currency transactions are selected
2) External User is throwing below error instead of throwing above exception.
Error
You are trying to access a page that is no longer active.
The referring page may have come from a previous session. Please select Home
to proceed.
found this MACCHECK from fnd logs of external user payment.
MACCHECK: . Parameter failing validation is :mode. The parameter mode with value MultiPay could not be recognized as part of Server's response on the previous request. Incoming URL is : /OA_HTML/OA.jsp?page=/oracle/apps/ar/irec/endeca/webui/EndecaDummyPG . Current URL is : /OA_HTML/OA.jsp?page=/oracle/apps/ar/irec/endeca/webui/OIREndecaCustHomePG&akRegionApplicationId=222&_ti=1125493452&oapc=10&retainAM=Y&addBreadCrumb=N&oas=6-LL4ndIUFLX-2zjQAQD6A.. . Referer URL is : https://<hostname>:4443/endeca/web/ar/customer?doAsUserLanguageId=en_US&languageId=en_US . HTTP Request Method is : POST
can someone please help.
Thanks,
RRS

Well, I compared my classpath between my windows batch file and the
makefile (that comes with the samples installation) on Solaris and realized
that I am using different sets of jars.
So, I removed the extra jars from the makefile to narrow down the
problem. If I remove the /opt/SUNWam/lib/servlet.jar from the makefile,
I can reproduce this problem on the Solaris box as well.
When I include this servlet.jar on my windows machine the program works!
Only jars I have in my classpath are amclientsdk.jar and servlet.jar which
I have copied from my installation (/opt/SUNWam/lib) on the Solaris box.
Just the same way, by copying the am_services.jar, saaj-api.jar, and jaxm-api.jar,
from the Solarix box to the windows machine,
I am also able to pull the assertions from the Access Manager.
I installed Sun Java Enterprise System 2005Q1 on a Solaris 10 machine.
During the installation, I configured to install the Access Manager
in Sun Application Server.
Why do I need to have different set of jars on the windows machine
for the Access Manager client SDK ?
Could you please point me to a download link where I could download
the correct Windows Access Manager Client SDK for
Sun Java System Access Manager 6.0 (Sun JES 2005Q1)?
Thanks.

BSP - UserId and Password for Internal Users - Anonymous for other users

Hello,
We developed an application via BSP's. This application can be accessed by two kind of users.
1. External Users, with should access the page without using a userId and password.
2. Internal Users, they will have more authorisation and need to specify their userId and Password.
How can we accomplish this? I tried internal aliases, but can't get it to work properly.
In the first service 'zbsp' I didn't specify a userId and password in sicf.
Then I created an internal alias 'zbsp' referring to this 'zbsp'. In this alias I specified a userId and Password, but the system still asks for a userId and Password. (and after logging in the system gives the following error: The application name in URL .../bc/bsp/sap/zbsp2/uat_report.htm is invalid.)
What did I do wrong? Or are there other ways to accomplish this?
Greetings,
Bart

Take a look at the following mesaages that discussed the whole SSO and SSO2 ticket logins.
As for a way to handle the two different login types. Well first and formost - active the SSO Tickets on your system. Set your BSP up for that.
Then create a new starting page with an alias to the pöublic section for BSP's in your system. On this page make two links.
For your external users - one that redirects to your BSP passing the user and password in the url for the "read only external user" - that's the sap-user=name here&sap-password=passwordhere.
For your internal people give them simply the link to the BSP which when they click it will see no user name and password and redirect them to the BSP login.
Make sure you setup the BSP login according to SAP note 517860 and follow the instructions from http://help.sap.com/saphelp_nw04/helpdata/en/1d/13c73cee4fb55be10000000a114084/frameset.htm using the supplied SYSTEM_PUBLIC)
It's a bit basic but it works, we do it
Oh and setting up the system for the SSO (transaction sso2) is very very simple!!

Delayed mail for internal user send a mail to gmail account

hi to every one,
Today we are facing an issue in exchange server 2010
Whenever internal user send a mail to some of gmail accounts user receives a mail from postmaster states that
This is an automatically generated Delivery Status Notification.
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipients has been delayed.
Action: delayed
Status: 4.4.7
Will-Retry-Until:
Regards
Kart26

Hi,
Did the issue occur when the specific user you mentioned above sent email to two gmail users at a time?
Is there any recipient limit for this specific user?
To narrow down the issue, I recommend you check the smtp log about this specific user for related messages.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

No principal configured for calendar user address

For several users on our server, free/busy info cannot be viewed. When a user goes to invite attendees to an event, and types in their email address, the following shows up in the log:
2009-08-06 16:06:29-0500 [-] [caldav-8009] [AMP,client] POST /calendars/_uids_/E0BAF924-0610-47F9-A3DE-DF0D8E4A54F6/outbox/ HTTP/1.1
2009-08-06 16:06:29-0500 [-] [caldav-8009] [-] "No principal for calendar user address: 'mailto:[email protected]'"
2009-08-06 16:06:29-0500 [-] [caldav-8009] [-] 'No schedulable principal for calendar user address: mailto:[email protected]'
2009-08-06 16:06:29-0500 [-] [caldav-8009] [-] 'Error during POST for mailto:[email protected]: None'
When I run *sudo kadmin.local -q list_principals* from the terminal I show the person's username listed in the results, however the output of this command is in the format [email protected] (in other words, the internal DNS hostname for the server), rather than [email protected] (the email address of the user).
Can anyone explain what I may be doing wrong here? I'm running OS X Server 10.5.7 with OpenDirectory and iCal services, and using Thunderbird 3.0b2 with Lightning 1.0pre plugin. I was able to see freebusy information until just recently, so I know it worked in the past, and nothing has changed on the client end, so something must have changed on the server.

I found the issue. The users that were having issues did not have an email address set up for them in the "Info" section for their user account in the Workgroup Manager.
It makes sense:
1) Calendar client submits query to iCal server for a particular email address.
2) That email address isn't found on anyone's account.
3) Since it can't be found, no freebusy information can be retrieved, and errors are thrown.

Information related to Outstanding Shopping carts for particular User

Hello All,
Is there any way(FM / table) by which we can get below info for any particular user:
1. All the SC he/she has raised
2. The outstanding SC's for particular user. (For eg: SC with amt 100, but only 70 has been confirmed)
Thanks,
Dhananjay

Hello All,
Even I am also looking for same kind of report. I have query to delete user, but before deleting user I want to confirm is there any open SC or Held SC.
Kinldy let me know.
Thanks in advance.
Regards
Sharan

AnyConnect for internal users

When configuring remote access VPN for user on our internal network, for example if we have a guest VLAN for vendors ON-SITE in which they will VPN to the ASA, is it better to have them connect through the internal interface or have go to the outside interface?
So i could resolve the vpn device in DNS as it's public IP.

To configure the vpn filter you would do something like the following:
access-list VPN-FILTER permit ip 192.168.1.0 255.255.255.0 host 10.1.1.10
access-list VPN-FILTER deny ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list VPN-FILTER permit ip any any
group-policy VPN internal
group-policy VPN attributes
vpn-filter value VPN-FILTER
Please remember to select a correct answer and rate helpful posts

Configuration for writing user exits

sir provide me the configuration of user exits,purpose how to write it
thank u

Hi Supraja,
User exits are the enhancements provided by SAP
you can use them in transactions. Each transaction will have user exits.
If you want to use your own requirements by making your coding while the transaction is run you can use user exits.
For example if you want to run the MRP in MD02 specific to MRP controller you can user exit.
Please also refer the document below.
USEREXIT
Userxits allow us to add our own functionality to SAP standard program
without modifying it. These are implemented in the form of subroutines and hence are also known as FORM EXITs. The userexits are generally collected in includes and attached to the standard program by the SAP.
All Userexits start with the word USEREXIT_...
FORM USEREXIT_..
z..
ENDFORM.
The problem lies in finding the correct userexit and how to find it if one exists for the purpose. Once the correct userexit is found the necessary customer code is inserted in the customer include starting with the z. in the form routine.
e.g. USEREXIT_SAVE_DOCUMENT_PREPARE
Certain application like SD still provide this form of enhancement using userexit but this practice is no longer being followed for newer extensions instead they are using EXITs which come bundled in enhancement packages . Nevertheless existing USEREXITS will be supported by SAP an all the newer versions of SAP.
HOW TO FIND USEREXITS
Userexits can be found in number of ways:
1) To find userexits in SD module , goto object navigator(SE80) and select
development class from the list and enter VMOD in it. All of the userexits in SD are contained in the development class VMOD. Press enter and you will find all the includes which contain userexits in SD for different functions like PRICING, ORDER PROCESSING etc. Select the userexit according to the requirement and read the comment inserted in it and start coding.
Some examples of userexits in SD (SALES & DISTRIBUTION) are:
1)ADDING OF NEW FIELDS IN PRICING
In Pricing in SD the fields on the basis of which pricing is done are derived from the FIELD CATALOG which is a structure KOMG .This structure is used to transfer transaction data to the pricing procedure in SD and is also known as communication structure. This structure KOMG consists of two tables KOMK for Header related fields and KOMP for item related fields. The fields which are not in either of the two tables KOMK and KOMP cannot be used in pricing .Sometimes a need arises when the pricing is to be based on some other criteria which is not present in the form of fields in either of the two tables. This problem can be solved by using USEREXITS which are provided for pricing in SD. Pricing takes place both when the SALES ORDER ( Transaction VA01) is created as well as when INVOICING ( Transaction VF01) is done. Hence SAP provides 2 userexits ,one for sales order processing which is
USEREXIT_PRICING_PREPARE_TKOMP or
USEREXIT_PRICING_PREPARE_TKOMK
Depending upon which table (KOMK or KOMP) the new fields were inserted we use either of the above two userexits.These userexits are found in include MV45AFZZ of the standard SAP sales order creation program SAPMV45A.
In the case of userexit which will be called when invoicing is done ,these
are provided in the include RY60AFZZ which is in the standard SAP program SAPMV45A. The name of the userexits are same. i.e.
USEREXIT_PRICING_PREPARE_TKOMP or
USEREXIT_PRICING_PREPARE_TKOMK
These userexits are used for passing the data from the communication structure to the pricing procedure, for this we have to fill the newly created field in the communication structure KOMG for this we fill the code in the above userexit using the MOVE statement after the data that has to be passed is taken from the database table by using the SELECT statement. The actual structure which is visible in these userexits and which is to be filled for that particular field is TKOMP or TKOMK.
Before the coding for these userexits is done ,it is necessary to create a new field in either of the two tables KOMK or KOMP .For this purpose includes are provided in each of them .
To create the field in header data (KOMK) the include provided is KOMKAZ
and to create the field in item data (KOMP) the include provided is KOMPAZ.
One possible example for the need of creating new fields can be e.g. Freight to be based upon transportation zone, for this no field is available in field catalog and hence it can be created in KOMK and then above userexits can be used to fill the transportation data to it.
2) The other method of finding userexit is to find the word USEREXIT in the
associated program of the transaction for which we want to determine userexit using SE38.
3) The other method of finding userexits is to find the include in case of SD/MM applications where the userexits are located, this can be found in the SAP reference IMG generally in the subfolder under SYSTEM MODIFICATION.
Some other examples of userexits in SD are:
USEREXIT_NUMBER_RANGE
This userexit is used to assign a different internal document number to the
sales order(VA01) when it is created depending on some criteria like a different SALES ORGANIZAION(VKORG) .
USEREXIT_SAVE_DOCUMENT_PREPARE
This userexit is used to insert the ABAP code which will be called when
the document (sales order VA01) is just about to be saved. This userexit is used generally for custom checks on different fields , to display some information before the order will be saved or for making changes to certain fields before the sales order will be saved.
Exits & Enhancements
There are mainly six types of EXITs in sap which have been collected in the form of enhancement packages and attached to standard code in SAP.
These are different from USEREXIT in the way that they are implemented
in the form of FUNCTIONs while in USEREXITS we use form routines for their implementation. These are also sometimes known as function exits.
These start from the word EXIT_ followed by the program name and then followed by a three digit number.
e.g. EXIT_SAPMV45A_002
This exit is found in SD in enhancement V45A0002.
TYPES OF EXITS
1) MENU EXITS
2) FUNCTION EXITS
3) TABLE EXITS
4) SCREEN EXITS
5) KEYWORD EXITS
6) FIELD EXITS
We use SAP transactions CMOD and SMOD to manage exits. Before implementing an exit, it is required to create the project by using CMOD
selecting the enhancement e.g. V45A0002 and selecting the component
(one which fulfills our need) i.e. the exit which will be implemented in SMOD and after coding has been done the project has to be activated.
An exit can be coded only once.
FUNCTION EXITS
These are used to add functionality through ABAP code. These start from the word EXIT_programname_NNN ending in a 3 digit number. No access code is required to implement any type of exit including function exits.
The function exits are called from the standard SAP program in the form
of ABAP statement
CALL CUSTOMER-FUNCTION 'NNN'
This is in contrast to USEREXITs where PERFORM statement is used to call
the required userexit.
To implement the FUNCTION EXITs first of all the project is created and a suitable enhancement package is selected and from its components the function exit to be implemented is selected and on double clicking it the exit code will appear in ABAP EDITOR(se38) where a Z include will be found and the customer code should be entered in this include.
e.g.
ADDING A DEFAULT SOLD-TO-PARTY in Sales Order Creation
To show a default sold-to-party in this field when the user creates a sales order (VA01) we can use a function exit .This function exit is located in enhancement no V45A0002 . Before we can choose the exit we have to create a project in CMOD after that enter V45A0002 in the enhancement field and click on the components. In the components you will see the exit EXIT_SAPMV45A_002. This exit is used for our purpose.
Double clicking on this exit will takes us to function builder (SE37) . This
function exit has one exporting parameters and two importing parameters, we are interested in exporting parameter which is E_KUNNR of type KNA1-KUNNR i.e. if we move the desired customer name to this structure(E_KUNNR) it will be shown in the field as the default value when we create the sales order. This function also contains a customer include ZXVVA04. This include will be used to write our custom code.
Double clicking on this include and it will prompt us that this include does not exists do you want to create this object, select yes and the include will be created .In this include we can write our own code that will fill the field E_KUNNR.
e.g. E_KUNNR = 301.
Activate the include and Activate the project. Now when ever the SALES ORDER will be created, sold-to-party field will come up with a predefined customer.
FIELD EXITS
The field exits are managed, created, activated through program RSMODPRF. The field exit is associated with a data element existing in ABAP dictionary and hence to the screen field using that data element.
The format of field exit is:
FIELD_EXIT_dataelement_A-Z or 0-9
If a particular screen and program name is not specified than the field exit will effect all the screens containing that data element.
The function module associated with field exit shows two parameters
INPUT and OUTPUT. Input parameter contains the data passed to the field exit when the field exit was invoked by the R/3, we can write our own code to change the output parameter depending upon our requirements.
Before the field exit can have any effect the system profile parameter
ABAP/FIELDEXIT in all the application servers should be set to YES
ABAP/FIELDEXIT = YES.
TYPES OF USER EXITS
User exits are basically 4 types,
1. Field exit,
2. Menu Exit,
3. Function module and
4. Screen exit.
These exits we can use according to a situation...
Please Reward If Really Helpful,
Thanks and Regards,
Sateesh.Kandula

ACE Load Balancing Configuration For NATed User Traffic

Hello,
I am currently working on a requirement where the shared application services will be hosted in DC and these services will be accessed by multiple (thousands) users from different corporates/customers. The user traffic will be hidden behind customer's proxy servers or firewalls so the load balancer (ACE modules) services hosted in DC will not be able to see requests coming in from induvidual users IP addresses.
In this scenario what are options of load balancing are available in Lyer3/4 and Layer7 ?
Thanks in advance for your help.
Sanjay

Hi Sanjay,
In a set up where all users are coming from behind a proxy, all users will be loadbalanced to same server thus overloading it. This is when you are doing standard L3/L4 LB.
In the situation of proxies, for HTTP applications you shall use L7 LB and use information(cookie) in HTTP client request or server response. The ace will use this information to stick the user to same server for persistence. If a client comes with no cookie it will be loadbalanced according to the predictor method configured. Below is the link for L7 configuration example and other TS steps you can take while configuring L7 policies on ACE. For more informatin i would suggest reading ACE user guide too.
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_-_Troubleshooting_Layer_7_Load_Balancing
If you have any questions please feel free to ask.
Regards,
Kanwal

VLAN Configuration for Internal and Guest Wireless

Hello,
We are using the following hardware…
SG300-52MP switch -- latest firmware
ASA 5512-X firewall -- 9.1
Aironet AP1131AG WAP
We have the following networks…
10.252.4.0/24 = Internal = ASA-01 interface = VLAN1
10.252.6.0/24 = Guest = ASA-02 interface = VLAN6
10.252.6.0/24 = VOIP = ASA-03 interface = VLAN3
The Aironet supports two SSIDs, Secure (RADIUS) and Guest (WPA2), which are supposed to provide access to the appropriate interface on the ASA.
Relevant parts of the WAP configuration are…
dot11 ssid GUEST
vlan 6
dot11 ssid SECURE
vlan 1
interface Dot11Radio0
no ip address
ssid GUEST
ssid SECURE
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
interface Dot11Radio0.6
encapsulation dot1Q 6
no ip route-cache
bridge-group 255
interface Dot11Radio1
no ip address
no ip route-cache
ssid GUEST
ssid SECURE
interface Dot11Radio1.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
interface Dot11Radio1.6
encapsulation dot1Q 6
no ip route-cache
bridge-group 255
interface FastEthernet0
no ip address
no ip route-cache
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
interface FastEthernet0.6
encapsulation dot1Q 6
no ip route-cache
bridge-group 255
interface BVI1
ip address 10.252.4.4 255.255.255.0
no ip route-cache
ip default-gateway 10.252.4.1
We can manage the WAP through it’s Internal IP address (10.252.4.4).
And the “Guest” wireless network is working -- connecting to that SSID provides the client with the correct IP addressing (10.242.6.X from VLAN6/ASA-02). [Note: the VOIP DHCP and network access also works correctly.]
The “Secure” wireless network is not working however -- the client never receives an Internal DHCP address from ASA-01, and even if you hard-code the client’s IP, no IP4 traffic ever passes.
[Note: connecting a device to a SG300 port with the “Default” configuration provides the client with an Internal DHCP configuration, and it works as intended.]
While this may be a problem with the WAP configuration, I would like to confirm that it is not an issue with the switch not passing traffic correctly.
I have a feeling that I have configured the VLANs on the ports incorrectly.
Relevant parts of the SG300 configuration are...
v1.3.0.62 / R750_NIK_1_3_647_260
vlan database
vlan 3,6
ip dhcp snooping
ip dhcp relay address 10.252.4.1
ip dhcp relay enable
bonjour interface range vlan 1
interface vlan 1
ip address 10.252.4.2 255.255.255.0
no ip address dhcp
interface vlan 3
name VOIP
interface vlan 6
name Guest
interface gigabitethernet45 -- Access mode, Untagged VLAN6
description ASA-Guest
ip dhcp snooping trust
switchport mode access
switchport access vlan 6
interface gigabitethernet46 -- Access mode, Untagged VLAN3
description ASA-VOIP
ip dhcp snooping trust
switchport mode access
switchport access vlan 3
interface gigabitethernet47 -- Trunk mode, Untagged VLAN1 and Tagged VLAN6
description WAP1
switchport trunk allowed vlan add 6
interface gigabitethernet48 -- Trunk mode
description ASA-Internal
ip dhcp snooping trust
ip dhcp relay enable
Can someone who understands this switch better than I do please confirm the VLAN configuration? THANK YOU!

Welcome to the discussion area!
+PCI regulations do not consider VLAN a secure way of keeping the data isolated. Does anyone have any technical information on how the device creates the guest wireless network ?+
I spoke to Apple Support some time ago and was told that Apple uses VLAN to create the Guest network, and also that formal documentation was not available on this topic. I was referred to the AirPort Extreme Specifications for available information.
This was some time ago, so if you need more up to date info, you might want to try to contact Apple to see if they are willing to share more information about this feature. Although, since VLAN is used, your question may already be answered.
FWIW, to use the Guest Network feature in a home situation, the AirPort Extreme must be set up as the main router controlling DHCP and NAT on the network. If you were thinking of installing the AirPort Extreme behind another router, the Guest Network feature would not be available in this type of configuration.

Shop configuration for internal users

Similar Messages

Maybe you are looking for