SRP547W Multiple IPSec policies through single IKE policy

I am trying to create a VPN between an SRP547W and a Cisco IOS router, in this case a UC540.I am running firmware 1.2.4 (003) Jan 11 2012
Now I can do this with an SRP527W and many other routers successfully. Including other IOS routers 1801, 1941 etc.
The issue I have is on the SRP547W I cannot create more than one IPSec Policy through a single IKE policy. I require this to route multiple vlans to our remote site.
When I try to add an additional IPSec Policy I am give the error "IKE policy has been used by other IPSec policy"
This is possible to do on the SRP527W with latest firmware. I have tried rolling back to earlier firmware but instead I am given an error about overlap.
Latest release note for this firmware suggest this issue was already resolved.
Any help much appreciated.

Hello Matthew,
Sorry to hear you are having difficulty.
I was able to test this on firmware 1.02.01 and get the overlap error that you mention. I resolved it by choosing "IP address & subnet mask" in the local selection field. When I used "IP Address" I received the same error unless I changed the IP address to something (other that the one used in the first policy) under the local traffic selection then it allowed a succesful submission. The remote traffic selector or ip address doesn't not have any bearing on the error.
Are you using the same local IP address for each IPSec policy and if you are, try changing the local IP selector to IP+Subnet mask. Also as a reminder, the number of IPSec policies is based on bandwidth limitations and most often no more that 2 site-to-site tunnels can connect at a single time.
Please let me know if this helps.
Best regards,
Wesley S.
Cisco SBSC

Similar Messages

  • Multiple account payment through single Suppliers

    Hi All,
    Here is a trichy situation in Payable:
    1)Every month payment made towards mobile bill telephone operator for various mobile bills used for official purpose.e.g. payment made to AIRTEL for 10 mobile numbers.
    2)Each individual number has limit and if the bill for the number exceeds limit then the excess amount debited to the concerned employee.
    Requirement:
    1)To track all the individual numbers and their amounts paid through Airtel.
    2)How to deduct from employee for the excess amount from their salary.
    Is there any workaround available for this?Customer wish not to show any credit entry in expenses account.
    Thanks
    JPP

    Hi and welcome to the Skype Community,
    It sounds like you fell for a fake PayPal order confirmation email. Please check your purchase history on Skype which can help you verify if what claims to be a PayPal order confirmation for a Skype order is actually valid. Also it's best to not follow links from within such emails. Instead type in www.paypal.com into your browser's address bar manually and verify the claim there.
    Follow the latest Skype Community News
    ↓ Did my reply answer your question? Accept it as a solution to help others, Thanks. ↓

  • 802.1x auth via ACS through unknown user policy - multiple directories?

    A customer has an LDAP directory as well as a Novell NDS directory.
    MAC clients authenticate to IPlanet LDAP.
    Windows users authenticate to Novell NDS.
    Is there any way to use multiple SSIDs and the unknown user policy to authenticate users against their appropriate directories?
    Thanks,
    Tim

    Actually, you can. You can manually add users to the ACS database and specify which external database to use. Take a look at the URL below. It is on adding users to the ACS database using the CSUtil.exe program on the ACS server. The import file that is read allows you to specify which external database type to query for the users authentication.
    http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/ae.htm#wp365101
    Steve

  • Is there any other way to achieve per user call forward restriction other than to create multiple voice policies?

    Hello,
    We mentioned the environment details below:
    Environment
    In our PBX environment, currently a user can forward calls to any local (within a region) internal extension. But for external PSTN call forwarding, a user needs to send a request and be approved by their manager. And the forwarding restriction
    is applied such that user is only allowed to forward to that particular PSTN number - to prevent toll fraud.
    Moving forward to Lync, using voice policy's call forwarding and simultaneous ring PSTN usages, I can set it to allow forward and simultaneous ring to custom PSTN usage and a custom route that will only send calls to these pre-approved
    external numbers.
    Outcome
    But in such a scenario,
     sSince all the custom external allowed numbers will have to be put into a single Route match table, User A will be able to successfully
    set up call forward to User B's number. (if they come to know about it somehow, that is)
    rü 
    Route matching list will be very long due to the number of users per hubsite that has call forwarding enabled.
    Questions
    Is there any other way to achieve per user call forward restriction other than to create multiple voice policies ? MSPL may be ?  
    2. Is there a limit in the number of entries you can have on the Route pattern matching regex expression ?
    Please advise. MANY THANKS.

    1) I think multiple policies may be your best bet, though it's not a fun one to manage, I agree.  MSPL could do it, but it would be more complex to maintain in the end.  Even gateways have limitations on routes.
    2) I'm not aware of a limit, though I'm not saying there's isn't one.  But if you hit it, you could move to a second usage/route combo.
    I'd suggest building out some PowerShell usage/route creation/organization script for this so it's not something that would need to be maintained within the GUI.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications
    This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Security exception when provisioning using multiple access policies

    We have upgraded our eDirectory connector to version 9.0.4.12. When provisoning manually all process tasks work correctly. However, when provisioning through an access policy or multiple access policies, once the edirectory Create User task runs it creates a security exception and all other connectors fail to provision until retried. We have set the system config parameter of Access Policy Multiple Resource Enhancement to TRUE and we have set the account discirminator in the process form to Server. Why would it fail?

    I have the same problem. Have you solved your problem, if so please let me know what the solution is.
    Einar �rn

  • Multiple values in a single cell in report !!

    Hello,
    I want to display multiple values in a single cell, each value separated by comma.
    Ex: I have Employee and Department.
    If a employee works for many departments, all the Department names should be displayed in the same cell in the report.
    Please help !

    Thanks for your replies !
    Is there any other way to achieve this ?
    There is 1 InfoObject which has 2 fields Employee and Department.
    Employee     Department
    001                A
    001                B
    001                C
    In the report there should be 1 row for Employee 001 with all the Departments displayed in the same cell separated by commas.
    Can this be done in the backend through a ABAP code?

  • Error while executing Multiple Stored Procedure through .sql file

    Hi Guru's.
    I am new to ORACLE. I am facing problem while creating Stored Procedure through .sql file.
    I have one test.sql file with Stored Procedure is like,
    CREATE OR REPLACE PROCEDURE skeleton1
    AS
    BEGIN
         DBMS_Output.Put_Line('skeleton1');
    END skeleton1;
    CREATE OR REPLACE PROCEDURE skeleton2
    AS
    BEGIN
         DBMS_Output.Put_Line('skeleton2');
    END skeleton2;
    Now when i try to execute this test.sql file through SQL PLUS it gives me Error like this
    I am opening test.sql file from SQL PLUS,
    SQL>
    1 CREATE OR REPLACE PROCEDURE skeleton1
    2 AS
    3 BEGIN
    4 DBMS_Output.Put_Line('skeleton1');
    5 END skeleton1;
    6 /
    7 CREATE OR REPLACE PROCEDURE skeleton2
    8 AS
    9 BEGIN
    10 DBMS_Output.Put_Line('skeleton2');
    11* END skeleton2;
    SQL> /
    Warning: Procedure created with compilation errors.
    SQL> show errors;
    Errors for PROCEDURE SKELETON1:
    LINE/COL ERROR
    6/1 PLS-00103: Encountered the symbol "/"
    SQL>
    Please suggest how to create multiple CREATE PROCEDURE using single .sql script file....
    Regards,
    Shatrughan

    Hi,
    Try this
    CREATE OR REPLACE PROCEDURE skeleton1
    AS
    BEGIN
    DBMS_Output.Put_Line('skeleton1');
    END ;
    CREATE OR REPLACE PROCEDURE skeleton2
    AS
    BEGIN
    DBMS_Output.Put_Line('skeleton2');
    END;
    /Save the file and call it.
    Regards,
    Bhushan

  • Is it possible multiple line items debit & single line item credit and different cost centers and different profit centers in fbcj

    Hi all ,
    I have a requirement to Post Cash Journal Document using FBCJ tcode.
    Is it possible multiple line items debit & single line item credit and different cost centers and different profit centers
    for exp:
    pk   GL a/c   description       amount   cost center  profit center
    40  400101  telephone exp   500        1403            P 1000
    40  400101  telephone exp    100       1404            P 2000
    50  200100  cash in hand      600-                             
       This is My requirement  is it possible in fbcj
        Please suggest me.ASAP.
    Regards
       Naresh.

    Hi,
      This you can do it in two ways:
    1. Make three header under top level....one Product A, 2nd Product B ( as Billing element) and third as Common expense ( only cost). Now 1st & 2 nd WBS, you have to have sales order linking with individual lint item, for third you will accumulate all the common expense till the period end then make a reposting of the same in desired proportion to both products WBS hierarchy
    (This is if you want to have a track on the common expense as well.......like planning, budgeting & control)
    After this reposting, run RA for individual billing element and hence you will all the complement detailing and control over Revenue and expense with respect to Product A and Product B individually.
    2. If you don't want to maintain that kind of detailing the common expense and keep track of it through project, then have cost centers accordingly and make an assesment/ distribution with respect to expenses accumulated at those cost centers for the period to the respective WBS under each product. Then execute the period end processes for the project.
    Or
    You can try with have two more line items in the costing sheet as an overhead against common expenses with respect each product.
    I hope this should help you.
    Regards
    Avisek Bhardwaj

  • Merge multiple pdf files into single pdf

    How to merge multiple pdf files into single pdf file through any programmatic languages? Kindly share with me.
    Thanks

    Easy PDF
    http://www.macupdate.com/app/mac/38090/easy-pdf
    How To: Combine multiple PDFs in Preview
    http://macenstein.com/default/2011/12/how-to-combine-multiple-pdfs-in-preview/
    How to merge pdf files in OSX
    http://macintoshhowto.com/leopard/how-to-merge-pdf-files-with-preview-in-leopard .html
    How to Combine Multiple PDFs Using Preview
    http://www.macobserver.com/tmo/article/how_to_combine_multiple_pdfs_using_previe w/

  • Multiple Access Policies

    I have the WRT54G2 and am trying to set up multiple access policies but am having trouble. Basically I want to restrict my kids devices from access at night during the week and allow access later during the weekends.
    I have the policies set up as:
    Policy 1: Su, M, Tu, W, Th allow 7am to 10:30pm (2 MAC addresses)
    Policy 2: Fri, Sat allow 24 hours (same 2 MAC addresses)
    The first policy works just fine, stopping access at 10:30. However, access is denied on Friday and Saturday, the second policy never seeming to kick in.
    I've tried multiple configurations to no effect. For example, adding Friday and Saturday to the first policy (which allows access until 10:30 of course). I also tried having the second policy start at 10:30pm (and earlier) and ending just before midnight.
    What am I doing wrong here?
    Thanks.

    Try to design your policies as 'deny' the timeslots you want your kids not to be allowed access

  • Considerations for an IPSEC tunnel through another IPSEC tunnel

    Hi,
    I am trying to ipmlement a IPSEC "tunnel through a tunnel" as follows:
    ASA-1 ( inside network 10.10.10.0 /24 - outside network 1.1.1.1/30) to ASA-2 (outside network 1.1.1.2/30 - inside network 20.20.20.0/24)
    This tunnel is fully functional.
    Created a DMZ interface (2.2.2.1/30) on ASA-1
    Created a DMZ interface (2.2.2.2/30) on ASA-2
    Attached ASA-A outside interface to ASA-1 DMZ interface - inside network 30.30.30.0/24
    Attached ASA-B outside interface to ASA-2 DMX interface - inside network 40.40.40.0/24
    Created an ACL on ASA-1 and ASA-2 DMZ interfaces allowing ESP,IKE traffic
    2nd tunnel not working!
    Questions
    Should I add the DMZ /30's to the crypto map of ASA-1 and ASA-2 (I did, and it did still not work)
    Should there be a route statement for the /30's on ASA-1 and ASA-2, or should the default GW be sufficient?
    Any and all help will be appreciated!
    Dave

    post config for review

  • Belong to Multiple Access Policies

    Hello,
    I am curious about everyone else's experience with access policies being maintained by groups, and some users belonging to multiple groups and multiple access policies. Example:
    John Doe belongs to group1 and group2
    Order
    1
    AccessPolicyA
           Selected groups: group1
           Blocks access to URL xyz.com
    2
    AccessPolicyB
           Selected groups: group2
           Allows access to URL xyz.com
    Will the WSA check all access policies that John Doe authenticates to? Or will it stop and use the first access policy that he hits, in this example AccessPolicyA?

    It is a bit of a hassle, but we had to reorder our access policies thinking in a top down approach as well.
    Also you can create AD global security groups specifically for Internet access if you'd like.  Prefix it with something that makes sense so they are all together in AD.  We use IG-  (IG stands for Internet Group).  So we have AD groups called IG-RestrictedInternet or IG-SocialMedia.
    If your in Restricted intenret, your totally restricted  except for a few sites we allow.  If your not in a group you have general internet access except for time wasting stuff like facebook.  If your in IG-SocialMedia then you have all the general internet access PLUS social media like facebook, linkedin, etc...  This is usually given to marketing or HR people.
    So while annoying, there are ways to think about how to handle this.  I can see your point say you are a Manager of the marketing department. Well you might be in an AD group for marketing as well as an AD group for management.  In this case our Management policy would come above the marketing policy.  So if your not doing specific groups then you can just order them by employee position hierarchy with usually management / hr on top.

  • Can there be multiple ASM instances on single node?

    Hi,
    Can there be multiple ASM instances on single node?
    This one says No : http://www.freelists.org/archives/oracle-l/02-2008/msg00317.html
    And This one says Yes : http://www.databasejournal.com/features/oracle/article.php/3571371
    Thanks in advance.
    Thanks,
    Harsha
    Edited by: user498756 on Sep 11, 2008 2:23 AM

    ...that document doesnt say you cannot have multiple ASM instances on a node. It says "...ASM, +you only need one ASM+ instance for that computer, to manage the two database instances that use ASM."
    The fact that you only need one - and I cannot think of a good reason to have more than one - does not preclude the fact that you do seem to be able to have multiple ASM instances on a single node, each looking after its own set of disks and diskgroups.
    Again - I cannot think of a good reason to do so though!
    -Bob

  • How To Concatenate Column Values from Multiple Rows into a Single Column?

    How do I create a SQL query that will concatenate column values from multiple rows into a single column?
    Last First Code
    Lesand Danny 1
    Lesand Danny 2
    Lesand Danny 3
    Benedi Eric 7
    Benedi Eric 14
    Result should look like:
    Last First Codes
    Lesand Danny 1,2,3
    Benedi Eric 7,14
    Thanks,
    David Johnson

    Starting with Oracle 9i
    select last, first, substr(max(sys_connect_by_path(code,',')),2) codes
    from
    (select last, first, code, row_number() over(partition by last, first order by code) rn
    from a)
    connect by last = prior last and first = prior first and prior rn = rn -1
    start with rn = 1
    group by last, first
    LAST       FIRST      CODES                                                                                                                                                                                                  
    Lesand         Danny          1,2,3
    Benedi         Eric           7,14Regards
    Dmytro

  • Selecting data from Multiple Partitions in a single select stmt.

    Hi all,
    My Database is very large & my tables are partitioned.
    My question is:
    1) If my data is spread across multiple partitions, is there any way to select data from multiple partitions in a single query?
    If we dont mention partition name also it works fine, but perofmance wise it will be very slow. (Using EXPLAIN PLAN)
    (Note:I dont want to make use of Union concept, i want to do it in a single select statement)
    For ex:
    qry1.sql:
    select empno from emp_trans partition (P012000)
    This above query(qry1.sql) will work fine.
    qry2.sql:
    select empno from emp_trans partition (P012000,P022000)
    The above query(qry2.sql) will return will return the following error:
    ORA-00933: SQL command not properly ended
    If anybody has any solution for this, pls mail me immediately.
    Thanks in advance
    bye
    null

    All my queries are dynamically generated. All my tables are also indexed partition wise based on date field. My question is, if i want to mention multiple partition names at the time of generating my query(select), then with parformance will be good. I have refered some books, inthat what they say is to use UNION concept, i dont want to use that, instead i want in a single select statement.
    Thaks for ur reply
    Bye
    null

Maybe you are looking for