k*n
2 楼
【 以下文字转载自 HiFi 讨论区 】
发信人: karajan (光与影), 信区: HiFi
标 题: 摄影器材与作品版赈灾义卖
发信站: BBS 未名空间站 (Fri May 23 10:17:56 2008), 转信
摄影器材与作品版赈灾义卖
本次义卖活动由MITBBS摄影器材版与摄影作品版自发组织,所有作品以及后期剪辑包装
全部来自网友作品以及他们的义务劳
动。所有酬得款项在扣除少量原材料成本之后,将通过海外救助儿童基金会OSCCF及中国
红十字会全部捐献给四川灾区人民,
为他们重建家园尽绵薄之力。
鉴于经费来自于网友们自己,所以我们不能储备大量现货和样品。因此,所有购买目前
只接受订购。我们不是职业摄影师,我
们完全无偿服务。请相信我们的真诚,请让我们的作品,连接您的爱心,飘扬过海传达
给祖国的受灾人民!
地震带来的创伤,让我们用爱心,勇气和信心抚平!
购买指南:
义卖照片网站介绍:
http://www.pbase.com/wenchuan0512/root
样品图片
http://www.pbase.com/wenchuan0512/print
购买方法
http:
发信人: karajan (光与影), 信区: HiFi
标 题: 摄影器材与作品版赈灾义卖
发信站: BBS 未名空间站 (Fri May 23 10:17:56 2008), 转信
摄影器材与作品版赈灾义卖
本次义卖活动由MITBBS摄影器材版与摄影作品版自发组织,所有作品以及后期剪辑包装
全部来自网友作品以及他们的义务劳
动。所有酬得款项在扣除少量原材料成本之后,将通过海外救助儿童基金会OSCCF及中国
红十字会全部捐献给四川灾区人民,
为他们重建家园尽绵薄之力。
鉴于经费来自于网友们自己,所以我们不能储备大量现货和样品。因此,所有购买目前
只接受订购。我们不是职业摄影师,我
们完全无偿服务。请相信我们的真诚,请让我们的作品,连接您的爱心,飘扬过海传达
给祖国的受灾人民!
地震带来的创伤,让我们用爱心,勇气和信心抚平!
购买指南:
义卖照片网站介绍:
http://www.pbase.com/wenchuan0512/root
样品图片
http://www.pbase.com/wenchuan0512/print
购买方法
http:
g*s
3 楼
我的网站
http://www.beamshaping.co.uk
在我自己办公室用www.google.co.uk搜索beam shaping,排第一。用学校图书馆的电脑
,就变成排第十了。
用办公室电脑搜diffractive optics,排第88,用学校图书馆的电脑搜,排第98。
太奇怪了。
http://www.beamshaping.co.uk
在我自己办公室用www.google.co.uk搜索beam shaping,排第一。用学校图书馆的电脑
,就变成排第十了。
用办公室电脑搜diffractive optics,排第88,用学校图书馆的电脑搜,排第98。
太奇怪了。
x*n
4 楼
客户说VPN tunnel 上不了,ping xxxx source xxxx,不work。
然后我看router,发现2个tunnel,其中一个move掉了,第二个其实是work的。结果把
第一个crypto remove,问题就解决了。
但是我不明白,为啥多一个crypto就有问题呢?router不是像ACL一样,找一个,找不
到再往下找的么?
crypto map vpnmap 6 ipsec-isakmp
description To_Providence_new
set peer WAN IP 1
set transform-set vpnset
match address To_Providence
crypto map vpnmap 7 ipsec-isakmp
description To_Providence_new
set peer WAN IP 2
set transform-set vpnset
match address To_Providence
然后我看router,发现2个tunnel,其中一个move掉了,第二个其实是work的。结果把
第一个crypto remove,问题就解决了。
但是我不明白,为啥多一个crypto就有问题呢?router不是像ACL一样,找一个,找不
到再往下找的么?
crypto map vpnmap 6 ipsec-isakmp
description To_Providence_new
set peer WAN IP 1
set transform-set vpnset
match address To_Providence
crypto map vpnmap 7 ipsec-isakmp
description To_Providence_new
set peer WAN IP 2
set transform-set vpnset
match address To_Providence
d*n
5 楼
【 以下文字转载自 shopping 讨论区 】
发信人: dreamsun (梦阳), 信区: shopping
标 题: 如何设定Deal的RSS提示?
发信站: BBS 未名空间站 (Sun Nov 30 10:33:34 2008), 站内
有没有什么小软件或者firefox的addon可以订阅RSS,像slickdeals的rss,然后关键是
能够在新的entry来的时候能设置它自动弹出提示。有没有这样的软件?thanks
发信人: dreamsun (梦阳), 信区: shopping
标 题: 如何设定Deal的RSS提示?
发信站: BBS 未名空间站 (Sun Nov 30 10:33:34 2008), 站内
有没有什么小软件或者firefox的addon可以订阅RSS,像slickdeals的rss,然后关键是
能够在新的entry来的时候能设置它自动弹出提示。有没有这样的软件?thanks
w*g
7 楼
google储存有你的浏览/search记录,你常去的网站排名靠前。
我自己的网站,用很热门的关键字搜索,每次都排第一页。当时激动了5分钟。但用Lib
的电脑,在第11页。
我自己的网站,用很热门的关键字搜索,每次都排第一页。当时激动了5分钟。但用Lib
的电脑,在第11页。
s*g
8 楼
Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
not expire yet (no DPD configured?), so traffic is being sent to that IPsec
SA and got black holed.
There are many gotta's in redundant IPsec GW design especially in the hub
site, you should troubleshoot to see why IPsec SA with the first peer failed
, removing the first peer will temporarily resolve your problem, but you are
losing redundancy, which is against the original design goal.
【在 x*********n 的大作中提到】
: 客户说VPN tunnel 上不了,ping xxxx source xxxx,不work。
: 然后我看router,发现2个tunnel,其中一个move掉了,第二个其实是work的。结果把
: 第一个crypto remove,问题就解决了。
: 但是我不明白,为啥多一个crypto就有问题呢?router不是像ACL一样,找一个,找不
: 到再往下找的么?
: crypto map vpnmap 6 ipsec-isakmp
: description To_Providence_new
: set peer WAN IP 1
: set transform-set vpnset
: match address To_Providence
not expire yet (no DPD configured?), so traffic is being sent to that IPsec
SA and got black holed.
There are many gotta's in redundant IPsec GW design especially in the hub
site, you should troubleshoot to see why IPsec SA with the first peer failed
, removing the first peer will temporarily resolve your problem, but you are
losing redundancy, which is against the original design goal.
【在 x*********n 的大作中提到】
: 客户说VPN tunnel 上不了,ping xxxx source xxxx,不work。
: 然后我看router,发现2个tunnel,其中一个move掉了,第二个其实是work的。结果把
: 第一个crypto remove,问题就解决了。
: 但是我不明白,为啥多一个crypto就有问题呢?router不是像ACL一样,找一个,找不
: 到再往下找的么?
: crypto map vpnmap 6 ipsec-isakmp
: description To_Providence_new
: set peer WAN IP 1
: set transform-set vpnset
: match address To_Providence
x*n
11 楼
哦。。解释的好牛啊,我看其他site都是一条tunnel的,好像没有redundancy。
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
he
13 楼
多面手三王V5!
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
m*t
15 楼
IPsec itself does not provide redundancy, what level redundancy you refer to
?
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
?
IPsec
failed
are
【在 s*****g 的大作中提到】
: Mostly the first IKE SA is up, and IPsec SA of first peer's life time did
: not expire yet (no DPD configured?), so traffic is being sent to that IPsec
: SA and got black holed.
: There are many gotta's in redundant IPsec GW design especially in the hub
: site, you should troubleshoot to see why IPsec SA with the first peer failed
: , removing the first peer will temporarily resolve your problem, but you are
: losing redundancy, which is against the original design goal.
n*2
17 楼
i think 5 lou is correct, you need special hardware to do the redundancy.
s*g
19 楼
Redundant IPSec gateway for the same peer, look at LZ's post. The
configuration can be as simple as configuring two IKE peers on spoke to
protect the same pairs of "interesting" traffic, on the hub side use SSO/
HSRP to achieve stateful IPsec fail-over.
to
【在 m**t 的大作中提到】
: IPsec itself does not provide redundancy, what level redundancy you refer to
: ?
:
: IPsec
: failed
: are
configuration can be as simple as configuring two IKE peers on spoke to
protect the same pairs of "interesting" traffic, on the hub side use SSO/
HSRP to achieve stateful IPsec fail-over.
to
【在 m**t 的大作中提到】
: IPsec itself does not provide redundancy, what level redundancy you refer to
: ?
:
: IPsec
: failed
: are
S*I
20 楼
听说都是胡说;自己看:
http://travel.state.gov/visa/temp/types/types_1268.html
【在 c********n 的大作中提到】
: 我以前听说的恰恰和你的说的相反,555
http://travel.state.gov/visa/temp/types/types_1268.html
【在 c********n 的大作中提到】
: 我以前听说的恰恰和你的说的相反,555
m*t
21 楼
如果是IKEv1, IPsec 的 peers IP/GateWay IP 不可变化,否则需要新的TUNNEL. 你说
的这个, 可能有有几种scenarios, 因为对CISCO 的CLI 没什么感觉,所以不确定
1. SPOKE端是两个GATEWAY IPs, 跟DPD 一起用, IP1 fail 后,使用IP2 做IKE重新建
立TUNNEL。
2. 如果是IKEv2, 或者是好像思科搞过一个过渡的东西, 可以不需要新的IKE,制作
个SA_UPDATE 更新GATEWAY IP。 这种算是STATEFUL 的
3. 条件允许,两端应该都可以做HRSP/SSO 把IP take over,在做个SA backup 就好了
【在 s*****g 的大作中提到】
: Redundant IPSec gateway for the same peer, look at LZ's post. The
: configuration can be as simple as configuring two IKE peers on spoke to
: protect the same pairs of "interesting" traffic, on the hub side use SSO/
: HSRP to achieve stateful IPsec fail-over.
:
: to
的这个, 可能有有几种scenarios, 因为对CISCO 的CLI 没什么感觉,所以不确定
1. SPOKE端是两个GATEWAY IPs, 跟DPD 一起用, IP1 fail 后,使用IP2 做IKE重新建
立TUNNEL。
2. 如果是IKEv2, 或者是好像思科搞过一个过渡的东西, 可以不需要新的IKE,制作
个SA_UPDATE 更新GATEWAY IP。 这种算是STATEFUL 的
3. 条件允许,两端应该都可以做HRSP/SSO 把IP take over,在做个SA backup 就好了
【在 s*****g 的大作中提到】
: Redundant IPSec gateway for the same peer, look at LZ's post. The
: configuration can be as simple as configuring two IKE peers on spoke to
: protect the same pairs of "interesting" traffic, on the hub side use SSO/
: HSRP to achieve stateful IPsec fail-over.
:
: to
相关阅读
哪种IP配置比较好?推荐一款杀毒软件请教windows 7 安装问个office word的问题?【求助】Win7下看在线视频画面模糊firefox不能输入中文了,打的字都是0123456789大家都用什么软件编辑pdf文件?Synaptics Pointing Device Driver Uninstallation推荐几个最近用过的免费软件lenovo yoga系统升级 8.0 to 8.1没了网络芝加哥Trading frim招:Quantitative DeveloperChrome 打开网页速度慢本人回国发展,甩卖全部家当、家具、家电什么都有哦~~~~全部低价哦360网盘马上就关闭了,有文件的赶紧转移啊Winzip有破解版么?求推荐硬盘BACKUP 软件本人回国发展,甩卖全部家当、家具、家电什么都有哦~~~~全部低价哦如何搞到一个ZIPCODE的所有姓名住址呢 (转载)有什么好的快速应用开发软件(RAD) 推荐?居然没有人讨论CSDN