802.1x and Remote Agent

AD 2000 Domain, ACS appliance (running 3.3.1), remote agent on the Certificate authority. setup PEAP per instructions.
When i try to login with a user on a desktop, it errors out. This is the error message i see in the RemoteAgent logs
CSWinAgent 02/03/2005 17:13:56 A 0048 0604 NTLIB: Attempting Windows authentication for user RFI5771
CSWinAgent 02/03/2005 17:13:56 A 0048 0604 NTLIB: Windows authentication SUCCESSFUL (by DC1)
CSWinAgent 02/03/2005 17:13:56 A 0048 0604 NTLIB: Obtaining RAS information for user RFI5771 from DC1
CSWinAgent 02/03/2005 17:13:56 A 0048 0604 NTLIB: NetUserGetLocalGroups failed with result [5]
CSWinAgent 02/03/2005 17:13:56 A 0048 0604 NTLIB: nt_GetUsersNTGroups failed
Its funny. With my ID, everything works (dot1x gets authenticated, dynamically assigned VLAN, properly authenticated.
But I can't get it to work with any other user. Thinking that there was a rights issue Service account, i tested with a Domain admin account. No avail.
Any thoughts? I tested this whole setup in a lab with ACS for windows and it works like a charm. Getting it to work with the appliance has been a bit challenging.

Hi,
Did you ever get to the bottom of this issue. I have the same issue with ACS 3.3.3 for windows. I have not seen this issue on any other ACS Win / Appliance installs.
Thanks in advance
Allan

Similar Messages

ACS appliance and remote agent testing

Having problems with integrating ACS appliance with Active Directory. Have installed the remote agent on a member server and from the ACS appliance can enumerate the Active Directory groups correctly so there is at least some communication happening.
Looking at the remote agent logs whenever a request for the AD groups comes through you see corresponding log entrys. When a user tries to authenticate though there are no logs coming through to the remote agent. So maybe it is not being sent to remote agent?
In the failed authentications log on the ACS the error is unknown user, it does show the correct username + domain as the person trying to authenticate.
The Windows server is setup for unknown user policy.
ACS version is 4.1.1.23, Remote Agent is latest version available.
Any ideas or things to check?

Hi,
As per your last line, It seems that ACS and RA ver are not same. Please note that ACS appliance and RA software ver has to be same else it won't work.
Regards,
~JG

WDS networking issue - Airport Extreme (802.11n) and remote Airport Express

*Background Info:*
Airport Extreme 802.11n (Fast Ethernet)
Version: 7.2.1
Wireless Mode: Participate in a WDS network (set as main)
Network Name: @Home
Wireless Security: WPA/WPA2 Personal
Channel: 1
Airport Express
Version: 6.3
Wireless Mode: Participate in a WDS network (set as remote)
Network Name: @Home
Wireless Security: WPA/WPA2 Personal
Channel: 1
Radio Mode: 802.11b/g compatible
Connect Using: AirPort (WDS)
Connection Sharing: Off (Bridge Mode)
Issue
Please help as I'm having issues with my WDS network. I've setup using both the wizard and manual and also hard reset on both units to setup again but cannot get them both to communicate to one another. Both units are showing green LED under their configuration. For my last attempt, I've tried adding the Airport ID (MAC) of the Airport Express to the Access Control and also DHCP Reservations on the Airport Extreme but still no luck.
The Airport Express (setup as remote) does not even show up in the Airport Extreme's Summary as Wireless Clients. In the WDS tab, the Airport Extreme is set up as WDS main, Allow wireless clients box checked and WDS Remotes has the Airport Express' AirPort ID in the list. On the Airport Express, WDS is set up as remote, with Allow wireless client box checked and the Airport ID of the Airport Express in the WDS Main.
I can connect clients to both units. Both units are configured using the same Network Name and have the same WPA/WPA2 security key. The Airport Extreme (main) however is connected to my broadband so any devices or clients connected to it are able to get outside. Connected devices or clients are assigned IP address via DHCP with IP 10.0.x.x. If wifi devices or clients connect to the Airport Express (remote) they are assigned a completely different IP addresses 169.254.x.x, they are not able to browse the internet or talk to other clients connected on the 10.0.1.x network. The Internet Connection configuration on the Airport Express (remote) is Connect Using Airport (WDS) and Using DHCP. I've even tried manually and entered the IP address 10.0.1.199 that I had assigned to the Airport Express from the Airport Extreme and Router Address as IP of Airport Extreme (10.0.1.1).
I think I've tried everything but I'm still having this problem. The remote Airport Express is not extending my existing Airport Extreme network. Any ideas???

Christopher,
This may or may not be helpful, or it may be something you've already tried or are aware of so I apologize if that's the case.
I have been researching ways to set up the Dual Band Network supported by the AEBS and came across your post. I've got an AEBS and (2) AirPort Express set-up currently (AEBS is main and the Express are participating in the WDS as remotes) and I'm trying to configure one of the Express to utilize a 802.11b/g compatible network while the AEBS runs a 5Ghz 802.11n Only network.
AAR, since the AirPort Express are 2.4Ghz 802.11b/g ONLY (no support for 802.11n), you have to be sure to set-up your AEBS first and select "802.11n (802.11b/g compatible)" in the Radio Mode drop-down on the AEBS before you attempt to connect an AirPort Express. The AEBS should be set-up as your "WDS main" and the Express should be set-up as a "WDS remote" for the network you established when you set-up the AEBS.
Bottom line here is the Express won't be seen by the AEBS unless the AEBS is 'looking' in the 802.11b/g 2.4Ghz frequency.
Hope this was helpful.

Itunes using Airport Express 802.11n and Remote app no longer staying connected

I'm running Windows 7. I find that my Remote app either keeps dropping Home Sharing (unless I toggle Home Sharing off/on in Itunes) or if it finds my library it cannot open it through the app. I can play music through my Airport, but it's the remote app that can't seem to connect with my iTunes. I should add that the remote app has the same breakdown on both my iphone 6 and ipad mini 2. So it's not the app, but some problem along the line (Airport express? router? Itunes?) Any suggestions?

OK, thanks for the info.
You'll need to jot down a setting that the AirPort Extreme (AEBS) is using in order to give the AirPort Express (AX).
Open AirPort Utility, select your AEBS and click Manual Setup
Click the Wireless tab below the row of icons
Jot down the setting that you see for Wireless Security
Close AirPort Utility
Hold in the reset button on the AirPort Express until you see the amber light begin to blink more quickly and then release.
Temporarily, position the AX near your AirPort Extreme and connect an ethernet cable from your computer to the AirPort Express
Open AirPort Utility, select the AX and click Manual Setup
Click the Base Station tab below the icons to name your device, establish a device password (write this down) and adjust time settings
Click the Wireless tab
Wireless Mode = Join a wireless network
Wireless Network Name = Exact same name as your AirPort Extreme wireless network
Enter a check mark next to Enable Ethernet clients
Wireless Security = Exact same setting as your AEBS that you wrote down
Wireless Password = Same password that your AEBS network is using
Confirm Password
Click Update at the lower right and the AX will restart. You can close AirPort Utility and disconnect the ethernet cable once you see the message that the settings have been saved to the AX.
After 30-45 seconds, you should have a green light on the AX. Now you can move the AX where it is needed and power it back up again. The ethernet port on the AX is enabled in this type of configuration, so you should be able to connect an ethernet device and connect. You may need to restart the device and/or the entire network to get everything synchronized.

CME and UCCX, G.729 for local/remote agents?

Hi Everybody,
Here is the environment
Local site
- CME 8.5 (single node)
- UCCX 8.5 (single node)
- the SIP route point is configured for codec g711ulaw
- Desk IP Phone and CAD
Remote site
- Metro-E connection with local site
- Desk IP Phone and CAD
In UCCX administration GUI, System > System parameters > Media Parameters > Codec
It only allows me to choose G711...
is it possible to enable the G.729 for the local and remote agent?
Thanks in advance
Sam

I have added the following in CME to add a transcoder, and restarted the CCX engine.
But the UCCX system parameter > media codec still not allows me to choose G.729.
Did I make something wrong in CME settings?
sccp local GigabitEthernet0/1
sccp ccm 192.168.5.5 identifier 1 priority 1 version 7.0+
sccp
sccp ccm group 1
associate ccm 1 priority 1
associate profile 2 register XCODER
keepalive retries 5
dspfarm profile 2 transcode
codec g729br8
codec g729r8
codec g729ar8
codec g729abr8
codec g711ulaw
codec g711alaw
maximum sessions 2
associate application SCCP
telephony-service
sdspfarm units 5
sdspfarm transcode sessions 15
sdspfarm tag 1 XCODER
Thanks
Sam

Remote Agent for ACS for Windows 2008 R2 64-bit

Hi,
We having difficulties with installing remote agent on windows 2008 R2 64-bit server and got the attached error.
Our ACS is 4.2.0.124 and remote agents we tried are :Remote-Agent-ACSse-win-v4.2.1.15-K9.zip and Acs-4.2.1.15.9-RA.zip.
I see following urls says it does not support Windows 2008 R2 and also 64-bit Windows,
https://supportforums.cisco.com/message/3135061#3135061
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp289019
However following url says its support 2008 R2 with 64-bit version
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/Release_Notes/acs421_rn.html
Appreciate if someone can adivse us what vesion (file name) of Remote Agent can support (or working) for Windows 2008 R2 64-bit.
thanks in advance

Hi Tarik,
What I wanted to say that the below url says that ACS 4.2 does not support on 64-bit OS:
ACS Requirements
You must use ACS Remote Agent for Windows, version 4.2, with ACS SE, version 4.2. We do not support other Cisco Secure ACS releases.
Note ACS Remote Agent 4.2 for Windows does not support 64-bit operating systems.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp289019
However could you please let me know what exact Remote Agent file you recommend to use for windwos 2008 R2 64-bit Server. The ACS SE version that I have is 4.2.0.124.
Thanks

Logs are lost frequently in Remote Agent Server

Hi All,
ACS 4.2 and remote agent was working properly two months before. But in past two months we are facing weird issue in RA server.For Somedays we are missing logs from both ACS and RA server. Once we notice this we use to restart the services in ACS to give workaround. But due to this we loose our daily logs intermittently and facing risk in without having logs.
This is not like communication between ACS and RA is not at all happening. It happens properly for a week or month, but again it is going bad without any config change.
CSAgent.ini file is properly configured.
Full version is 4.2.1.15 and patch is 10 in acs and ra.
ACS and Remote Agent Major and Patch version are same.
Any help would be highly appreciated.
Thanks.

Do you see the same intermittent logging issue with all services like csauth, rds, tcs etc.
Could you plz. provide the cslogagent file from the remote agent server when you see this issue happening.
C:\Program Files\Cisco\CiscoSecure ACS Agent\CSLogAgent\Logs
Steps to gather msinfo32
- Click the Start button.
- Click the Run option.
- Type "msinfo32" into the box and press Enter.
- Click "System Information."
- Choose "Save as System Information File" from the "Action" menu.
- Open an appropriate directory, or something easy like the desktop.
- Type "MSInfo32" into the Filename box and press Enter.
- Wait several minutes for the program to collect and save information
Did you check whether cisco remote agent server is excluded for being scanned by AV?
Jatin Katyal
- Do rate helpful posts -

Is it posible? two ACS 4.2 Appliance with the same remote agent

Hello,
I have a ACS 4.2 Appliance integrate with Active Directory, CA and Remote Agent, i want to agregate another ACS 4.2 Appliance with the same configuration, the same Active Directory, CA. my question is: can i configure the another ACS with the same Remote Agent of the first? in other words ...
i attach the diagram.
Thank you

I have a
ACS 4.2 Appliance integrate with Active Directory, CA and Remote Agent,
i want to agregate another ACS 4.2 Appliance with the same
configuration, the same Active Directory, CA. my question is: can i
configure the another ACS with the same Remote Agent of the first? in
other words ...i attach the diagram.Thank you
Hi,
Maximum number of appliances supported—While a single Cisco Secure ACS Remote Agent can provide services to many Cisco Secure ACS Appliances, support is limited to five concurrent connections by the appliances served. For example, if you have three appliances that are primary Cisco Secure ACSes and three appliances that are secondary Cisco Secure ACSes used for failover purposes only, the remote agent can provide services to all six appliances and stay below the maximum of five concurrent connections.
http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_installation_and_configuration_guide_chapter09186a0080193aa1.html
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

ACS SE 4.2, 802.1x and certificates for machine authentication

I'm trying to figure out how to put this lot together, but dont know enough about ACS when used with an external CA.
What I want to get working is:
A PC with a machine cert gets connected to a switch running 802.1x. The switch uses EAP with .1x to query PC, handing this off to ACS, that bit I'm ok with. The ACS needs to query the CA server to authenticate the PC, its this process I'm not sure about.
Reading the documentation I think that I need to configure LDAP between the ACS and the CA, which is running on 64-bit 2008 server. But, ACS SE remote agent is 32 bit only.
Is this correct, if so how do I get ACS SE to communicate with a 64-bit 2008 CA server?

Hi Bernhard,
That answers my questions, having never worked with AD, CA and LDAP etc I didn’t realise that you could assign attributes at a user (machine in my case) level, although it makes perfect sense when you indicated that, as LDAP is a method of supporting user accounts right?
I suppose in that case I'll be able to assign an attribute through LDAP, which ACS will use to map that account/machine to a specific VLAN. The attribute value will be used to represent the VLAN mapping.
What component in ACS do I use to match against attributes? I don’t see anything in the NAP, NAF or RAC sections about this.
As an alternative, your reply prompted me to look at the ACS User Group mapping section, it describes mapping a windows group to an ACS group, which may also be a solution, although not as flexible as being able to match on an LDAP attribute associated with the machine accounts.
Reading through this it seems this is an area where the SE and Windows based ACS platforms differ, I'm using SE.
Andy

More than one Windows ACS Remote Agent

We recently added a second Windows Remote Agent to have Windows authentication service available for our two ACS.
Agent definition (CSAgent.ini) is correct but in Network Configration - Remote Agent (on each ACS web console) we see that the second Remote Agent is "available" but "not in use" (while the first one is, of course).
If we stop the CSAgent Service on the first Remote Agent server, we do not see any activity on the second one (auth not working) and service still remains "avilable" but "not in use".
Then, debugging with csagent.exe -z -p all we can see is something like:
Debug printing on..
Logging mode: LOW
ACSRemoteAgent server starting ==============================
Running as console application.
Will listen on port 2004
Configuration will be fetched from 10.1.1.101:2003
Agents: CSWinAgent
CSWinAgent File: ..\bin\CSWinAgent.exe
CSWinAgent Port: 2005
1 agents configured
Permitted CSAgent Clients: 10.1.9.10-11
Hit Return/Enter to stop...
Listener activated
Watchdog activated
CSWinAgent launched
Client connecting from 10.1.9.10:4346
RPC: Info request received
RPC: Info reply sent
Client disconnected, thread 944 terminating
Client connecting from 10.1.9.10:4347
RPC: Info request received
RPC: Info reply sent
Client disconnected, thread 2108 terminating
Client connecting from 10.1.9.10:4348
and, in the CSWinAgent log windows we see NO logs at all....
Where are we wrong???

You must use ACS Remote Agent for Windows, version 4.0, with ACS Solution Engine, version 4.0. Other releases of Cisco Secure ACS are not supported.
The following URL may help you:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.0/installation/guide/remote_agent/rawi.html#wp300510

SQL server service and SQL agent service

Hi all. If I am going to use a Domain User to start SQl server service and SQL agent service,
does the domain user need to be SYSADMIN ????

No. not at all required.
Service account should have below permissions to start SQL service and Agent services.
Log on as a service (SeServiceLogonRight)
Replace a process-level token (SeAssignPrimaryTokenPrivilege)
Bypass traverse checking (SeChangeNotifyPrivilege)
Adjust memory quotas for a process (SeIncreaseQuotaPrivilege)
Permission to start SQL Writer
Permission to read the Event Log service
Permission to read the Remote Procedure Call service
Also please go though the below URL for more information:
http://msdn.microsoft.com/en-us/library/ms143504.aspx#Windows

802.1x and WOL issues

OK here is the deal. We use 802.1x with ACS as the Radius server. We also use WOL to wake computers for patching and remote use. We cannot get rid of WOL or 802.1x. We also cannot have ports assigned to our Data VLAN since that would, in the eyes of the auditors, allow unauthorized devices on the VLAN. We use a "Sleep" VLAN and then use ACS policies to assign the authenticated device to the proper VLAN. We also have VOIP with the computers connected to them. Here is the actual issue we are having. It seems that on some switches even with sleeping computers the "Sleep" VLAN is down/down or up/down. If there is at least one computer that is asleep and not behind a phone everything works fine. It looks like an issue with the phone and enhanced CDP. We are looking for a way to have the "Sleep" VLAN always up/up even without devices connected. We have been tossing around ideas like having a loop so that STP runs for that VLAN, connecting a layer 3 interface to a layer 2 interface on the same switch, even connecting a phone on every access switch and placing it in the "Sleep" VLAN. We are looking for better ideas.
Thanks.

Hello,
I suspect your problem is the fact that you're using self-signed certificates, but you haven't installed and trusted the root cert that issued them. The reason the phone can't validate the certificate is because it doesn't trust the issuer (or you don't have all of the certificates in the chain if you have intermediate CAs). That's also the problem with your Mac client forcing you to hit 'Accept' each time you authenticate - it doesn't trust the root CA. You should be able to talk to your IT folks to get a copy of it to import and trust (the certificate itself isn't secret).
1. Once you have the certificate, import it into your Mac's keychain and set the appropriate trust settings.
2. You should use the iPhone Configuration utility to create a profile to install the certificates onto the phone. On the Credentials tab hit '+' and browse to the location of the root certificate you got from IT. Once it's part of the profile you can then setup the Wi-Fi settings as needed.
This can get tricky, depending on the configuration your IT staff has in place. They should be amenable to providing you the same information they'd provide a Windows client (hopefully). Do you know what kind of EAP type you're using on your network? From the log the client is negotiating PEAP, which I assume is correct.
You'll need to get the certs ironed out before this will work reliably.

Interfaces not visible in 'Operator' when executed with 'Remote Agent'

Hi,
I am new to ODI, and have an issue with running Interfaces/Packages with a Remote Agent.+
I have setup an agent on the machine on which the Database is installed. I have created a Physical Agent with the details, and on using the 'Test' button in the client, it works fine.
However, when i try an execute a package with this agent, i get the 'Session Started' pop up, but the interface does not register in the 'Operator' section, and nothing happens.+
However, this does not happen when i use the 'Local (No Agent)', and the interface runs successfully and is registered in the 'Operator'.+
I just get this error under the 'Physical Agents' tree in the 'Operator' section for the interface - "ODI-1266: Agent agent_apo13110026 detected Session as stale session and set to error status"
Would appreciate any inputs.
Thanks,
Ab

Hi,
Thank you for your response.
We have actuall just migrated the from DEV to TEST. But in DEV we were only using the local agent, and we have configured the new standalone agent only in TEST.
The way the migration was done, was that we exported the Master and Work Rep from DEV, and then imported it into TEST.
Could this have had any impact, and would appreciate any pointers on how i can check if indeed the Agent is interacting with the wrong repository.
Thanks,
Ab

Connectivity to Test Controllers and Test Agents in virtual machine

Hi,
I’m setting up the load test infrastructure- configured test controller and test agent on skytap virtual machine (which is windows server 2012). I have configured as below:
The load tests exist on my machine (TFS 2013) , in test settings I selected – Local execution with remote collection, tried with selecting remote execution, selected the controller, the status shows as connected to controller: ‘XXXXXXXXXXX:6901’
I have configured the test controller ( TC 2013 ) for load testing, specified logon account as – Local system, since I’m not connecting the TFS in my virtual machine I skipped the Team Project Collection part. The load test database (SQLExpress)
is connected.
The Text Agent (TA 2013) also exists on the same virtual machine and is registered with controller. The test agent is running as service , logon as – Network service
I had checked the services, admin users on my machine and virtual machine, made the firewall exceptions, tried disabling the firewall too, checked the config files for QTController and QTTest Agent(C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE)
for port 6901, I can ping my machine( IP or with DNS) to Virtual machine ( vice versa). I also tried to set the logging – verbose for all TA, TC , devenv config ( however, I could see any logs).
The machines are in same domain and port 6901 is accessible from local machine.
When I try to run my load test from my machine it gives the below error:
Error: Failed to queue test run 'LoadTests (2015-01-22 15:04:00)': A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host
has failed to respond.
I tried troubleshooting with all the online help available, could not find a solution.
Please help on this.
Dhillon_H

Hi Tina-Shi
Thank you for the response. Please see below my findings and the logs
- There were no errors while configuring TC, TA on VM , only warnings as below:
Since you have not configured lab service account, make sure a) test agent can communicate with the test controller, b) test controller and test agent can access the build drop location, and c) Microsoft Test Manager can connect to the test controller
during manual test runs. Manual steps might be needed to setup the permissions mentioned above.
-The test Agent is ready status in the Manage Test Controllers Window in the local.testsetings file.
- The load tests run successfully when I select local execution.
- I have referred the links mentioned , couldn't find the solution, also sending some content from logs I have on the VM machine where my TC, TA exist.
- Also, I’m the admin on my TFS machine and VM .
- TC configuration – as Local system , TA configuration- as network service.
VSTTAgent.log
I, 4988, 41, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTAgentService.exe, AgentService: Connecting to controller. Using AgentName: XXXXX-XXX-XXXX : Domain : DEVOP.Xxxxx-xxx-xxxx.com
V, 4988, 32, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentService: calling AgentObject.Hello
V, 4988, 32, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.WaitForDataCollectionAgentProcessToStart: waiting for agents to start.
V, 4988, 32, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.WaitForDataCollectionAgentProcessToStart: Agents started.
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Calling 'DataCollectionEnvironmentContext' on the data collection agent
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.WaitForDataCollectionAgentProcessToStart: waiting for agents to start.
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.WaitForDataCollectionAgentProcessToStart: Agents started.
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Successfully called 'DataCollectionEnvironmentContext' on the data collection agent
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Calling 'DataCollectionEnvironmentContext' on the test agent
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Successfully called 'DataCollectionEnvironmentContext' on the test agent
I, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentService: Successfully connected to controller.
V, 4988, 41, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentStatusAggregator.ControllerConnected: Connection to controller XXXXX-XXX-XXXX:6901 has been established.
V, 4988, 44, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Calling 'SetAgentDataCollectorInformation' on the controller
V, 4988, 44, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTAgentService.exe, AgentProcessManager.PerformActionIgnoringExceptions: Successfully called 'SetAgentDataCollectorInformation' on the controller
EqtTraceAgent.log
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, Agent XXXXX-XXX-XXXX: created Controller Event Sink
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: starting state machine on different thread.
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): SetNextState Online called
V, 568, 7, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): In state Online. Waiting for state change...
V, 568, 7, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): Exit wait for state change, current state is Online.
V, 568, 7, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): Uninitialized => Online
V, 568, 7, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): calling state handler for Online
V, 568, 7, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, StateMachine(DataCollectionAgentState): In state Online. Waiting for state change...
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectorWatcher: DataCollectorDiscoveryPeriod set to: 5000
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectorWatcher.Start: Starting to watch for changes in the data collector files.
V, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: constructor is done, success.
I, 568, 1, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentProcess: Calling into AgentService to register the agent.
V, 568, 8, 2015/01/23, 12:28:31.395, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectorCache.ForceCacheUpdate: Performing data collector discovery.
I, 568, 1, 2015/01/23, 12:28:31.411, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentProcess: Successfully registered data collection agent process.
I, 568, 1, 2015/01/23, 12:28:31.411, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentProcess: waiting for shutdown notification.
V, 568, 8, 2015/01/23, 12:28:32.192, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectorCache.ForceCacheUpdate: Done performing data collector discovery.
V, 568, 10, 2015/01/23, 12:28:32.458, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: Hello.
V, 568, 10, 2015/01/23, 12:28:32.458, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionEnvironmentContext: Adding Agent Process URI ipc://eqt-f0f6cfb9-454f-4e8a-c857-170546772b6e/
V, 568, 25, 2015/01/23, 12:38:33.345, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: Hello.
V, 568, 25, 2015/01/23, 12:38:33.345, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionEnvironmentContext: Adding Agent Process URI ipc://eqt-f0f6cfb9-454f-4e8a-c857-170546772b6e/
V, 568, 33, 2015/01/23, 12:48:32.667, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: Hello.
V, 568, 53, 2015/01/23, 12:48:32.667, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionEnvironmentContext: Adding Agent Process URI ipc://eqt-f0f6cfb9-454f-4e8a-c857-170546772b6e/
V, 568, 54, 2015/01/23, 12:58:33.943, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionAgentObject: Hello.
V, 568, 54, 2015/01/23, 12:58:33.943, XXXXX-XXX-XXXX\QTDCAgent32.exe, DataCollectionEnvironmentContext: Adding Agent Process URI ipc://eqt-f0f6cfb9-454f-4e8a-c857-170546772b6e/
EqtTraceController.log
V, 2608, 20, 2015/01/23, 13:08:10.287, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: Hello
V, 2608, 20, 2015/01/23, 13:08:11.302, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
I, 2608, 20, 2015/01/23, 13:08:11.302, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: Creating ControllerExecution for TestRun 9f0e53e4-09da-40f4-90d8-01bdaeec7365
I, 2608, 20, 2015/01/23, 13:08:11.318, XXXXX-XXX-XXXX\QTController.exe, ControllerSpooledJob: creating spooled job for test run 'LoadTests (2015-01-23 13:08:08)'
I, 2608, 20, 2015/01/23, 13:08:11.318, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: Queuing TestRun 9f0e53e4-09da-40f4-90d8-01bdaeec7365
V, 2608, 22, 2015/01/23, 13:12:54.566, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 22, 2015/01/23, 13:12:54.566, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: AgentHello from XXXXX-XXX-XXXX
V, 2608, 22, 2015/01/23, 13:12:54.566, XXXXX-XXX-XXXX\QTController.exe, Verifying the connection integrity for following number of objects: 1
V, 2608, 24, 2015/01/23, 13:17:54.596, XXXXX-XXX-XXXX\QTController.exe, Agent : NT AUTHORITY\NETWORK SERVICE
V, 2608, 24, 2015/01/23, 13:17:54.596, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 24, 2015/01/23, 13:17:54.596, XXXXX-XXX-XXXX\QTController.exe, User NT AUTHORITY\NETWORK SERVICE is in group TeamTestAgentService.
I, 2608, 24, 2015/01/23, 13:17:54.596, XXXXX-XXX-XXXX\QTController.exe, A user has successfully authenticated to obtain the ControllerObject.
V, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.ConnectAgent: Agent: XXXXX-XXX-XXXX from machine: xxxxx-xxx-xxxx.DEVOP.Xxxxx-xxx-xxxx.com trying to connect.
V, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, User NT AUTHORITY\NETWORK SERVICE is in group TeamTestAgentService.
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, AgentDomainTrusted : Controller Domain DEVOP.Xxxxx-xxx-xxxx.com Agent Domain DEVOP.Xxxxx-xxx-xxxx.com
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, AgentDomainTrusted : Same domain DEVOP.Xxxxx-xxx-xxxx.com
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.ConnectAgent : Ignoring the identity
V, 2608, 27, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, Successfully verified connection for agent XXXXX-XXX-XXXX
I, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, AgentManager: Agent 'XXXXX-XXX-XXXX' successfully connected.
V, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, Verifying the connection integrity for following number of objects: 1
V, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.ConnectAgent: Agent: XXXXX-XXX-XXXX Returning.
V, 2608, 24, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 29, 2015/01/23, 13:19:13.442, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
I, 2608, 29, 2015/01/23, 13:19:13.442, XXXXX-XXX-XXXX\QTController.exe, A user has successfully authenticated to obtain the ControllerObject.
V, 2608, 28, 2015/01/23, 13:19:14.114, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: Hello
V, 2608, 28, 2015/01/23, 13:19:14.364, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
V, 2608, 28, 2015/01/23, 13:19:16.270, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
V, 2608, 28, 2015/01/23, 13:19:16.489, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
V, 2608, 32, 2015/01/23, 13:22:54.593, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 32, 2015/01/23, 13:22:54.593, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: AgentHello from XXXXX-XXX-XXXX
V, 2608, 32, 2015/01/23, 13:22:54.593, XXXXX-XXX-XXXX\QTController.exe, Verifying the connection integrity for following number of objects: 1
VSTTController.log
V, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, User NT AUTHORITY\NETWORK SERVICE is in group TeamTestAgentService.
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, AgentDomainTrusted : Controller Domain DEVOP.Xxxxx-xxx-xxxx.com Agent Domain DEVOP.Xxxxx-xxx-xxxx.com
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, AgentDomainTrusted : Same domain DEVOP.Xxxxx-xxx-xxxx.com
I, 2608, 23, 2015/01/23, 13:17:55.877, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.ConnectAgent : Ignoring the identity
V, 2608, 27, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, Successfully verified connection for agent XXXXX-XXX-XXXX
I, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, AgentManager: Agent 'XXXXX-XXX-XXXX' successfully connected.
V, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, Verifying the connection integrity for following number of objects: 1
V, 2608, 23, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.ConnectAgent: Agent: XXXXX-XXX-XXXX Returning.
V, 2608, 24, 2015/01/23, 13:17:55.893, XXXXX-XXX-XXXX\QTController.exe, ControllerObject.RequireAgentServiceUser: Agent: XXXXX-XXX-XXXX of environment [Default] trying to connect.
V, 2608, 29, 2015/01/23, 13:19:13.442, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
I, 2608, 29, 2015/01/23, 13:19:13.442, XXXXX-XXX-XXXX\QTController.exe, A user has successfully authenticated to obtain the ControllerObject.
V, 2608, 28, 2015/01/23, 13:19:14.114, XXXXX-XXX-XXXX\QTController.exe, ControllerObject: Hello
V, 2608, 28, 2015/01/23, 13:19:14.364, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
V, 2608, 28, 2015/01/23, 13:19:16.270, XXXXX-XXX-XXXX\QTController.exe, User XXXXX-XXX-XXXX\dhilloha is system, Admin, or controller user
V, 2608, 28, 2015/01/23, 13:19:16.489, XXXXX-XXX-XXXX\QTController.exe, User xxxxxxxx\dhilloha is system, Admin, or controller user
Thanks you for looking into this.
Dhillon_H

"The Page Cannot Be Displayed" error when clicking the Remote Agent

Hi everyone! We have installed ACS SE 4.0 and we have added a remote agent running on Windows Server 2003. Recently, we are encountering "The page cannot be displayed" error when we click the RA under a network device group. This is resolved by rebooting the ACS SE appliance and accessing the ACS SE web console again but after few hours, problem reoccurs. Clicking the links on the ACS SE web console is okay at first but after clicking the RA, every link shows the error "The page cannot be displayed." Hope you could help us on this problem. Anyone's support is very much appreciated.
Thanks!

Hi JG,
Thank you so much for your response. Does Cisco have a documentation that states that this is a known issue with 4.0, such as release notes, for we might need this for the proposal upgrade?
Again, thanks a lot!

802.1x and Remote Agent

Similar Messages

Maybe you are looking for