ACE Configuration Check

VIP : 10.10.10.10:8000
rserver server1
ip address 10.10.10.1
serverfarm SFARM1
rserver server1 8001
probe Probe_8001
rserver server2 8002
probe Probe_8002
rserver server3 8003
probe Probe_8003
rserver server4 8004
probe Probe_8004
I would like to loadbalance on just one single ip address and multiple ports like
above configuration on ACE. Is It possible configuration? please check
thank you.

ok. thank your response.
I picked up your configuration as follows:
rserver Server1
ip address 10.10.10.1
inservice
serverfarm Farm1
rserver Server1 8001
inservice
rserver Server1 8002
inservice
rserver Server1 8003
inservice
class-map MyVip
match virtual 10.10.10.10 tcp eq 8000
policy type loadbalance http first MyPolicy
class class-default
serverfarm Farm1
policy multimatch SLB
class MyVip
load policy MyPolicy
load vip inservice
interface vlan X
service in SLB
I know that there is no problem to configure one real server attached multiple service port for configuring SLB.
But I must healcheck on each multiple ports although one real server.
for example:
rserver Server1 8001
probe probe_8001
inservice
Is it working well?

Similar Messages

ACE - configuring script probes (tclsh)

Hey guys
I'm looking for exampels about writing script probes for the ACE module.
In the cisco's ACE configuration guide i already found one, but i'd be happy to have a few more. Does anybody knows where i can get some other examples?
cheers
patrick

Tach auch and Hello!
If you check the software section for the ACE Module you will find some ace scripts you can download.
http://www.cisco.com/cgi-bin/Software/Tablebuild/doftp.pl?ftpfile=cisco/crypto/3DES/lan/catalyst/6500/ace/ace_scripts.tgz&app=Tablebuild&status=showC2A
Viel Erfolg
Roble

AppContainers_test fails with error during pre-test configuration checks

Hello,
AppContainers_test fails with error during pre-test configuration checks:
"[FAIL] The machine is not properly configured for testing: the test directory "C:\Windows\SYSTEM32\" is not ACL'd to allow execute permission for "APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES"
But that kind of permission for APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES was allowed, also i tried to allow full access, but error was the same.
In the test WindowsFilteringPlatform_Tests, the same requirement "REQ - Wfp-based products must not block App Container apps operating within their declared network intentions by default" was checked successfully.
How can i pass successfully AppContainers_test?
I installed lastest versions of QFE and filters on my server, but it didn't help.

Hi M'Alerter,
I have the same issue, have you found a solution to your problem ?
Cheers,
Ghalem

Configuration Check Error in Managed System Configuration

Hi dear experts,
I come across a problem as the screenshot shows blew:
I check some relevant information, but no issues found:
1.
DEWDFLSSC5062:/usr/sap/hostctrl/exe # ./saphostexec -status
saphostexec running (pid = 7094)
sapstartsrv running (pid = 7097)
10:46:34 24.06.2014 LOG: Using PerfDir (DIR_PERF) = /usr/sap/tmp
saposcol running (pid = 7130)
DEWDFLSSC5062:/usr/sap/hostctrl/exe # cat host_profile
SAPSYSTEMNAME = SAP
SAPSYSTEM = 99
service/porttypes = SAPHostControl SAPOscol SAPCCMS
DIR_LIBRARY = /usr/sap/hostctrl/exe
DIR_EXECUTABLE = /usr/sap/hostctrl/exe
DIR_PROFILE = /usr/sap/hostctrl/exe
DIR_GLOBAL = /usr/sap/hostctrl/exe
DIR_INSTANCE = /usr/sap/hostctrl/exe
DIR_HOME = /usr/sap/hostctrl/work
service/admin_users = daaadm
service/logfile_000 = /tmp/s
service/logfile_001 = /usr/sap/DAA/SMDA97/SMDAgent/log/smdagent_trace*.trc
service/logfile_002 = /usr/sap/DAA/SMDA97/SMDAgent/log/smdagent_trace.*.trc
service/logfile_003 = /usr/sap/DAA/SMDA97/SMDAgent/log/smdagent_trace.trc
And the version of hostagent is up-to-date.
2.The URL
- http://<SMDhost>:1128/SAPOscol/?wsdl
- http://<SMDhost>:1128/SAPHostControl/?wsdl
can be accessed.
3.The step 3 in managed systems configuration is executed successfully.
4.I have even uninstalled and re-installed the SMD and hostagent, and change the alert_timeout parameter in T-code DMD, but the issue insisted.
5.Only a few SMDs in my landscape, so I think the parameter MaxThreadCount, InitialThreadCount, MinThreadCount should be no problem.
Now I have no idea how to proceed, please give me some advice, thank you in advance.
Best Regards,
Pany Pan

Hi Pany
Kindly check the below two sapnote
1935653 - Error "A timeout occured during the execution of the OS Command Console" when performing a Managed System Configuration - Solution Manager 7.1
1865122 - Solution Manager 7.10 Configuration Check errors : "A timeout occured during the execution of the OS Command Console" "An unexpected error occured"
Moreover , you need to check/verify/maintain the parameter in configtool
ThreadManager -> MaxThreadCount
Total number of Diagnostics Agents * 2 + 50
1250
ThreadManager -> InitialThreadCount
Total number of Diagnostics Agents * 1.5
900
ThreadManager -> MinThreadCount
Total number of Diagnostics Agents
600
ConnectionManipulator -> maxSoTimeOutConnections
Total number of Diagnostics Agents * 1.35
810
ConnectionManipulator -> MaxParallelUsers
Total number of Diagnostics Agents + 50
650
In Diagnostics Agent Troubleshooting - SAP Solution Manager Setup - SCN Wiki
guide check the section Required Solution Manager Java Stack Settings (Scalability)
I face the same issue , which got resolved by maintaining the above parameters, maxthreadCount,
minthreadcount , maxSoTimeOutConnections.
With Regards
Ashutosh Chaturvedi

Configuration check error: The SMD Agent is not able to connect the Satellite System (J2EE stack)

Hi friends,
Getting the below error in step 10 (configuration check) in managed system configuration.
The SMD Agent is not able to connect the Satellite System (J2EE stack).
Please check the JAVA Connect Parameters provided in the Managed System Setup Wizard for this
System.
java.rmi.RemoteException.P4 Connection failed -
P4AuthorizationException -
com.sap.smdagent.plugins.connectors.p4.exceptions.P4AuthorizationException:
Access is denied to SAP System sid [XYZ/null]: check the connection
credentials.More details about the error in agent 'xyz' log file
(SMDAgentApplication.X.log).; nested exception is:
com.sap.engine.services.security.exceptions.BaseLoginException: Cannot
authenticate the user.
The SMD log file referred to in the log above gives the same information and not anything much useful.
Any idea what could be the reason for the above error?
Thanks,
Arindam

Hi All,
Thaks for your suggestions. I chcked the note 182020, but the issue described in the note is for error byte code adapter installation whcih is not my case. The byte cde adapter intallation has been successful in our solman system All the steps from 1 to 9 are green. Only in step 10, check cniguration I am getting the above error.
The logon test wth the user id in step 3 "Enter system parameters" is successful. The message server port is also correct.
Hi Khaja,
I went to the links as suggestedby you but there its about a ifferent error message "Invalid Response Code: (401) Unauthorized.". I am not getting any such kind of error.
All I am getting is this -
The SMD Agent is not able to connect the Satellite System (J2EE stack).
Please check the JAVA Connect Parameters provided in the Managed System Setup Wizard for this System.
java.rmi.RemoteException.P4 Connection failed -
P4AuthorizationException -
com.sap.smdagent.plugins.connectors.p4.exceptions.P4AuthorizationException:
Access is denied to SAP System sid [XYZ/null]: check the connection
credentials.More details about the error in agent 'xyz' log file
(SMDAgentApplication.X.log).; nested exception is:
com.sap.engine.services.security.exceptions.BaseLoginException: Cannot
authenticate the user.
Thanks,
Arindam

ACE Configuration (urgent)

I am facing problem with ACE configuration. I want to redirect 443 traffic to my Proxy Server.
But I am not able to do this. I want to redirect only subnet 192.168.80.0/24
I have the following configuration
access-list BC line 8 extended permit tcp host 192.168.80.89 any eq https
access-list BC line 16 extended permit tcp host 192.168.80.62 any eq https
probe tcp PROBE_TCP_443
port 443
interval 15
passdetect interval 60
open 1
serverfarm host SF_BCPR_https
transparent
probe PROBE_TCP_443
rserver RS_BCPR01
    inservice
rserver RS_BCPR02
    inservice
sticky ip-netmask 255.255.255.255 address source STICKY-SOURCE-HTTPS
replicate sticky
serverfarm SF_BCPR_https
class-map match-all CM_SF_BCPR_HTTPS
2 match access-list BC
policy-map type loadbalance http first-match PM_LB_SF_BCPROXY_https
class class-default
    sticky-serverfarm STICKY-SOURCE-HTTPS
==================================================================================
policy-map multi-match PM_MAIN_BCPROXY
    class CM_SF_BCPR_HTTPS
    loadbalance vip inservice
    loadbalance policy PM_LB_SF_BCPROXY_https
    loadbalance vip icmp-reply active
    appl-parameter http advanced-options PARAMAP_CASE
==================================================================================
interface vlan 300
description ACE-INSIDE CONTEXT RACK1
ip address 192.168.0.65 255.255.255.224
alias 192.168.0.73 255.255.255.224
peer ip address 192.168.0.66 255.255.255.224
no normalization
mac-address autogenerate
no icmp-guard
access-group input acl-in
access-list BC line 8 extended permit tcp host 192.168.80.89 any eq https
access-list BC line 16 extended permit tcp host 192.168.80.62 any eq https
service-policy input PM_MAIN_BCPROXY
no shutdown
I am getting error.
DC-ACE01/Rack1(config-cmap)# 10 match access-list BC
Error: Class-map is being used for virtual server definition
=======================================================================
Only if I am putting
class-map match-all CM_SF_BCPR_HTTPS
2 match virtual-address 0.0.0.0 0.0.0.0 tcp eq https
Then only it is working but I dont have to have this policy to be applied on all the users only one subnet I want to have under HTTPS policy.
Please let me know how can I apply the policy only on specific subnet so that port 443 traffic can be redirect and rest of all subnets can go direclty to Internet.
Waiting for reply.
Thanks in Advance.

Hi, if this is your current configuration in last message - it's wrong, should be :
class-map match-all CM_SF_BCPR_HTTPS
2 match virtual-address 0.0.0.0 0.0.0.0 tcp eq https
policy-map type loadbalance http first-match PM_LB_SF_BCPROXY_https
match IT source-address 192.168.80.0 255.255.255.0 <----- If you want to redirect 192.168.80.0/24
    sticky-serverfarm STICKY-SOURCE-HTTPS
And then in Layer 4 (multi-match policy)
policy-map multi-match PM_MAIN_BCPROXY
    class CM_SF_BCPR_HTTPS
    loadbalance vip inservice
    loadbalance policy PM_LB_SF_BCPROXY_https
    loadbalance vip icmp-reply active
    appl-parameter http advanced-options PARAMAP_CASE
However you need to be aware - with such configuration all other traffic to port 443 will be dropped.
The one of the options can be to add forward action to class default in Layer 7 map , like this :
policy-map type loadbalance http first-match PM_LB_SF_BCPROXY_https
match IT source-address 192.168.80.0 255.255.255.0 <----- If you want to redirect 192.168.80.0/24
    sticky-serverfarm STICKY-SOURCE-HTTPS
class class-default <--- additional configuration
forward
In this case traffic to port 443 from other than 192.168.80.0/24 sources won't be dropped but will be just forwarded to destination.

Managed System SLM~ABAP is not configured (Step 10: Configuration Check)

When I try to spend the last procedure "Configuration Check" (item 10 - Managed System Configuration) I get here is only an error message
The definition of Technical System 'SLM~JAVA' is not correct: 'SLM~JAVA': Operating System 'Linux~2.6.32-358.23.2.' of Host 'sslm' must have at least one Software Component Version
'SLM~JAVA': Operating System 'Linux~2.6.32-358.23.2.' of Host 'sslm' must have at least one Software Component Version
Outside Discovery issue: refer to SAP Note 1611483
Managed systems setup | Managed System Definition Status (post setup) | SYSTEM =SLM~JAVA
What a way such settings: Managed systems setup | Managed System Definition Status?
I probably know only the tab SapSolution Manager: Configuration-> Managed system configuration-> Technical systems, but there make these settings is not possible.
How do I resolve this is "must have at least one Software Component Version"?
ps said note (1611483) has been done, but apparently no effect brought

Hi Michael,
Can you please check below :
Correct Software Component version is displayed in LMDB -> Host - > Tab Installed Software.
Managed System setup -> Assign Diagnostic agent -> Check SAP Host agents (to enusre agent is running)
You may restart both Diagnostic and Host agent and check again after few minutes if data is updated.
Additionally please check below SAP notes which might help resolve the issue :
1890035 - Error "Host 'hostname' must have at least one installed Technical system" during the step 'Check Prerequisites'
1799138 - Solution Manager configuration check returns "The definition of Technical System '{SID}~{STACK}' is not correct: '{SID}~{STACK}' : Operating System '{OSName}' of Host '{hostname}' must have at least one Software Component Version"
Hope this helps.
Thanks & Regards,
Nisha

No Function Identifier maintained. Configuration check not possible

Dear PM team,
While doing the Equipment installation with goods movement through IE4N, transaction code, system throwing following error messages.
1. No function identifier maintained. Configuration check not possible
2. Message for the configuration check.
Please guide me where i did the mistake? and suggest me how to correct this error message, without doing the changes in message controls.
thanks & regards
JK

JK,
My guess is that you are using Configuration Control.
If so, then have a look at these transactions:
PeteA

Configure Check-In disabled

hello everybody,
i'm configuring my CMS for a ISA project.
When i try to set check in part and press Configure Check-In button, the pop up appared but all field are disabled.
I cannot configure directory.
Where is the problem?
any suggestion?
thanks
Alex

assign nwdi administrators group to yourself

L7 ace configuration replace Apache AJP

Hi team
i am trying to use teh ACE to replace an apache based load balancer in an jboss application cluster. I am using L7 loadbalancing to load balance between multiple components. the way these jboss application servers work with apache is that ---
When the jboss application starts up on the on application cluster, it issues a GET opencase/webservices/config-service?wsdl to the loadbalancer IP
The apache based LB in turn talks to the same box on port 8009 via ajp retrieves the configuration file and provides it back to the application on port 80
And after 2 has completed the Jboss application comes up. Basically to start the application the Apache loadbalacer will accept requests from the its target list and load balance the request back to them itself
Not sure how i can use the ACE to accomplish this.
attached are my topology (logical) and the ace configuration. from my topology file -- the net-cms-1 will issue a get request to teh VIP (on the ace), the ACE accepts the connection but soon resets it.
Can anyone please help.
Thanks in advance

I don't know if the problem I had will help see the link below
https://supportforums.cisco.com/thread/2149204?tstart=90

Diagnostic Dashboard: SOA-OIM Configuration Check

Hi All,
I recently installed OIM 11.1.1.3 After installation when I try to search approval task, I am getting the following error:
<Warning> <oracle.iam.consoles.faces.mvc.common> <BEA-000000> <oracle.iam.platform.canonic.base.NoteException: An error occurred while searching tasks from the SOA Server.>
When I ran the check from Diagnostic Dashboard, I got the following result:
Test Name SOA-OIM Configuration Check.
Description Checks whether the details provided for SOA-wiring are valid or not.
Result Failed
Details
Invalid SOA parameters found in the configuration file of Oracle Identity Manager.
The following parameters are empty:
     RMI URL
     SOAP URL
     Weblogic Username
     Weblogic Password
Any idea which configuration file I will need to update to get it work?
BTW I did not get any error during installation and configuration.
Regards,
Gaurav

Hi All,
I recently installed OIM 11.1.1.3 After installation when I try to search approval task, I am getting the following error:
<Warning> <oracle.iam.consoles.faces.mvc.common> <BEA-000000> <oracle.iam.platform.canonic.base.NoteException: An error occurred while searching tasks from the SOA Server.>
When I ran the check from Diagnostic Dashboard, I got the following result:
Test Name SOA-OIM Configuration Check.
Description Checks whether the details provided for SOA-wiring are valid or not.
Result Failed
Details
Invalid SOA parameters found in the configuration file of Oracle Identity Manager.
The following parameters are empty:
     RMI URL
     SOAP URL
     Weblogic Username
     Weblogic Password
Any idea which configuration file I will need to update to get it work?
BTW I did not get any error during installation and configuration.
Regards,
Gaurav

Where do we configure check register

Hi
while processing transaction FCHN, i have put a tick to "List of outstanding checks" still its showing all the checks which are cleared as well as outstanding, i hope there is some configuration missing
can anybody help me.

Hello,
There is no provision for configuring check register.
You can get the outstanding checks, provided if you have used FCHR to inform the system what checks are being cashed.
Used FCHR before FCHN.
Regards,
Ravi

Personas Configuration Check

I've recently upgraded to Personas 2.0 SP02 and I'm having some trouble getting the RFC destination required for the Configuration check tool to work.
When attempting to create the RFC destination (as detailed in this blog: Personas - Enabling Configuration Check of Target Systems), I'm receiving an HTTP 404 - Not Found error when testing the connection. I've validated the host and port # are correct and working since I can successfully test the restgui service. The logon procedure I'm using is an SAP RFC Logon and the user has SAP_ALL. I'm unsure of what else to check??
Any and all ideas are welcome.
Thanx in advance,
Elder

Thanx Thien, after using that prefix path value to test I was able to successfully test the RFC destination. So I removed the prefix path and saved my entry.
I ensured that the HTTP Connection value in the Maintain Systems configuration points to my new RFC Destination and it does. However, when I go to the Configuration Check tool I'm seeing "Unable to determine configuration" for the last 6 in the Target systems list. Please see the attached screen shot.
All the information I've found points to an incorrect RFC destination causing the message below, but that's obviously working fine. Any idea what else it may be?

Note 1749935 & DBACOCKPIT::SAP Configuration Check

Hi,
my box has got SAP_BASIS 16 on ASE 15.7.0.131, do I must check note number 1749935 (SYB: Configuration Guide for SAP ASE 15.7) or DBACOCKPIT::SAP Configuration Check is enough?
Thank you.

Hi Ganimede Dignan,
If my understanding is correct. Are you trying to configure the DBACOCKPIT
if Yes, use the SAP note 1539124 - SYB: Database Configuration for SAP applications on SAP ASE
Regards,
Ankitha

Configuration check printing

How can I configure Check printing process step by step in SAP FI.
Please tell me step by step,
Ragards,
Ananda

HI
No configuration required for Cheque printing....
we need to develop cheque printing format by using smartform or sapscript
Mahesh

ACE Configuration Check

Similar Messages

Maybe you are looking for