ACE10 dynamic port range

Hi
Is the dynamic port range server load balancing supported for MS Exchange 2010
Sent from Cisco Technical Support iPhone App

It would appear to be, see MS recommendation http://technet.microsoft.com/en-us/exchange/gg176682.aspx. Matthew

Similar Messages

Dynamic port assignments

hi all. if my question can be answered by reading TMG documentation, feel free to direct me there (i tried searching for the admin documentation but couldn't find it).
can someone tell me what the purpose of dynamic port assignment is from endpoint -> TMG? Once the traffic leaves the TMG -> Internet, the actual service port is being used but that doesn't help me for internal queries.
many thanks,
-P

Hi,
Please check the articles below.
ISA/TMG Server
Application protocol
Protocol
Ports
Configuration Storage (domain)
TCP
2171 (note 1)
Configuration Storage (replication)
TCP
2173 (note 1)
Configuration Storage (workgroup)
TCP
2172 (note 1)
Firewall Client Application
TCP/UDP
1025-65535 (note 2)
Firewall Client Control Channel
TCP/UDP
1745 (note 3)
Firewall Control Channel
TCP
3847 (note 1)
RPC
TCP
135 (note 6)
Randomly allocated high TCP ports (note 6)
TCP
random port number between 1024 - 65535
random port number between 10000 - 65535 (note 7)
Web Management
TCP
2175 (note 1, 4)
Web Proxy Client
TCP
8080 (note 5)
Collapse this imageExpand this image
Notes
This port is not used with ISA 2000.
FWC application transport and protocols are negotiated within the FWC control channel.
ISA 2000 FWC control uses UDP. ISA 2004 and 2006 use TCP.
OEM uses Firewall Web Management to provide non-MMC management of ISA Server.
This port is also used for intra-array traffic.
This port is used only by the ISA management MMC during remote server and service status monitoring.
This is the range in TMG. Please note that TMG extends the default dynamic port ranges in Windows Server 2008 R2, Windows 7, Windows Server 2008, and Windows Vista.
https://support.microsoft.com/kb/832017?wa=wsignin1.0#method14
Reference:
TCP connection established using Firewall client may close unexpectedly
Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

WMI port range Issues windows server 2008 R2

I've been encountering issues with the communication to some of my distributions points worldwide. The server is live but is unable to receive any packages.
I troubleshooted the issue with our network group and it seems that the servers are trying to send the data through the 1027 port
Now for the kicker: These are all 2008 R2 servers and port 1027 is part of the WMI range for server 2003. The port range for 2008 starts at 49152.
the issue in itself is easy enough to fix as you can see below:
netsh int ipv4 show dynamic tcp (this give you the current range)
netsh int ipv4 set dynamic tcp start=49152 num=**** (this allows you to set the beginning of the range to what you want and the # of ports available)
this requires a reboot to be effective.
My question is, why is the default port range changing without an input from anyone?

Hi Carl,
As you point out, in Windows Server 2008 and later versions, and in Windows Vista and later versions, the default dynamic port range changed to the following range:
Start port: 49152
End port: 65535
After my research, I found a relevant KB we can reference:
The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008
http://support.microsoft.com/kb/929851
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Dynamic Port Allocation Using OPMN

I wanna use jrockit mission control to monitor a java application which is running in 8 oc4j instances controlled by opmn. I included the -Xmanagement:ssl=false,authenticate=false,autodiscovery=true,port=7091 in the oc4j startup command line in opmn.xml but i need that opmn dynamically change the port part of the command using a range of predefined ports, just like opmn does for oc4j rmi, jms, ajp ports. Is that possible? Can I define a custom port range in opmn.xml and user the port id as a variable in oc4j's startup command line? Any help is more than appreciated

In addition to the above, the following was taken from D:\Hyperion\logs\BIPlus\FRClient.log on the client machine after the error occurred:
08-12 10:04:38 ERROR HRResourceBundleFactory Could not locate registry
08-12 10:04:38 ERROR HRResourceBundleFactory 5500
com.hyperion.reporting.util.HyperionReportException: Server not yet configured. Please configure the server.
at com.hyperion.reporting.config.ConfigResourceBundle.<init>(Unknown Source)
at com.hyperion.reporting.config.ConfigResourceBundle.getInstance(Unknown Source)
at com.hyperion.reporting.config.HRResourceBundleFactory.getConfigBundle(Unknown Source)
at com.hyperion.reporting.config.HRResourceBundleFactory.getInstance(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.getReportServerNames(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.removeReportServerFromLocalCache(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.unregisterFRComponentAtRemoteRegistry(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.pickRandomServer(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.lookup(Unknown Source)
at com.hyperion.reporting.registry.FRSystem.lookupHsServer(Unknown Source)
at com.hyperion.reporting.javacom.HsServer.getServer(Unknown Source)
at com.hyperion.reporting.javacom.HsHelper.getServer(Unknown Source)

What port-range in the firewall of a Socks (e.g. JSocks) server?

Hi there,
I am using the JSocks implementation of a socks v5 server.
Some of my questsions are quite general (not only specific to JSocks) and I hope that someone knows the answer. Unfortunately the forum of JSocks (sourceforge) is only rudymentary so I think this place is better to answer my questions.
However...
As I understand the socks proxy, the server waits on a specific port - normally 1080 and processes the client requests (bind, connect, accept...).
For example one client requests a bind. Then the socks server opens a port locally on the socks host and (if successful) replies the new listening port and ip to the requesting client. ...
(Forget authentication, cascaded proxies and ip-ranges at this point!)
Now, if other clients should be able to access this port, the firewall (if any) needs to allow connection to this port.
My questions:
What should be an adequate port range for the socks proxy? With other words: what is the port range of the new ports that are created for the requesting clients?
How schould a seperate firewall be configured not to conflict with a socks proxy?
Specific to JSocks (if somebody knows this he wins a virtual cookie): What is the port range that JSocks uses if it opens (generates) new ports for its clients?
Where is the port range defined in the jsocks - I havent found any?
Imagine that on the same machine there are other running applications that are listening on predefined ports. (e.g. 8080, 21, ...) - what is the best way to exclude the ports in jsocks?
Any hints and explanations are welcome!
Edited by: krafzig on Oct 28, 2008 8:27 AM

You only need one port.OK, initially I need only - lets say port 1080.
But then for example a client c1 requests a bind. The socks server opens a new socket for the client (e.g. on 50000) and tells the client on which port on the socks he is now listening, right?
In order to allow client c2 to connect to this new port the firewall needs to allow access to the new port (50000) first.
So there are more ports - there might be hundrets or thousands, right?
If its on a seperate box it doesn't matter. If its on the same box it should manage different ports.yes, different ports!
However, it should allow access to the ports that the socks opens for the clients, right?
Optimal would be a dynamic adaptation of the firewall, whenever the socks opens a new port the firewall grants access.
I assume its configurable, so its up to you.No, unfortunately it is not configurable. At least I havent found anything.
Probably won't either.???
Don't use ports already used. `netstat -a` will list all the used port on that box. obviously, and Jsocks allows to configure reusage of ports by flag true/false;
Has anybody setup a socks proxy with a firewall and knows how this is/should be done normally?
Has anybody experiences with JSocks?

Dynamic ports and firewall?

Hello:
I'm running a firewall and want to back it up using OSB. I'm trying to find out the range of dynamic ports that OSB uses (in addition to 400 and 10000) so I can open them up.
I can't find it anywhere in the documentation. I only find this reference as part of the Windows installation section:
If your Windows host is protected by a firewall, the firewall must be configured to permit Oracle >Secure Backup daemons on the host to communicate with the other hosts in your administrative >domain. Oracle Secure Backup includes daemon components that listen on ports 400 and 10000, >as well as other dynamically assigned portsWe can allow full access from our backup server to all ports on the firewall, but that is NOT a preferred solution! :-)
Thanks!

The range of port numbers should be above 20,000 but below 32,000 (ie 20,000 - 20,024) in addition to ports 400 and 10000.
The number of ports needed is calculated by multiplying the # of concurrent OSB activities by 5. Or, by the # of tape drives (inside the firewall) and the # of clients (outside the firewall).
Steps:
1) On Firewall, open desired range of ports plus 400 and 10000.
2) Edit the /etc/services file on both the admin host and the client to use:
ob-daemon-low <port low #>/tcp
ob-daemon-high <port high #>/tcp
These parameters are based on ports you select for OSB (from step #1 above).

Dynamic port use

My application uses RMI by having a server-proxy-service system to enable the classes on the user's side to access functions on the server side that access the oracle database.
I have recently been asked for a specification of the ports that our application uses.
I have run a "netstat" on my server and saw that the user's computers connect to the server on a dynamic range of ports, while the only interaction the users have with the server is via RMI.
Is RMI responsible for the connection of dynamic ports to the server?
If so, is there anyway to set it use only certain ports?

If so, is there anyway to set it use only certain ports?Yes. You can specify the port when constructing a Registry with LocateRegistry.createRegistry, and when exporting a remote object via the constructors of UnicastRemoteObject or UnicastRemoteObject.exportObject(). If you don't specify the port here, or specify zero, a system-allocated port will be used.

ORMI port ranges problem

From the following Guide:
http://download-west.oracle.com/docs/cd/B14099_19/core.1012/b13995/ports.htm#ASADM301
"When changing an OC4J port number, you typically specify a new port range. The range may be a simple port range (12501-12600), a comma separated list of ports (12501, 12504, 12507), or a combination of both (12501-12580, 12583, 12590-12600). By default, the ranges contain 100 ports. If you specify a range that is too narrow, you may encounter problems when starting OC4J instances. The AJP and RMI port ranges are required; the others are optional."
The problem I'm having is that an external client application needs to know the ORMI port of an OC4J instance running on OAS; but the port can by dynamic. I was thinking of just removing the port range (ex: set it to 3203-3203), but the above warning concerns me...
Any thoughts?

Good question.
What we do in this case is to use a JNDI URL that uses the fixed OPMN service to locate the port for the target OC4J instance. This insulates you from any movement in the ORMI port on the OC4J instance when its started.
See the EJB doc here --
http://download-west.oracle.com/docs/cd/B14099_19/web.1012/b15505/access.htm#i1019709
Location
All ports, including the RMI port, are dynamically set by OPMN when each OC4J instance starts. When you specify the following URL in the client JNDI properties, the client-side OC4J retrieves the dynamic ports for the instance, and chooses one from the list for communication.
java.naming.provider.url= opmn:ormi://<opmn_host>:<opmn_port>:<oc4j_instance>/<application-name>
The OPMN host name and port number is retrieved from the opmn.xml file. In most cases, OPMN is located on the same machine as the OC4J instance. However, you must specify the host name in case it is located on another machine. The OPMN port number is optional; if excluded, the default is port 6003. The OPMN port is specified in opmn.xml.
The reason we have a port range is
1. To support multiple installations on the same server, so that ports don't conflict.
2. To support the situation where you run multiple processes for the OC4J instance definition (so they all need different ports running on the same machine)
If you don't run into any of these, then setting a single port in opmn.xml for ORMI is fine and you can then configure the client to use the fixed, known port.
cheers
-steve-

Active Directory Dynamic Ports clarification

Hi All,
Please enlighten me about my question:
Scenario:
We have a Windows server 2008R2 Standard edition running Active directory services in a windows server 2003 forest functional level
(we use 2003 FFL because some of our client computers were on XP and we're running MS dynamics)
Question:
Does the dynamic port setup will depend on the version of windows server solely or will it affect by the windows servers' forest functional level?
Sorry for this question, but I strongly knew that dynamic ports setup will depend on windows server version itself, but I just want to make it sure. :D
My reference:
http://blogs.technet.com/b/askds/archive/2007/08/24/dynamic-client-ports-in-windows-server-2008-and-windows-vista-or-how-i-learned-to-stop-worrying-and-love-the-iana.aspx

Hiya,
it's based on the O/S and not related to domain architecture.
Basically it is the server that "decides" which RPC port range it will be using. As the article states, it has been changed for 2008 and up.

Dynamic port configured for FILE adapter is not working

Hi,
I have a simple dynamic port in an orchestration that writes a file to a file location. Here is the configuration
================
FilePort(Microsoft.XLANGs.BaseTypes.Address) = "FILE://c:\\TestFolder\\Out";
FilePort(Microsoft.XLANGs.BaseTypes.TransportType) = "FILE";
================
When I run this orchestration, the dynamic port does not write the file to the folder, however I does not show any error either. It is always in "Ready to Run" state where the message is "Queued Awaiting".
I tried all sorts of combinations like FILE:// FILE:\\ File: file:// file:\\ etc... and also without the moniker, just c:\.... I get the same problem.
when I use a static port(subscribed to the same message) it works fine. When I use a static port ALONGWITH this dynamic port then both works fine !!! I receive 2 files.
but when I use only dynamic port it does not work!!
Anybody knows how to solve it.
THANKS IN AVANCE
PLEASE HELP
Surya

It could be becasue you 're not passing in the file name, Try something like this..
SndPort_Dynamic(Microsoft.XLANGs.BaseTypes.Address)=@"file://C:\Test\Try\Out\Test1.xml";
But even when you don't pass the file name, i was expecting the erro to be like:
The FILE send adapter cannot open file C:\TestFolder\Out\ for writing.
Details: The system cannot find the path specified.
But try with File Name and restart the host instance after the change.
Or use somehting like this:
FilePort(Microsoft.XLANGs.BaseTypes.Address)=@"file://C:\Test\Try\Out\\%MessageID%.xml";
FilePort(Microsoft.XLANGs.BaseTypes.TransportType) = "File";
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful.

Unable to Save in Port Range Forwarding

I'm using the BEFW11S4 wireless router and am unable to save the new port range forwarding settings I have entered. Everytime I click Save Settings, I receive a box which reads:
"The server 192.168.1.1 at Linksys BEFW11S4 V4 requires a username and password.
Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)."
When I enter the same u/p that I used to access the router in the first place, it rejects and keeps bringing up the log in screen.
I cannot get the port range forwarding to save at all due to this.
Does anyone have any suggestions?
Thank you!

try remembering the password you used for first time while installing the router .... if not then use default password admin with out any username ....
If still not working then you need to reset the router ....

Data Transfer Port ranges in FTPS with SSL in File Adapter

Hi,
I would appreciate if you could give me pointers reagrding the below issue.
We are on XI 3.0.
For one interface, I have to configure the FTP File adapter to pick up the files from external server.
The connection is secure and should be FTPS with SSL.
I have the certificate from the 3rd party and have it installed on our XI development server.
The change has been made in our firewall to allow the connection to the host IP and port 21 which is configured at the target party as Explicit FTPS port and they have allowed access to our Server IP in their firewall.
I have configured other FTPS connections and they worked fine but this is the only one that has been giving me so much trouble.
The error i get today is:
Error occurred while connecting to the FTP server "60.234.48.106:21": java.net.SocketException: Connection reset
Yesterday, i got the below error:
Error occurred while connecting to the FTP server "60.234.48.106:21": iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier
The Vendor has suggested to get the firewall ports 21 and 28000:30000 (data transfer) to be opened.
He has also provided with the certificate passphrase additionally to the user name and password needed to make the connection.
When i tried the connection from the XI development to the vendor server, via the Telnet, it looked like it worked.
Please advice.
Regards,
Archana

>
Archana Singhai wrote:
> Hi,
> I would appreciate if you could give me pointers reagrding the below issue.
> We are on XI 3.0.
> For one interface, I have to configure the FTP File adapter to pick up the files from external server.
> The connection is secure and should be FTPS with SSL.
> I have the certificate from the 3rd party and have it installed on our XI development server.
> The change has been made in our firewall to allow the connection to the host IP and port 21 which is configured at the target party as Explicit FTPS port and they have allowed access to our Server IP in their firewall.
> I have configured other FTPS connections and they worked fine but this is the only one that has been giving me so much trouble.
> The error i get today is:
> Error occurred while connecting to the FTP server "60.234.48.106:21": java.net.SocketException: Connection reset
> Yesterday, i got the below error:
> Error occurred while connecting to the FTP server "60.234.48.106:21": iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier
> The Vendor has suggested to get the firewall ports 21 and 28000:30000 (data transfer) to be opened.
> He has also provided with the certificate passphrase additionally to the user name and password needed to make the connection.
> When i tried the connection from the XI development to the vendor server, via the Telnet, it looked like it worked.
> Please advice.
> Regards,
> Archana
1. Open the port ranges. FTPS usually requires you to open ports in the range of 65024 through 65535 for Passive FTP data
connections
2. Use the CA name in the certificate. it should be same as of the host name of the FTPS server

NAM 5.1 How to create Application with port range from cli?

Hello,
I can create new Applicaion with port range from GUI, but I can not do it from CLI
If I do it by CLI as a:
nam# application
nam# name mkst-cur-A
nam# match udp 16001-16009
nam# exit
then
nam# show application app-tag 268435576
custom:120 (268435576) mkst-cur-A
udp 16001
nam#
But if I do it by GUI and than
nam# show application app-tag 268435576
custom:120 (268435576) mkst-cur-A
udp 16001 - 16009
nam#
How to do it by CLI?

Hi Alexey,
Sure, the function you're looking for is in the ANALYSIS panel under the "CUrve Fitting" palette-- it's called "Linear Mapping". You will need to create the desired X channel prior to calling this function, though, so you will probably need to use the ANALYIS function "Generate Numeric Channel" in the "Channel Functions" palette.
Brad Turpin
DIAdem Product Support Engineer
National Instruments

OC4J_BPEL no port available from the port range

To All,
We could not start our BPEL Process Manager and OC4J_BPEL. We have shut down and restarted the Linux server repeatedly and re-running the IRCA. All stacks are running except the OC4J_BPEL and BPM.
We keep receiving the following message when we start the BPM:
BPEL Process Manager
OraBPEL : OC4J_BPEL no port available from the port range
OraBPEL : OC4J_BPEL - failed to start a managed process after the maximum retry limit
OC4J_BPEL
OraBPEL : OC4J_BPEL no port available from the port range
OraBPEL : OC4J_BPEL - failed to start a managed process after the maximum retry limit
Our OraBPEL is on a single HP NetServer LH6000 with Red Head AS 3.0, Oracle 10g DB and AS middle tier all in the same machine. The server was running a batch BPEL process. After running 2 hrs and process 12,000 records it was brought down by a single runtime exception. We were able to bring back the Oracle 10g AS middle tier but not the OC4J_BPEL instance. Any help would be appreciated.

I changed the OC4J_BPEL port from 3201 to 3211 fix the problem. It was conflicted with the home instance that is using port 3201. However that still can not get rid of the OC4J-BPEL failed to start a managed process after the maximum retry limit.

OBI11g intallation issue - Error in validating the port range for auto port

I am using the intaller to install OBIEE 11g on my machine. When I get to step 6, I receive the error messages below. Currently I also have OBIEE 10g on my machine so the ports may be already used.
Does any one know how I can resolve this issue? I previously installed both 10g and 11g on my old laptop but I can't figure out why I'm getting these errors this time.
INST-08010: Error in validating the port range for auto port allocation. At least 3 ports should be free within the range 9500-9699 for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 ports are free within the range 9500-9699 for auto port allocation to work correctly for the Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
INST-08012: Error in validating the port range for auto port allocation. At least 3 consecutive ports should be free within the range 9500-9699 for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
Ensure that a minimum of 3 consecutive ports are free within the range 9500-9699 for auto port allocation to work correctly for the OPMN, in addition to 3 free ports required for Weblogic Components for BI (WLS Managed Server, Managed Server SSL and NodeManager).
INST-08010: Error in validating the port range for auto port allocation. At least 9 ports should be free within the range 9700-9999 for the BI System Components.
Ensure that a minimum of 9 ports are free within the range 9700-9999 for auto port allocation to work correctly for the BI System Components.

your hosts file have duplicate name that point to two different IP addresses.
10.37.29.1 test1.xyz.com
10.10.10.1 test1.xyz.com

ACE10 dynamic port range

Similar Messages

Maybe you are looking for