Assigned CPUs Decreased and Guest Server Hangs

Hi,
I created a physical virtual machine Oracle Enterprise Linux Server release 5.6 on Oracle VM server release 2.2.1. This is a DELL PowerEdge R710 with 2 4-cores Intel Xeon E5620 CPUs and 96GB memories. And the OLE is the only guest on the host. The first 12 virtual CPUs, 0-11, out of the 16 total available vcpu are assigned to the virtual machine and this configuration worked for more than 2 years.
The guest hang this morning. The number of the online vcpus dropped from 12 to 1 (used xm list to show the information) and the guest did not response at all. None of the ping, ssh, ftp or the applications on the server were OK. Though I connected to the console using a vncviewer client, the console was black at all. Nothing can be observed from the guest. The host is OK.
I connect to the host, destroied the guest (the connected vncviewer was disconnected automatically too), restarted it and it works as expected. The number of the online vcpus is 12 now.
The exactly same happened in April last year too.
I searched the Internet but could not find anything similar. Because I don't have a support of the virtual server, this is the only place I can think of for help.
Did anyone meet this before? Any suggestion on how to solve this problem, or how to find out the reason?
Regards,
Chiyuan

And the information of the guest is below.
[root@oravm ~]# xm list VMGuest -l
(domain
(domid 2)
(on_crash restart)
(uuid ac871ffe-887e-9934-7534-da476e364598)
(bootloader_args -q)
(vcpus 12)
(name VMGuest)
(on_poweroff destroy)
(on_reboot restart)
(cpus
((0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(0 1 2 3 4 5 6 7 8 9 10 11)
(bootloader /usr/bin/pygrub)
(maxmem 73728)
(memory 73728)
(shadow_memory 0)
(features )
(on_xend_start ignore)
(on_xend_stop ignore)
(start_time 1334703422.3)
(cpu_time 5142201.13696)
(online_vcpus 1)
(image
(linux
(kernel )
(superpages 0)
(videoram 4)
(device_model /usr/lib/xen/bin/qemu-dm)
(notes
(HV_START_LOW 0)
(FEATURES '!writable_page_tables|pae_pgdir_above_4gb')
(VIRT_BASE 2147483648)
(GUEST_VERSION 2.6)
(PADDR_OFFSET 0)
(GUEST_OS linux)
(HYPERCALL_PAGE 2164297728)
(LOADER generic)
(SUSPEND_CANCEL 1)
(PAE_MODE yes)
(ENTRY 2176119296)
(XEN_VERSION xen-3.0)
(status 2)
(state r-----)
(store_mfn 17639393)
(console_mfn 17639392)
(device
(vif
(bridge xenbr2)
(mac 00:16:3e:1b:66:ec)
(script /etc/xen/scripts/vif-bridge)
(uuid a2b74883-d709-123a-111d-d285cd87eb1d)
(backend 0)
(device
(vbd
(protocol x86_64-abi)
(uuid e8103d5b-0b30-89e5-8f0b-101d96d50558)
(bootable 1)
(dev xvda:disk)
(uname file:/OVS/running_pool/VMGuest/VMGuest_Root.dsk)
(mode w)
(backend 0)
(bootable 1)
(VDI )
(device
(vbd
(protocol x86_64-abi)
(uuid a4ef5167-0d28-ca9b-a6f2-66139215b687)
(bootable 0)
(dev xvdb2:disk)
(uname phy:/dev/sdb2)
(mode w)
(backend 0)
(bootable 0)
(VDI )
(device
(vbd
(protocol x86_64-abi)
(uuid f628699b-a06a-2372-5fba-48b3e5d11675)
(bootable 0)
(dev xvdc1:disk)
(uname phy:/dev/VmOS/VMGuest_Backup)
(mode w)
(backend 0)
(bootable 0)
(VDI )
(device (vkbd (backend 0)))
(device
(vfb
(vncunused 1)
(location 0.0.0.0:5900)
(vnc 1)
(xauthority /root/.Xauthority)
(uuid cd6fef1a-a380-f06b-130f-4de82844ea00)
(device
(console
(protocol vt100)
(location 2)
(uuid e587fb0e-a124-9770-d4ad-a08fb7fce68a)
)

Similar Messages

  • NAC guest server hangs and guest portal is not working

    Hi all ,
    Our guest nac server NAC3315 is oftenly getting hung state . And our guest wireless network is not working . We are able to ping the NAC server but web page is not opening for the clients if they connected to guest network.
    Any clue on this ....
    Thanks!,
    Regards,
    Vijay.

    All  actions within the Cisco NAC Guest Server are logged into the database.  This enables you to see any action that occurred as part of the normal  operating process of the application.
    To access the system log from the administration interface select Server > System Log from the left hand menu
    Please check the Error Logs for troubleshooting of NGS

  • XDK 9i Issues : setXSLT - NullPointerException And RMI Server hangs

    Present Scenario :
    JDK 1.3
    Oracle DB : 8.1.6
    JDBC Driver : OracleThin.jar
    XML Parser : xmlparserv2.jar : ( size = 1121488 )
    XML-SQL utility : xsu12.jar : ( size = 180522 )
    We use RMI with JDBC. RMI server object connects to database , uses xsu12.jar and xmlparserv2.jar to convert data into XML. Servlet connects to RMI server and gets this XML. Everything works fine.
    Problem Scenario :
    Since this parser does not support JAXP , I downloaded XDK 9i from oracle site.(9.2.0.1.0 - Dated 01/31/02 ) . After extracting , I replaced xmlparserv2.jar and xsu12.jar with this new ones. And problem started. There are 2 problems :
    A. setXSLT( String, String ) throws NullPointerExcpetion
    B. When I commented setXSLT method, RMI server completes execution of remote method which can be verified from Log. But it never returns , so client gets blocked. When RMI server is stopped by doing ctrl-C , client gets correct XML document.
    Then I installed latest JDBC2.0 driver for 8.1.6 from site which is classes.zip. This also resulted in to same problems mentioned above. But it did work fine wirh earlier version of xmlparserv2.jar and xsu12.jar. Just FYI : I noticed significant size difference betwenn new and old jars.
    New xmlparserv2.jar : size = 660421
    New xsu12.jar : size = 473249
    Thanks for patience
    What could be possible solution ?

    Thanks Jinu
    Problem A of setXSLT throwing NullPOinter Exception is solved. However problem B of RMI server not returning still there.
    Just as an FYI , following is system
    DB : oracle 8.1.6
    xmlparserv2.jar : 9i xdk
    xsu12_816.jar : 9i xdk
    classes12.zip : JDBC2.0 for 8.1.6
    When RMI server is stopped ( ctrl- C ) , client gets correct XML document alongwith proper Node names as set in setStyleSheet( String, String).

  • Why can't I assign hardware and guest os profiles to servers in the new SCVMM 2012 Service Templates?

    Trying to learn SCVMM 2012, but I'm confused about how Guest OS and Hardware Profiles work with the new 2012 Service Templates.
    I create a Hardware Profile and a Guest OS Profile. Then I open the Create VM Template wizard. In this wizard I can assign the Hardware and Guest OS profiles I created under the Configure Hardware and Configure Operating System steps in the wizard.
    If I open the new Service Template wizard, select a Single Tier Server (for example), open the Service Template Designer and go to the properties of the server I find under Hardware Configuration and OS Configuration I cannot assign my Hardware and Guest OS
    profiles to the server.
    Why is this? It seems like extra work to have not be able to assign these profiles to servers in a service template. Is there something fundamental I'm missing here?

    I have the same issues with the equipment I maintain. Two things are consistent that I see between this forum and my set up. I had 10.5 on all our Macs and each of them could connect with out issue to the shares on a windows xp machine. I have three Mac computers I am working with. 1. My main computer a MacBook Pro 2.4ghz core 2 duo, an Intel iMac, and an older Mac Pro G5 running OS 10.5 server.
    I have another server running kiosk or signage displays that is a windows xp machine. All of my macs could access the windows xp machine by clicking on it and authenticating to it and then the shares will show up.
    I upgraded my MacBook Pro first to 10.6 and have been unable to connect to the windows shares ever since. Keep getting Authenticatoin failure. So my work around is to transfer files to the 10.5 macs and then screen share one of them and access the windows share from them. Spoke with Apple support and they could not help and said it was a know issue but did not have a solution.
    Last week I upgraded the iMac to 10.6 and it too, now will not authenticate to the windows shares.
    Here are the strange things... I can take my macbook pro home and access all windows shares on my home networked computers. I even took the windows xp machine home from work to test it and I was able to connect to the shares without issue from my Macbook pro.
    Two things stand out ... you mentioned a Cisco router and we use a Cisco router at work. Also, both of us have upgraded to 10.6 and authentication fails at that time.
    Problem is between OS 10.6 and the Cisco routers I believe. I am not sure how to fix the issue though.

  • CSA and Windows Server 2008 hangs

    We're having a problem where we install CSA 6.0.2.130 on a Windows 2008 server running IIS and the server hangs after login.  Screen goes blank, mouse pointer is there but the system is unresponsive.  It is possible to start Task Manager and it shows almost all services stopped (but CSA running).  Stopping CSA service returns function to the server.  However, after all the services have started, if we try to start the CSA, then the server hangs again.
    Looking in the CSA log files doesn't show anything major.  There are some references to the management center being not reachable but they resolve themselves.
    Any ideas where to look?  We've tried disabling A/V, reinstalling, etc.

    This sounds potentially like bug CSCtg98849.  There is a workaround that should allow you to continue running with CSA enabled:
    Edit the "Base - Digital Signing of Downloaded Executables" rule module and disable the file access control "Send downloaded executables for scanning if opened for read".
    Save the change.
    Generate rules and deploy to affected hosts.
    [Wrap text]  [Edit this enclosure]
    Release-note: Modified 06/02/2010 07:41:44 by scfringe
    [Unwrap text]  [Edit this enclosure]
    Release-note: Modified 06/02/2010 07:41:44 by scfringe
    Scott

  • Server hangs and session variable value not maintained.

    dear all,
    this is exteremetly urgent. i upgraded my tomcat to 4.1.24.but i have problems running the same code which was working earlier, i get null in the value of session variable. and also get the following error
    ////////////////error got /////////////
    Compile failed; see the compiler error output for details.
    at org.apache.tools.ant.taskdefs.Javac.compile(Javac.java:842)
    at org.apache.tools.ant.taskdefs.Javac.execute(Javac.java:682)
    at org.apache.jasper.compiler.Compiler.generateClass(Compiler.java:317)
    at org.apache.jasper.compiler.Compiler.compile(Compiler.java:370)
    at org.apache.jasper.JspCompilationContext.compile(JspCompilationContext
    .java:473)
    at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper
    .java:190)
    at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:2
    95)
    at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:241)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
    icationFilterChain.java:247)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
    ilterChain.java:193)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
    alve.java:256)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:643)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
    a:480)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextV
    alve.java:191)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:643)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
    a:480)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
    at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:
    2415)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.j
    ava:180)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:643)
    at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatche
    rValve.java:171)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:641)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.j
    ava:172)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:641)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
    a:480)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineVal
    ve.java:174)
    at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContex
    t.invokeNext(StandardPipeline.java:643)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.jav
    a:480)
    at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
    at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:22
    3)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java
    :594)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proce
    ssConnection(Http11Protocol.java:392)
    at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java
    :565)
    at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadP
    ool.java:619)
    at java.lang.Thread.run(Thread.java:536)
    ///////////////end of error messsge ////////////
    the code where i am getting this message is as follows
    <%@ page session="true"%>
    <HTML>
    <HEAD><TITLE> LOGGED IN ok</TITLE> </HEAD>
    <%@ page import="java.sql.*" %>
    <%! // declaring variables
    String s = "";
    java.sql.ResultSet rs=null;
    java.sql.Connection con;
    java.sql.Statement stmt=null,stmt1=null;
    String username = "";
    String password = "";
    String Ousername = "";
    String Opassword = "";
    String changepass="";
    String usertype ="",useremail="",EmpName="";
    %>
    <body>
         <%      
         try
         //set session for max of 100 milliseconds
         // session.setMaxInactiveInterval(10000);
         Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
         con = java.sql.DriverManager.getConnection("jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)};" +"DBQ=c:/vishal/HelpDesk.mdb;DriverID=22;READONLY=false","","");
              stmt = con.createStatement();
              s = "select * from LoginUser";     
         username = request.getParameter("LogonId"); //get this through prev. form
         password = request.getParameter("txtPassword");
         out.println(username + " " + password);
         // make explicitly to lower case
         username = username.toLowerCase();
         rs = stmt.executeQuery(s);               
                        while(rs.next())
                        //getting data from database
                        Ousername = rs.getString("EmpName");
                        Opassword = rs.getString("Password");
                        useremail = rs.getString("EmailId");
                        usertype = rs.getString("UserType");     
                        if(Opassword.equals(password) && Ousername.equals(username)) //found match correct entry
                             changepass = request.getParameter("PasswordNew");
                             if(changepass != null)
                             stmt1 = con.createStatement(java.sql.ResultSet.TYPE_SCROLL_INSENSITIVE,java.sql.ResultSet.CONCUR_UPDATABLE);     
                             s = "update LoginUser set Password = '" + changepass + "' where EmpName = '" + username +"'";
                             out.println(s);
                             stmt1.executeUpdate(s);
                             stmt1.close();
                             if(usertype.equals("User") == false)//ie admin
                             session.setAttribute("username",username);     
    ************************this value not maintained *********************
                             session.setAttribute("useremail",useremail);
                             session.setAttribute("usertype",usertype);
    ************************this value not maintained *********************
                             //closing connections
                             %>                                                       
                                  <jsp:forward page= "ComplaintType.jsp" />                         
                             <%
                             else //user
                             EmpName = username;
                             session.setAttribute("EmpName",EmpName);                         
                             session.setAttribute("useremail",useremail);
                             //closing connections
                             %>
                             <jsp:forward page="ComplaintCategory.jsp" />
                             <%     
                             }//end if
                        }//while loop                                   
                        //first closing connections then forwarding                    
         %>
                        <jsp:forward page="InvalidLOGIN.jsp" />
                        <%     
                        ///rs.close();
                        ////closing
                        //stmt.close();
         // con.close();
         }//try
              catch(Exception ep)
              out.println(ep);
              System.exit(1);
         %>
    </BODY>
    </HTML>

    hi all,
    thanx a lot for your help,specially hari52
    hari52 strangely enough the code started working,but
    now i have another problem
    after a while my server hangs or gets shutdown ,a
    message is shown as
    "java.exe has generated error and will be shutdown"
    i know that more connections can be a prob. but i
    make sure that connections r closed on each page,also
    i am a newbie and do not have the time at present to
    learn abt. connection pool ,can this problem be
    solved easily?
    it would be a great help again on your part,
    thanx again,You remove the System.exit(1) line from the code inside the catch block
    and try again. That's the reason tomcat getting down. System.exit(1) should not be used inside jsp. it will make the underlaying Servlet Engine to shutdown.

  • Connect To Server Hangs Before Prompting For Name And Password

    Hi Everyone.
    Connect to Server hangs for 25 seconds before prompting for name and password.
    I am trying to access a share on a Windows 2008 R2 domain controller via a Mac running 10.6.8 (Snow Leopard) using SMB.
    Example: smb://192.168.101.11/sharename
    Once connected, browsing is fine - it's just the connecting that takes a long time.
    I have specified port 139 and login name, I have disabled IP6 on the Mac, the Mac and Windows 2008 server are on the same LAN and are wired.
    Again, once connected, browsing is fine - it's just the connecting that takes a long time.
    Any help would be appreciated.
    Damian

    Something to add ...
    Connecting to a Windows 2008 stand-alone server outside of the domain (e.g., workgroup) does not have the same problem - the name and password prompt shows immediately.

  • NAC Guest Server and WLC's

    Just wanted to know if this will work or not...
    I was looking at a design from a client and they had two CAM and CAS plus a Guest server. My client wants to use the equipment above for guest access. The problem I'm having is that I'm building a wireless network with guest anchor WLC's in the DMZ. So my wireless users will be tunneled to the DMZ controller. Also, the WLC can have a splash page uploaded to it and also authenticate users locally in the DB. They don't want any remediation, just authentication.... is this a waste of money or would would actually implement this?

    I've some (very) basic questions.
    Let's say guest vlan = x
    1)vlan x should be created on the foreign controllers as on the anchor controller, with the same properties
    2)on the anchor controller a dynamic interface has to be created acting as default gateway for the guest clients.
    3)it's advised to place the guest server in the guest vlan? Eg. Somewhere in the server farm?
    4)Once traffic coming from the guests is arrived at the anchor controller. (I know to less of WLC ;)) Will it forwarded with as source IP, the IP of the anchor controller towards the anchor default gateway (firewall or internet router?)
    4)authentication: user connect to SSID guest and opens a browser. The user is redirected and a login page is displayed. Is this page downloaded from the anchor controller? I think it is and pushed via WCS. So Guest NAC server has nothing to deal with this page? Correct?
    The anchor controller polls the nac guest server with the given credentials. Anchor controller forwards the credentials to the NAC guest server. The NGS replies with authenticated or not. If authenticated. The guest can browse. Probably on regular base, the anchor controller will poll the NAC guest in order to check if he's still authenticated and if enabled pass information to the NAC guest for accounting. Is this somehow ok?
    I've found to open the following ports in the firewall:
    UDP 97 for EoIP
    UDP 16666 for intercontroller traffic
    and 1812/1813 for Radius.
    Thanks in advance

  • NAC guest server and pre-configured duration of accounts

    There seems to be a bug in the way the NAC guest server handles the pre-configured duration of guest accounts.
    I have followed the manual and I did:
    - Configured 3 durations (24h, 48h and 1 week) under the templates/accounts/accounts durations.
    - And set "maximun duration of account" under User Groups
    As I understand I should now be able to select one of the three configured durations when I login as a sponsor.
    However I only get the number which I specified under User Group.
    The odd thing is that if I change the Maximum duration under User Group, I get this as the only choice (e.g. 14 days).
    Have other experienced this?
    Best regards,
    Steffen Lindemann

    You can use any one of the option ie number of days or number of hours.
    For days;
    Authentication > User Groups > Add Group | Edit Group includes two new settings for Number of days in the future the account can be created and Maximum duration of account (in days)
    For hours:
    User Interface > Templates > Add Template | Edit Template > Accounts > Account Duration
    http://www.cisco.com/en/US/docs/security/nac/guestserver/release_notes/11/gsrn110.html

  • RHEL4U4 server hang up once I start guest VM

    Hi,
    My RHEL4U4 server hang up once I start VM with command xm create vm.cfg
    Environment:
    OS: RHEL4U4
    Xen Kernel: xen-3.1.0-13(xen-release-0-99.7), which was installed manually by myself
    xen_caps : xen-3.0-x86_32p hvm-3.0-x86_32 hvm-3.0-x86_32p
    cfg file like:
    builder = 'hvm'
    device_model = '/usr/lib/xen/bin/qemu-dm'
    disk = ['file:/OVS/running_pool/VM_NAME/System.img,hda,w',
    +'file:/OVS/running_pool/VM_NAME/disk01.img,hdd,w',+
    +',hdc:cdrom,r',+
    +]+
    kernel = '/usr/lib/xen/boot/hvmloader'
    memory = '2048'
    name = 'VM_NAME'
    on_crash = 'restart'
    on_reboot = 'restart'
    pae = 1
    serial = 'pty'
    vcpus = 1
    vif = ['bridge=xenbr0,mac=XX:XX:XX:XX,type=ioemu']
    vnc = 1
    vncconsole = 1
    vnclisten = '0.0.0.0'
    vncpasswd = '********'
    vncunused = 1
    As this VM image was copied from another OVS2.1 machine(xen_caps: xen-3.0-x86_64 xen-3.0-x86_32p hvm-3.0-x86_32 hvm-3.0-x86_32p hvm-3.0-x86_64, not sure whether this is the root cause)
    Is there any way to resolve the problem?

    802680 wrote:
    OS: RHEL4U4
    Xen Kernel: xen-3.1.0-13(xen-release-0-99.7), which was installed manually by myselfWe don't support Xen on RHEL4 at all. And this version is really old. You should run Oracle VM 2.2.2 (Xen 3.4) or Oracle VM 3.0 (Xen 4.0) instead.

  • Guest Server and LDAPS

    I've recently setup our NAC Guest Server and cannot get Secure LDAP to work. The config guide says you can use ldap://server or ldaps://server. When I use ldap://server it works but doesn't when I change it to ldaps. Our LDAP server has a Verisign cert. Any ideas?
    Thanks,
    -Dusty

    I've some (very) basic questions.
    Let's say guest vlan = x
    1)vlan x should be created on the foreign controllers as on the anchor controller, with the same properties
    2)on the anchor controller a dynamic interface has to be created acting as default gateway for the guest clients.
    3)it's advised to place the guest server in the guest vlan? Eg. Somewhere in the server farm?
    4)Once traffic coming from the guests is arrived at the anchor controller. (I know to less of WLC ;)) Will it forwarded with as source IP, the IP of the anchor controller towards the anchor default gateway (firewall or internet router?)
    4)authentication: user connect to SSID guest and opens a browser. The user is redirected and a login page is displayed. Is this page downloaded from the anchor controller? I think it is and pushed via WCS. So Guest NAC server has nothing to deal with this page? Correct?
    The anchor controller polls the nac guest server with the given credentials. Anchor controller forwards the credentials to the NAC guest server. The NGS replies with authenticated or not. If authenticated. The guest can browse. Probably on regular base, the anchor controller will poll the NAC guest in order to check if he's still authenticated and if enabled pass information to the NAC guest for accounting. Is this somehow ok?
    I've found to open the following ports in the firewall:
    UDP 97 for EoIP
    UDP 16666 for intercontroller traffic
    and 1812/1813 for Radius.
    Thanks in advance

  • NAC Guest Server and Multiple Guest SSID's/Splashpages

    Hi All,
    If I have multiple guest SSID's on a single controller and I use NGS as the Radius. How do I configure NGS to "send" the clients to differnet login pages corresponding to the SSID they came from.
    I can configure different splash pages in HotSpots section but how do I map the different SSID's from the controller to the different splash pages. Then I guess that raises the question when I generate guest users on NGS is it possile to only allow them associate to a specific SSID.
    TIA,
    Eoin.

    Hi Nicolas,
    Thanks for the reply. I can see that config on the WLC and have used it before where there is only a single guest SSID. What I dont know is if the NAC Guest server sees radius requests coming from different guest SSID's on the same WLC. How does the NAC Guest server apply the correct guest policy to that user. And when sponsors genereate guest accounts how do they specific which policy is to be applied to that guest so it can only get access to a specfic guest network/SSID I'm not sure where the "mapping" of accounts/splash pages/policies takes place on the NAC guest server. I've only ever set up NAC Guest when there has been a single guest SSID.
    Regards,
    Eoin.

  • Which VMware support Windows 7 as Host and Windows Server 2003 as Guest OS

    Folks,
    Hello. I need to install PeopleSoft PIA in Windows Server 2003.
    Because my laptop is preinstalled Windows 7 Home Premium Editon and cannot dual boot multiple Operating systems. I have to install VMware in Host Windows 7 and then install Windows Server 2003 as Guest OS for PIA.
    I have installed VMware Server 2.0.2 into Host Windows 7 and Windows Server 2003 as Guest OS. Everything works fine for a while. But VMware Server Home Page https://mylaptop:8333/ui cannot display any more.
    I have found that Windows 7 is not a supported Host Operating System for VMware Server 2 and strange thing might happen anytime. I found that "VMware Player 3" is fully supported Windows 7 as Host OS but is not supported Windows Server 2003 as Guest OS.
    Does any folks know which VMware product support Windows 7 as Host OS and Windows Server 2003 as Guest OS ?
    Many thanks in advance.

    Hi,
    Based on my research, I would like to suggest the following:
    1.   
    Ensure the printer is compatible with Windows 7 and Windows Server 2003 and the drivers are up-to-date.
    2.   
    Try the following method:
    Printers that use ports that do not begin with COM, LPT,
    or USB are not redirected in a remote desktop or a terminal services session
    Hope this helps. Thanks.
    Regards,
    Nicholas Li - MSFT
    That doesn't apply to Windows 7 Machines. I'm having the same problem as Acer_, I have a RDP Session from a Windows 7 Machine to a Windows XP machine and the local printer was available a few days ago but isn't anymore. The drivers are installed on both PC's
    and are compatible with Windows 7.

  • NAC guest server and guest proxy filtering issue.

    Hi all
    Continuing our issues log for the NAC guest server install, our toplogy and issue is as follows:
    We have a guest NAC server and a 4404 anchor controller successfully deployed in the DMZ, the anchor WLC has a mobilty anchor which is a WISM on the corporate network, DHCP services for guest clients are issued with no problems from the WLC in the DMZ. The first port of the DMZ controller is located on the DMZ and the second port directly connects to the firewall interface.
    All works correctly, DNS, DHCP, NTP, SNMP etc all work fine through the firewall.
    What options do I have to filter Internet access in this scenario, we have Websense and Nokia firewalls, don't think I can use WCCP as I have nowhere to place it, the second connection on the WLC is directly connected to the firewal so nowhere to intercept the traffic, our security team has tried some tricks on the Nokia to try to redirect the traffic on the firewall using a type of redirect, WPAD, I can't see as an option. Any ideas. If I place the second interface into the DMZ, could I use WCCP that way maybe, but won't traffic still have to go to the firewall??
    options please ??

    Well you will need to use a 3rd party certificate..  Here is a link to generate and install a 3rd party certificate on the WLC for the use with Web-Auth:
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml
    Here is a link for the NGS:
    http://tools.cisco.com/search/display?url=http%3A%2F%2Fwww.cisco.com%2Fen%2FUS%2Fdocs%2Fsecurity%2Fnac%2Fappliance%2Fconfiguration_guide%2F410%2Fcas%2Fcas41ug.pdf&pos=1&strqueryid=2&websessionid=RK88fQNWy8TCDUakpNGLOqZ
    The applicances are using a self generated Cisco certificate which of course is not a trusted certificate store in most of all operating systems.  So using a 3rd party certificate like RapidSSL, Verisign, etc will eliminate the certificate issue.

  • Jabber GUest Server 10.5 Install and deploy

    HI,
    I try  to install and deploy my first jabber guest Server 10.5 .What I see is that I should use a secure sip trunk to the ucm ? is this really needed ?,because if I use secure sip trunk I have to install certs
    Could I deploy it without secure sip trunk ? and only use self cert between expressway c and e ?
    Thanks for your Information
    Josef

    Hi Josef,
    It is fine to configure SIP trunk on UCM to be non-secure. 
    Between C and E you just need to make sure there are CA-signed certs installed.  Doesn't matter which CA, could be your own.
    Hope this helps.
    Mike

Maybe you are looking for

  • Launch a PDF from htmlText

    Hi - I need to launch a PDF in a blank window - or at least give the user the choice to "download" it from my app to their desktop. The attached code shows how I got it to work using getURL and an onRelease command...but I need to get the same to wor

  • Old Library New iphoto

    I had my old iphoto library on an external hard drive (someone set that up for me and I'm not sure how he did it) I just got iLife '08. What's the best way to import my old Library into my new iphoto? Thanks!

  • Blackberry ID Update issues

    I have Blackberry Tour 9630 and I was using Blackberry App World 2.0.0.38. I tried downloading apps on App world and it asked me to upgrade before I can do any downloads. After doing the upgrade to Blackberry World 4.3.0.32. I cannot logon using the

  • Why are keywords so complicated?

    I'm looking for a solution to manage all of our design assets in mid size digital agency. I started playing with Bridge last week hoping it would let me put simple tags on stock images we've purchased. It seems there are no tags - just keywords?! The

  • Adobe Flash Player 11.8.800.94 mac

    I have down loaded the update but at 50% it stops and asks for safari to be closed. i closed it down and it still thinks it is running. i am using osx 10.8.4