Authentication Host-Mode Multi-Auth not working

hi
In my lab environment I configured 802.1x with "Multi-Auth" mode for multiple clients on a single protected port to be authenticated agains Microsoft NPS AAA server.
Switch ports configured with Single-Host or Mult-Host options are working fine but "Multi-Auth" mode its not working. My hardware details and configurations are as follows
Catalyst Model = WS-C2960S-24TSL running IOS 12.2(55)SE2
Current configuration : 10423 bytes
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
aaa new-model
aaa group server radius NPS
server-private x.x.x.x auth-port 1645 acct-port 1646 key <removed>
aaa authentication dot1x default group NPS
aaa authorization network default group NPS
aaa session-id common
switch 1 provision ws-c2960s-24ts-l
authentication mac-move permit
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
interface GigabitEthernet1/0/1
switchport access vlan 5
switchport mode access
authentication order dot1x webauth
authentication priority dot1x webauth
authentication port-control auto
authentication timer reauthenticate 7200
authentication violation protect
dot1x pae authenticator
spanning-tree portfast
interface GigabitEthernet1/0/5
switchport access vlan 5
switchport mode access
switchport voice vlan 98
authentication host-mode multi-auth
authentication order dot1x mab webauth
authentication priority dot1x
authentication port-control auto
dot1x pae authenticator
interface GigabitEthernet1/0/7
switchport access vlan 5
switchport mode access
authentication host-mode multi-host
authentication order dot1x webauth
authentication priority dot1x webauth
authentication port-control auto
authentication timer reauthenticate 7200
authentication violation protect
dot1x pae authenticator
spanning-tree portfast
interface Vlan5
ip address x.x.x.x x.x.x.x
interface Vlan98
no ip address
radius-server vsa send accounting
radius-server vsa send authentication
end
My debug log for Authentication, dot1x and AAA is as follows.
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) dot1x_pm_mda_port_link_linkcomingup: voice VLAN 98, data VLAN 5
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Setting domain ALL to UNATHED
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Host access set to ask on unauthorized port since feature
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) host access set to 1 on GigabitEthernet1/0/5
*Mar 1 01:58:51.354: dot1x-ev(Gi1/0/5): Interface state changed to UP
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Enabling dot1x in switch shim
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Host access set to ask on unauthorized port since feature
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) host access set to 1 on GigabitEthernet1/0/5
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Host access set to ask on unauthorized port since feature
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) host access set to 1 on GigabitEthernet1/0/5
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Received clear security violation
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Received clear security violation
*Mar 1 01:58:51.354: AUTH-EVENT (Gi1/0/5) Link UP
*Mar 1 01:58:51.360: AAA/BIND(00000004): Bind i/f
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Assigned AAA ID 0x00000004
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Retrieved Accounting Session ID 0x00000004
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Allocated new Auth Manager context (handle 0x83000002)
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Initialising Method dot1x state to 'Not run'
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Adding method dot1x to runnable list for Auth Mgr context 0x
*Mar 1 01:58:51.360: AUTH-EVENT: auth_mgr_idc_add_record: Recv audit_sid=0000000000000002006CD0E0
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Sending START to dot1x (handle 0x83000002)
*Mar 1 01:58:51.360:     dot1x_auth Gi1/0/5: initial state auth_initialize has enter
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_initialize_enter called
*Mar 1 01:58:51.360:     dot1x_auth Gi1/0/5: during state auth_initialize, got event 0(cfg_auto)
*Mar 1 01:58:51.360: @@@ dot1x_auth Gi1/0/5: auth_initialize -> auth_disconnected
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_disconnected_enter called
*Mar 1 01:58:51.360:     dot1x_auth Gi1/0/5: idle during state auth_disconnected
*Mar 1 01:58:51.360: @@@ dot1x_auth Gi1/0/5: auth_disconnected -> auth_restart
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_restart_enter called
*Mar 1 01:58:51.360: dot1x-ev(Gi1/0/5): Sending create new context event to EAP for 0x4100002D (0000.0000.0000)
*Mar 1 01:58:51.360:     dot1x_auth_bend Gi1/0/5: initial state auth_bend_initialize has enter
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_initialize_enter called
*Mar 1 01:58:51.360:     dot1x_auth_bend Gi1/0/5: initial state auth_bend_initialize has idle
*Mar 1 01:58:51.360:     dot1x_auth_bend Gi1/0/5: during state auth_bend_initialize, got event 16383(idle)
*Mar 1 01:58:51.360: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_initialize -> auth_bend_idle
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_idle_enter called
*Mar 1 01:58:51.360: dot1x-ev(Gi1/0/5): Created a client entry (0x4100002D)
*Mar 1 01:58:51.360: dot1x-ev(Gi1/0/5): Dot1x authentication started for 0x4100002D (0000.0000.0000)
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Received handle 0x4100002D from method
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Context changing state from 'Idle' to 'Running'
*Mar 1 01:58:51.360: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Method dot1x changing state from 'Not run' to 'Running'
*Mar 1 01:58:51.360: dot1x-ev:DOT1X Supplicant not enabled on GigabitEthernet1/0/5
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): Posting !EAP_RESTART on Client 0x4100002D
*Mar 1 01:58:51.360:     dot1x_auth Gi1/0/5: during state auth_restart, got event 6(no_eapRestart)
*Mar 1 01:58:51.360: @@@ dot1x_auth Gi1/0/5: auth_restart -> auth_connecting
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_connecting_enter called
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): 0x4100002D:auth_restart_connecting_action called
*Mar 1 01:58:51.360: dot1x-sm(Gi1/0/5): Posting RX_REQ on Client 0x4100002D
*Mar 1 01:58:51.365:     dot1x_auth Gi1/0/5: during state auth_connecting, got event 10(eapReq_no_reAuthMax)
*Mar 1 01:58:51.365: @@@ dot1x_auth Gi1/0/5: auth_connecting -> auth_authenticating
*Mar 1 01:58:51.365: dot1x-sm(Gi1/0/5): 0x4100002D:auth_authenticating_enter called
*Mar 1 01:58:51.365: dot1x-sm(Gi1/0/5): 0x4100002D:auth_connecting_authenticating_action called
*Mar 1 01:58:51.365: dot1x-sm(Gi1/0/5): Posting AUTH_START for 0x4100002D
*Mar 1 01:58:51.365:     dot1x_auth_bend Gi1/0/5: during state auth_bend_idle, got event 4(eapReq_authStart)
*Mar 1 01:58:51.365: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_idle -> auth_bend_request
*Mar 1 01:58:51.365: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_enter called
*Mar 1 01:58:51.365: dot1x-ev(Gi1/0/5): Sending EAPOL packet to group PAE address
*Mar 1 01:58:51.365: dot1x-ev(Gi1/0/5): Role determination not required
*Mar 1 01:58:51.365: dot1x-registry:registry:dot1x_ether_macaddr called
*Mar 1 01:58:51.365: dot1x-ev(Gi1/0/5): Sending out EAPOL packet
*Mar 1 01:58:51.365: EAPOL pak dump Tx
*Mar 1 01:58:51.365: EAPOL Version: 0x3 type: 0x0 length: 0x0005
*Mar 1 01:58:51.365: EAP code: 0x1 id: 0x1 length: 0x0005 type: 0x1
*Mar 1 01:58:51.365: dot1x-packet(Gi1/0/5): EAPOL packet sent to client 0x4100002D (0000.0000.0000)
*Mar 1 01:58:51.365: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_idle_request_action called
*Mar 1 01:58:53.352: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/5, changed state to up
*Mar 1 01:58:54.353: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/5, changed state to up
*Mar 1 01:59:22.188: dot1x-sm(Gi1/0/5): Posting EAP_REQ for 0x4100002D
*Mar 1 01:59:22.188:     dot1x_auth_bend Gi1/0/5: during state auth_bend_request, got event 7(eapReq)
*Mar 1 01:59:22.188: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_request -> auth_bend_request
*Mar 1 01:59:22.188: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_request_action called
*Mar 1 01:59:22.188: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_enter called
*Mar 1 01:59:22.188: dot1x-ev(Gi1/0/5): Sending EAPOL packet to group PAE address
*Mar 1 01:59:22.188: dot1x-ev(Gi1/0/5): Role determination not required
*Mar 1 01:59:22.188: dot1x-registry:registry:dot1x_ether_macaddr called
*Mar 1 01:59:22.188: dot1x-ev(Gi1/0/5): Sending out EAPOL packet
*Mar 1 01:59:22.188: EAPOL pak dump Tx
*Mar 1 01:59:22.188: EAPOL Version: 0x3 type: 0x0 length: 0x0005
*Mar 1 01:59:22.188: EAP code: 0x1 id: 0x1 length: 0x0005 type: 0x1
*Mar 1 01:59:22.188: dot1x-packet(Gi1/0/5): EAPOL packet sent to client 0x4100002D (0000.0000.0000)
*Mar 1 01:59:53.016: dot1x-sm(Gi1/0/5): Posting EAP_REQ for 0x4100002D
*Mar 1 01:59:53.016:     dot1x_auth_bend Gi1/0/5: during state auth_bend_request, got event 7(eapReq)
*Mar 1 01:59:53.016: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_request -> auth_bend_request
*Mar 1 01:59:53.016: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_request_action called
*Mar 1 01:59:53.016: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_enter called
*Mar 1 01:59:53.016: dot1x-ev(Gi1/0/5): Sending EAPOL packet to group PAE address
*Mar 1 01:59:53.016: dot1x-ev(Gi1/0/5): Role determination not required
*Mar 1 01:59:53.016: dot1x-registry:registry:dot1x_ether_macaddr called
*Mar 1 01:59:53.016: dot1x-ev(Gi1/0/5): Sending out EAPOL packet
*Mar 1 01:59:53.016: EAPOL pak dump Tx
*Mar 1 01:59:53.016: EAPOL Version: 0x3 type: 0x0 length: 0x0005
*Mar 1 01:59:53.016: EAP code: 0x1 id: 0x1 length: 0x0005 type: 0x1
*Mar 1 01:59:53.016: dot1x-packet(Gi1/0/5): EAPOL packet sent to client 0x4100002D (0000.0000.0000)
*Mar 1 02:00:23.844: dot1x-ev(Gi1/0/5): Received an EAP Timeout
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): Posting EAP_TIMEOUT for 0x4100002D
*Mar 1 02:00:23.844:     dot1x_auth_bend Gi1/0/5: during state auth_bend_request, got event 12(eapTimeout)
*Mar 1 02:00:23.844: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_request -> auth_bend_timeout
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_timeout_enter called
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_request_timeout_action called
*Mar 1 02:00:23.844:     dot1x_auth_bend Gi1/0/5: idle during state auth_bend_timeout
*Mar 1 02:00:23.844: @@@ dot1x_auth_bend Gi1/0/5: auth_bend_timeout -> auth_bend_idle
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): 0x4100002D:auth_bend_idle_enter called
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): Posting AUTH_TIMEOUT on Client 0x4100002D
*Mar 1 02:00:23.844:     dot1x_auth Gi1/0/5: during state auth_authenticating, got event 14(authTimeout)
*Mar 1 02:00:23.844: @@@ dot1x_auth Gi1/0/5: auth_authenticating -> auth_authc_result
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): 0x4100002D:auth_authenticating_exit called
*Mar 1 02:00:23.844: dot1x-sm(Gi1/0/5): 0x4100002D:auth_authc_result_enter called
*Mar 1 02:00:23.844: %DOT1X-5-FAIL: Authentication failed for client (Unknown MAC) on Interface Gi1/0/5 AuditSessionID
*Mar 1 02:00:23.844: dot1x-ev(Gi1/0/5): Sending event (2) to Auth Mgr for 0000.0000.0000
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Received AUTHC_RESULT from dot1x (handle 0x83000002)
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Authc Result: no-response
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Method dot1x changing state from 'Running' to 'Authc Failed'
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Context changing state from 'Running' to 'Authc Failed'
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Existing AAA ID: 0x00000004
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Received AAA ID 0x00000004 from method
*Mar 1 02:00:23.844: AUTH-EVENT: Enter auth_mgr_idc_modify_keys
*Mar 1 02:00:23.844: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (Unknown MAC) on Interface Gi1/0/5 AuditSessionID 0000000000000002006CD0E0
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Sending AUTHZ_FAIL to dot1x (handle 0x83000002)
*Mar 1 02:00:23.844: dot1x-ev(Gi1/0/5): Received Authz fail for the client 0x4100002D (0000.0000.0000)
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Method dot1x changing state from 'Authc Failed' to 'Failed over'
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Sending DELETE to dot1x (handle 0x83000002)
*Mar 1 02:00:23.844: dot1x-ev(Gi1/0/5): Deleting client 0x4100002D (0000.0000.0000)
*Mar 1 02:00:23.844: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (Unknown MAC) on Interface Gi1/0/5 AuditSessionID 0000000000000002006CD0E0
*Mar 1 02:00:23.844: %AUTHMGR-7-NOMOREMETHODS: Exhausted all authentication methods for client (Unknown MAC) on Interface Gi1/0/5 AuditSessionID 0000000000000002006CD0E0
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) No more runnable methods
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Context changing state from 'Authc Failed' to 'No Methods'
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Building default attribute list for unresponsive client
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Signalling Authc fail for client 0000.0000.0000
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.844: %AUTHMGR-5-FAIL: Authorization failed for client (Unknown MAC) on Interface Gi1/0/5 AuditSessionID 0000000000000002006CD0E0
*Mar 1 02:00:23.844: AUTH-EVENT (Gi1/0/5) Client 0000.0000.0000, Context changing state from 'No Methods' to 'Authz Failed'
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Signalling Authz fail for client 0000.0000.0000
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) dot1x_switch_authz_fail: Called for GigabitEthernet1/0/5 and 0000.0000.0000
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Host access set to ask on unauthorized port since feature
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) host access set to 1 on GigabitEthernet1/0/5
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Setting domain DATA to UNATHED
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Authorized client count: 0
*Mar 1 02:00:23.849: AUTH-SYNC (Gi1/0/5) Syncing update for context (0000.0000.0000)
*Mar 1 02:00:23.849: AUTH-EVENT: Started Auth Manager tick timer
*Mar 1 02:00:23.849: AUTH-EVENT (Gi1/0/5) Started 'restart' timer (60s) for client 0000.0000.0000
*Mar 1 02:00:23.849: dot1x-sm(Gi1/0/5): Posting_AUTHZ_FAIL on Client 0x4100002D
*Mar 1 02:00:23.849:     dot1x_auth Gi1/0/5: during state auth_authc_result, got event 22(authzFail)
*Mar 1 02:00:23.849: @@@ dot1x_auth Gi1/0/5: auth_authc_result -> auth_held
*Mar 1 02:00:23.849: dot1x-ev:Delete auth client (0x4100002D) message
*Mar 1 02:00:23.849: dot1x-ev:Auth client ctx destroyed
*Mar 1 02:00:23.849: dot1x-ev:Aborted posting message to authenticator state machine: Invalid client

Multiauthentication Mode
Available in Cisco IOS Release 12.2(33)SXI and later releases, multiauthentication (multiauth) mode allows one 802.1X/MAB client on the voice VLAN and multiple authenticated 802.1X/MAB/webauth clients on the data VLAN. When a hub or access point is connected to an 802.1X port (as shown in Figure 60-5), multiauth mode provides enhanced security over the multiple-hosts mode by requiring authentication of each connected client. For non-802.1X devices, MAB or web-based authentication can be used as the fallback method for individual host authentications, which allows different hosts to be authenticated through different methods on a single port.
Multiauth also supports MDA functionality on the voice VLAN by assigning authenticated devices to either a data or voice VLAN depending on the data that the VSAs received from the authentication server.
Release 12.2(33)SXJ and later releases support the assignment of a RADIUS server-supplied VLAN in multiauth mode, by using the existing commands and when these conditions occur:
•The host is the first host authorized on the port, and the RADIUS server supplies VLAN information.
•Subsequent hosts are authorized with a VLAN that matches the operational VLAN.
•A host is authorized on the port with no VLAN assignment, and subsequent hosts either have no VLAN assignment, or their VLAN information matches the operational VLAN.
•The first host authorized on the port has a group VLAN assignment, and subsequent hosts either have no VLAN assignment, or their group VLAN matches the group VLAN on the port. Subsequent hosts must use the same VLAN from the VLAN group as the first host. If a VLAN list is used, all hosts are subject to the conditions specified in the VLAN list.
•After a VLAN is assigned to a host on the port, subsequent hosts must have matching VLAN information or be denied access to the port.
•The behavior of the critical-auth VLAN is not changed for multiauth mode. When a host tries to authenticate and the server is not reachable, all authorized hosts are reinitialized in the configured VLAN.
NOTE :
•Only one voice VLAN is supported on a multiauth port.
•You cannot configure a guest VLAN or an auth-fail VLAN in multiauth mode.
for more information :
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/dot1x.html

Similar Messages

Branchcache hosted mode Powershell commands not working - unable to get BC to do anything (2012R2)

Hi,
I am setting up a Branchcache environment in the lab. I've configured everything as per the MS guides, and using some knowledge imparted to me from a recent MCSA course on Server 2012R2.
However a couple of things caused an issue before I was able to even test. I'm running the lab in a segregated OU within our existing AD forest/domain. I'll go through what I've done so far:
Setup and configure content server (installed BC role, BC for network files feature)
Created share on content server and enabled caching
Setup and configured host server (installed roles etc)
Created GPO's for servers to enable BC and enable BC hashing for enabled shares and linked to lab servers OU
Created GPO's for clients to enable BC and linked to lab clients OU
Attempted to run the Powershell command Enable-BCHostedServer -RegisterSCP
When I run that I get the following error:
Enable-BCHostedServer : Could not access the Windows Firewall configuration.
At line:1 char:1
+ Enable-BCHostedServer -RegisterSCP
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_NetBranchCacheOrchestrator:root/StandardCi...cheOrchestrator) [Enable-BCHostedServer],CimException + FullyQualifiedErrorId : HRESULT 0x800706d9,Enable-BCHostedServer
So I thought I'd try and see if I could use the Get-BCStatus command. When I run that, I get the following error:
get-bcstatus : A general error occurred that is not covered by a more specific error code.
At line:1 char:1
+ get-bcstatus
+ ~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_NetBranchCacheStatus:root/StandardCi...anchCacheStatus) [Get-BCStatu
s], CimException
+ FullyQualifiedErrorId : MI RESULT 1,Get-BCStatus
I would like to point out that we DO NOT use Windows Firewall on our servers or client machines. There is no server firewall at all (prefer to use hardware firewalls) and our client use SEP.
The other thing I cannot get my head around is the certificate stuff. I cannot seem to find any definitive documentation that specifies whether or not it is required in an AD domain environment. All servers are automatically enrolled with a certificate from
our CA upon joining the domain, so I cannot understand why the hosted servers would need an additional certificate to authenticate with clients trying to push cached files.
In the lab, all servers are Windows Server 2012R2 and my test clients are Windows 8.1 and Windows 7 (which is what we have in the real-world).
Sufficed to say, I cannot get Branchcache to work in this lab.
Any help appreciated.

Update:
Upon some further research and reading, I've found a reference that lists the cmdlets that
Get-BCStatus uses.
I have managed to isolate the specific command that is causing it to generate an error - as shown in this screenshot.
As you can see, it looks like the configuration is set up correctly. However, it doesn't work, and the generic error message on the
Get-BCNetworkConfiguration cmdlet is irritating to say the least, since it leaves me at a dead end for troubleshooting.
Here is a screenshot of the output when running the command to enable the hosted mode and register the SCP:
Still at a loss here. My next attempt will be to strip down these servers and rebuild them off the domain and see if I get similar results.
Thanks,
Greg

Authentication host-mode

Dears,
i have strange issue with dot1x , when i configured the port as multi-domain it is working if IP phone connected.
if IP phone removed and PC connected directly to the switch port the PC can't work properly although it authentciated ,autorized and have the proper IP address.
when i changed to single-host it is working properly.
Thanks,
Ibrahim

Hello Ibrahim
This is really a strange issue. However please review the few steps which are given below:
Enable Multi-Auth host mode. Multi-Auth is essentially a superset of Multi-Domain Authentication
(MDA). MDA only allows a single endpoint in the data domain. When multi-auth is configured, a single
authenticated phone is allowed in the voice domain (as with MDA) but an unlimited number of data
devices can be authenticated in the data domain.
! Allow voice + multiple endpoints on same physical access port
authentication host-mode multi-auth
• Ensure that the RADIUS probe is enabled in Cisco ISE.
• Ensure that network access devices support an IOS sensor for collecting DHCP, CDP, and LLDP
information.
• Ensure that network access devices run the following CDP and LLDP commands to capture CDP
and LLDP information from endpoints:
cdp enable
lldp run
• Ensure that session accounting is enabled separately, by using the standard AAA and RADIUS
commands.
For example, use the following commands:
aaa new-model
aaa accounting dot1x default start-stop group radius
radius-server host auth-port acct-port key
radius-server vsa send accounting
Thanks:
Muhammad Munir

Multi gestures not working on iPad Air ios8 onwards

Multi gestures not working on iPad Air ios8 onwards. Turning gestures off then on works briefly. It's annoying. Is the Air bust? In for rep-air?

MMine has not been working ever since ios8 update. Apple blamed a game I have on the iPad, however this problem occurs on all apps including apple own brand.
ITs it's almost like they don't care
come on Apple sort this out !! It's been too long

Windows reports that the "USB-IF xHCI USB Host Controller" device is not working properly.

I have been receiving the following error and instructions to fix it for a long time now, prior to updating to Windows 8.1:
A device is not working properly
Windows reports that the "USB-IF xHCI USB Host Controller" device is not working properly.
Recommended solution to the problemUse Windows Update to check whether new device drivers are available. Proceed as follows:
Open Device Manager
Search in the device manager for the device whose driver you would like to update and double-click on the device name. You may first have to enable the "Show hidden devices" entry in the "View" menu.
Switch to the Driver tab, click Update driver and follow the instructions
When I follow the instructions and try to update the driver, I am told "The best driver software for your device is already installed."
How do I update the driver to stop receiving the error?
This question was solved.
View Solution.

I have solved the initial problem.
I found the solution on the Forum at http://h10025.www1.hp.com/ewfrf/wc/document?docname=c03926756&tmp_task=solveCategory&cc=us&dlc=en&la...

Paid subscription, but all products still in trial mode and does not work!

Hello!
I paid subscription, but all products still in trial mode and does not work! In Adobe ID manage page i don't see my subscription Screenshot “Adobe ID”
I received an email confirmation of my payment subscription. Order number 12984126025, my adobe id
[personal information removed... Mod - https://forums.adobe.com/docs/DOC-3731]
[This is an open forum, not Adobe support, please do not post personal information]
Why so?! This is very important! My current project at risk, I can lose money

Please try the below mentioned steps
1) Sign out of the Creative Cloud app
2) delete the opm.db file*
3) update to the latest version of the Creative Cloud app.
*On Windows 7, the opm.db file is located here:
C:\Users\YourUserName\AppData\Local\Adobe\OOBE
*On a Mac, go here:
[Userdir]:Library:Application Support:Adobe
~Deepak

I am creating webpages with frontpage and trying to make collapsible lists. The lists collapse and work correctly in "preview" mode, but do not work when accessed through firefox or explorer 8. Does anyone know what I am doing wrong?

I am creating webpages with frontpage and trying to make collapsible lists. The lists collapse and work correctly in "preview" mode, but do not work when accessed through firefox or explorer 8. Does anyone know what I am doing wrong?

Welcome to the 'wonderful' world of HTML5 e-learning.
In my view, from the issues I am seeing everywhere, HTML5 output from rapid e-learning tools such as Captivate is not ready for the kind of mobile device e-learning you want to develop.
Sorry to be pessimistic, but you may need to consider going back to the drawing board and coding it from the ground up.

I have a 4th gen iPod touch that won't power up! I tried all the traditional stuff. I want to know how to tell if the battery is good. itunes see's the ipod in recovery mode. Tried dfu mode and did not work. Any ideas?

I have a 4th gen iPod touch that won't power up! I tried all the traditional stuff. I want to know how to tell if the battery is good. itunes see's the ipod in recovery mode. Tried dfu mode and did not work. Any ideas? I can hear the PC beep when plugging it in! I suspect a bad battery and trying to charge it ina wall charger made it hot!

Try:
- iOS: Not responding or does not turn on
- Also try DFU mode after try recovery mode
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
- If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
- Try on another computer
- If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order. The appointment is free.
Apple Retail Store - Genius Bar

New 500 GB DVR Multi Room Not working!

I received the new 500 GB DVR this past Friday and set it up over the weekend. I'm having issues with viewing the new content on the new DVR with other STBs.
I've tried rebooting all the boxes and unplug each one but still get the same message that There was error connecting to the DVR STB. It's almost like the boxes are trying to still access the previous DVR. I tried to submit to Verizon Support on Twitter and it's been 3 days without hearing back if they had a solution. They tell me the same cut and paste message they give everyone to DM them on Twitter and here is the link to the form but then you don't hear back at all.
Has anyone else experienced issues with the new 500 GB DVR and Multi Room access?
Solved!
Go to Solution.

I switched from a 7216 MR-DVR to a 7232 and had tech support switch the MR feature to the new box, and have no problems. The STBs and DVRs talk to each other on their own little MoCA network. COAX or splitter issues can cause problems. Router not involved. I have MRDVR running and all routing functions are turned off on the Actiontec, and the the WAN ports are not even connected. The Actiontec is bridge LAN to MoCA. My router is a Linux box. The Actiontec does filter STB broadcast traffic from my LAN. It sees no MoCA traffic except for VOD and guide updates. All other UDP broadcast traffic is blocked on the bridge.
The hub errors people were seeing on the older 1.7 img were not HUB as in router related. The hub acts as the master on the MoCA network. Looking at the STB diagnostic menu D16 for "Connected Home" my DVR shows as the hub and is verified by the MAC address my Linux box assigns an IP address to. If you are having Multi Room DVR issues I can almost guarantee that it is not a router issue. Check and make sure you have good quality RG-6 coax and the proper splitter(s). Make sure there is no line loss or interference between the boxes. Also make sure Multi Room is assigned properly only to the DVR wanting to be the Multi Room DVR. It can not be assigned to more than one DVR. Now with the 1.9 image the rules may change, but I am not sure. Right now it is my understanding that only one DVR can be the HUB. Now that may be changing, we will need to wait and see. I believe it will change.
Now back to removing the old DVR and having Multi Room Enabled on your new DVR. You may want to have both DVRs connected so the feature can be disabled on the old DVR and enabled on the new. If you do not do this and reconnect the old DVR you may end up with two trying to act as HUBs. May not work well with 1.8. Not saying I know for sure, and my assumptions are only based on observations. But when I had Multi Room moved from old to new, both my DVRs were connected, and my system works great.

Host admin page does not work after insatlling YAST for suse9

I am using 10205 grid and when I try to go to admin tab in grid it say YAST patch needs to be installed which I did but still it does not work.
Anyone having same issue and how to resolve this. I also followed the metaling note for this issue which was a workaround for a bug but still it did not work.
Any ideas?
Thanks in advance.

I clicked on the link that was provided on the GC host admin page and downloaded the patch and as root applied it to the server without any errors. The following are the steps:
When I go the host page then administration tab it says the following:
Install the SUSE patch for YAST from http://oss.oracle.com/projects/yast
Downloaded the patch yast-EM-1.7.0-0.1.noarch.rpm
I've installed the patch and restarted the agent and the permissions on all the files are set to 755 according to note
414438.1
after applying the YAST patch I clicked finish and nothing happens. I've restarted ther OMS as well but no effect. I was wondering if anyone else having the issue?

W540 sleep mode buttons are not working

Hello,
My question concerns the non-functioning sleep mode buttons on my Lenovo W540 20BG.
In my current power management settings, the W540 is suppose to
enter sleep mode by pressing Fn4 or by pressing the round power button shortly.
However, either one of these methods do not work.
My computer does enter sleep mode when usign the Windows start menu
(Start->Shut Down -> Sleep).
Please advise how to fix the sleep mode buttons.
Thank you,
Nir
Solved!
Go to Solution.

Is this Windows 7, 8, or 8.1?
Can you try running the Power Management driver installer as administrator?
@Bauden,
Removing the sleep hotkey is dumb indeed; I'd like to have control over whether or not to sleep when the lid is closed (if I'm running something overnight and don't want the screen to come on at all).
Horrible gripe with this with my new Flex 14. Sincerely hoping this change is rolled back.
W520: i7-2720QM, Q2000M at 1080/688/1376, 21GB RAM, 500GB + 750GB HDD, FHD screen
X61T: L7500, 3GB RAM, 500GB HDD, XGA screen, Ultrabase
Y3P: 5Y70, 8GB RAM, 256GB SSD, QHD+ screen

Installing Firefox with windows 7 64bit mode just does not work.

I have windows 7 64bit mode. I cannot install firefox, it crashes all the time when I open it. I know the problem is because my windows 7 is in 64bit mode. Can you (firefox support) or someone on this forum provide the simple and easy steps of getting it to work. Also can you (firefox) hurry up and release a 64bit version. I'm using google chrome and crazy browser as they seem to have no problems at all. I really want to use firefox but it just won't set up for me because I'm running win7 64bit mode. If I was running win7 32bit mode I wouldn't be having any issues. Has anyone out there got a simple step by step solution for this? It it mind boggling that with todays technology no one has a simple fix for this issue. Help!!!!!
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.70 Safari/533.4

I have been running Win 7 64 bit on an HP Pavilion lap for several months. The whole browser thing has been a nightmare. My work involves heavy duty internet research. Firefox crashes every few minutes. There is no specific event I can find that kicks this off, but running the latest Flash Players and Adobe Reader makes it a lot worse. In fact, I had to set up the adobe reader to not run within the Firefox window. I had to back off to an old version of adobe Reader and Flash Player to accomplish this. I love Firefox. I was disappointed to have to uninstall it as it was impossible to run searches with it.
So then it proved to be that IE either version 8 or 9 was even worse. I could not keep it up long enough to run a search.
So I installed Chrome which has some nice features, but it also crashes, albeit more gracefully so I do not lose my place and it makes a quick recovery but there are many online applications where Chrome just does not work.
My son also has Win7 64 bit and says he is also having the same problems.
I want my Firefox back! Please fix it.

3D Mode Tool are not working in Photoshop CS6

Hello everyone. First, I want to tell you that I use ATI Radeon HD 6730M with 12.2 driver series. and I just found out that my Photoshop CS6 3D mode tool not working in advanced drawing mode, like this.
As well as normal drawing mode. Please help to fix this problem.

When you changed the options in the Preferences - Performance - Advanced Options section, did you close Photoshop and restart it before testing? That's necessary or you won't be testing what you think you are.
Assuming you have done so, if you have exhausted the various GPU options, I don't think you have any other options beyond waiting for a new and improved display driver. I suppose it's possible the Adobe folks might improve their code to make it work better on different setups, but generally speaking these kinds of things seem to be glitches in the display driver.
I just tried a similar operation to what you're doing on my Radeon HD 5670 with Catalyst 12.6 drivers and it seems to work okay.
-Noel

Why fms3 edge mode can't not work like fms2 ?

Step 1:
Yesterday,I use edge mode with fms2.05 , and I do like this
URL (
http://www.adobe.com/devnet/flashmediaserver/articles/webcasting_fme_print.html)
PC A run FME 2.5 (flash media encode )+ FMS 2.05 (orgin mode
,use install by default setup)
IP address:192.168.1.1 OS :windows xp sp2
PC B run FMS 2.05 (edge mode ,use install by default setup
and modify C:\Program Files\Adobe\Flash Media Server
2\conf\_defaultRoot_\_defaultVHost_\Vhost.xml , "local"
->"remote" )
IP address :192.168.1.2 OS: windows 2003 sp1
PC C run a viewlive.swf made by me like this:
nc = new NetConnection();
nc.connect("rtmp://192.168.1.2/?rtmp://192.168.1.1/live");
nc.onStatus = function(info) {
if (info.code == "NetConnection.Connect.Success") {
createNetStream(this);
createNetStream = function (nc) { ns = new
NetStream(nc);myvid.attachVideo(ns);myvid.smoothing =
true;ns.play("test", -1);};
I can see the live webcasting on PC C, all think is OK !
Step 2
Today , I install fms3.02 instead of fms2.05 in PC A and PC
B, do the same thing like Step 1
but run the viewlive.swf can't see anything.
I check PC B : C:\Program Files\Adobe\Flash Media Server
3\logs\core.00.log
2008-05-24 18:33:14 3480 (i)2581231 Core (3480) connected to
admin. -
2008-05-24 18:33:14 3480 (i)2581246 Core (3480) sending
register cmd to edge. -
2008-05-24 18:33:14 3480 (w)2631008 Asynchronous I/O
operation failed (Failed to attach to completion port:
参数不正确。 87). -
2008-05-24 18:33:15 3480 (i)2581234 Core (3480) connection to
admin accepted. -
Asynchronous I/O operation failed (Failed to attach to
completion port: 参数不正确。
87). Why ?
Should anybody can help me?

This works. I change the visible property instead of using
removeChild, though I don't know why yours does not work.
<?xml version="1.0" encoding="utf-8"?>
<mx:WindowedApplication xmlns:mx="
http://www.adobe.com/2006/mxml"
layout="absolute">
<mx:states>
<mx:State name="state2">
<mx:SetProperty target="{popupbutton1}" name="visible"
value="false"/>
</mx:State>
</mx:states>
<mx:Script>
<![CDATA[
[Bindable]
public var treeXml:XML=
<Child>
<Child fatherCategoryId="0" categoryName="expenses"
categoryId="38">
<Child fatherCategoryId="38" categoryName="eat"
categoryId="40"/>
</Child>
<Child fatherCategoryId="0" categoryName="income"
categoryId="39">
<Child fatherCategoryId="39" categoryName="salary"
categoryId="41"/>
</Child>
</Child>
]]>
</mx:Script>
<mx:Button x="84" y="32" label="state1"
click="currentState=''"/>
<mx:Button x="166" y="32" label="state2"
click="currentState='state2'"/>
<mx:PopUpButton id="popupbutton1" height="24" width="150"
textAlign="left" label="please select..." x="84" y="85">
<mx:popUp>
<mx:Tree id="cateTree" dataProvider="{treeXml}"
labelField="@categoryName" showRoot="false"
width="160" textAlign="left"/>
</mx:popUp>
</mx:PopUpButton>
</mx:WindowedApplication>

Will not load sites linked from another website--have cleared cache, cookies, history, restarted, checked in Safe Mode--still does not work.

Some sites load fine. But some sites will not load when linked from another web site, or, occasionally, even from my bookmarks. I went through troubleshooting routine--cleared cache and cookies, history, checked in Safe Mode for extensions, etc., but still will not work in Safe Mode. No other problems with computer or browser.

What happens when you click the link that does not open up the new page? Is it a blank page? Does this also happen if you Shift Click the link?
Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
You can try these free programs to scan for malware, which work with your existing antivirus software:
* [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
* [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
* [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller]
* [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page])
* [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
* [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
[http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
Did this fix your problems? Please report back to us!

Authentication Host-Mode Multi-Auth not working

Similar Messages

Maybe you are looking for