C460-M2 with 2 VIC-1225, managed by UCSM

C460-M2 with 2 VIC-1225; all documents show only one VIC-1225 (which has to be in PCI slot nr.1)  single wire managment with a UCS FI ?
Is this a limitation ? or must the second VIC-1225 be connected to a switch outside the FI ?
Walter.

I received the following answer
Good question Walter. The documentation is confusing. If running the C460 as part of a UCS integration, only 1 card is supported.Although the server supports 2 cards , slot 1 & 2 according to the specsheet. The datasheet states that upto 3 VIC can be supoprted int he server.
The Cisco CCW config tool allows you to configure 2 VIC1225 in the C460.
From the 460 spechseet.
http://www.cisco.com/en/US/prod/collateral/ps10265/ps10493/ps11587/spec_sheet_c17-662220.pdf
Page 24
The C460 server accommodates the Cisco 1225 Virtual Interface card, which is supported only in slots 1 and 2. Note, however, that if the server is running UCSM, only slot 1 is supported for the VIC card.
■ The Cisco Card NIC mode is currently supported only with a Cisco 1225 VIC (UCSC-PCIE-CSC-02) that is installed in PCIe slot 1.
■ The C460 server accommodates the Cisco 1225 Virtual Interface card, which is supported only in slots 1 and 2. Note, however, that if the server is running UCSM, only slot 1 is supported for the VIC card.
From the datasheet
http://www.cisco.com/en/US/prod/collateral/modules/ps10277/ps12571/data_sheet_c78-708295.html
System Requirements
The Cisco UCS VIC 1225 is designed for use only on Cisco UCS C-Series Rack Servers. A single Cisco UCS VIC 1225 is supported on Cisco UCS C260 M2, C460 M2, C220 M3, C240 M3, C22 M3, and C24 M3 rack servers. Up to three Cisco UCS VIC 1225 cards are supported on these servers depending on the slot configuration.
Anyone at Cisco want to clarify the above?
Message was edited by: NABIL YAGHI

Similar Messages

  • C460 Rack Server with two VIC 1225 - UCSM vNIC placement policy

    I am trying to integrate C460 having 2 VIC 1225 cards with UCSM. The objective is to have 2 ethernet interfaces assigned to each VIC , one per FI.
    vNIC 1 on VIC 1 - FI A failover to FI B
    vNIC 2 on VIC 1 - FI B failover to FI A
    vNIC 3 on VIC 2 - FI A failover to FI B
    vNIC 4 on VIC 2 - FI B failover to FI A
    I have created a service profile with 4 vNICs and assigned to C460. When the UCSM is configured to use the system default for vNIC/vHBA placement policy, all 4 vNICs are assigned to one VIC. When trying to place them manually with 2 on vCon1 and 2 on vCon2, I am seeing insufficient resource error. Both the VIC are recognized and UCSM server tab shows both of them as adapters.
    Could someone please let me know how to achieve it?
    Thanks!

    The C460 has an integrated BCM 57711 which would also be recognized by the system.  What's most likely happening is that the VIC 1225s are on vCon1 and vCon3 and the BCM card is on vCon2, since FF is not supported on the Broadcom adapter this would cause the association to fail.  Try placing the manual placement with vCon1 and vCon3 and see if this clears up the issue.
    Steve McQuerry
    UCS - Technical Marketing

  • C240 M3 with VIC 1225 managed with UCSM: Failure Reason: not enough vNIC available

    Hello,
    I have problems in creating a working service profile with more than one vNIC/NIC.
    I have a shiny new C240 server with a UCS VIC 1225 network card in PCI Slot 2. The server is directly connected to the two Fabric Interconnects (6248UP). 2 Direct attached cables with no FEX ("Direct Connect Mode Cluster Setup"). Firmware version is 2.2(1d). After setting the FI port to server role the server is flawlessly discovered. And shows up in the UCSM-GUI. And I see the VIC 1225 adapter that has 2 DCE Interfaces.
    Now, when I try to create Service Profile for this server by choosing "Hardware Based Service Profile" (with Create default vNICs [X] and Create Default vHBA [ ]) I get the following error:
    I am able to create a working profile with one vNIC in one fabric, but a soon as I try to add a second vNIC I get the error above.
    What I expected was, that it is possible to map more than one vNIC/NIC into the server profile. At leat 2 NICs, one in each fabric.
    I would be great if there is someone to bring some light in the darkness thats around me. Any hints or pointers to obvious documentation would be great.
    Kind regards,

    Hello,
    thanks for your answer. And you are probably correct.
    I can add aditional vnics to fabric A but not to fabric B. And even trying to add a single nic to Fabric B does not work.
    I changed the ports for this server on the fabric interconnects and rebooted the FI but it did not help.
    When I look at the General Tab of my server and then on Connection Details I see:
    Conection Path: A, B
    Connection Status: A
    Managing Instance: A
    My conclusion is, I have a problem with the Connection Path B of my C240..

  • C240 M3 with VIC 1225 VMware network issue

    Just got my hands on a few C240 M3′s with the VIC 1225 adapter and began setting them up as a VMware 5.1 U1 cluster. I’ve configured 8 vNICs per host: 2 for Management, 2 for VMotion, 2 for iSCSI, and 2 for VM traffic. Each pair of vNICs has one pinned to uplink 0 and the other to uplink 1. vNICs are set to trunk mode in the VIC since I am tagging multiple VLANs from VMware. The hosts are physically connected to a stacked pair of Cisco 4500-X switches; physical uplink 0 to one switch, uplink 1 to the other switch. Switch ports are trunked to allow the VLANs we plan to use. Portfast is enabled. VMware vSwitches using Source Port ID for Load Balancing and the vNICs are active/active for Management and VM traffic. No port channel or Etherchannel is configured on the swtiches.
    After creating a VM for vCenter and joining the hosts to it, I started migrating existing VMs from an old cluster and saw odd network behavior. It seems whenever a VM or vmkernel interface are on any vNIC pinned to the same physical uplink on the same host, they can’t talk to each other.
    Example: VM1 and VM2 are on host 1. VM1′s network adapter is pinned to vNIC1 using VLAN 10 which uses physical uplink 0. VM2′s network adapter is pinned to vNIC2 using VLAN 10 which uses physical uplink 1. VM1 and VM2 can ping each other. If I move VM2′s network adapter to any vNIC that uses physical uplink 0, just like VM1, then VM1 and VM2 can no longer ping each other. Or if host 1′s management IP is pinned to vNIC 1 on physical uplink 0, any VM on host 1 using a vNIC also pinned to physical uplink 0 cannot ping the host.
    Anyone have any ideas?  Is something configured incorrectly on the switch?  On the VIC?
    Thanks!

    Hello Michael,
    I assume VIC is operating Classical Ethernet ( CE ) mode and VM1 and VM2 are in different vswitchs for the non-working scenario, ( where there vNICs used by vSwitch are pinned to physical uplink ) .
    If this is the scenario, the frames have to be switched upstream switch and needs to be forwarded back on the same switch interface. Any IEEE standards based switch will not forward such traffic flow.
    You might want to take advantage of Adapter-FEX or adapt changes to design to accommodate such traffic flows.
    HTH
    Padma

  • C240 with VIC 1225 : enable Failover

    Hi,
    I have a C240M3 with a VIC 1225. I would want to enable failover.
    In order that, i have to enable NIV mode. But it seems to me that i could not.
    Why ????
    how to solve this issue ???
    C240-FCH1749V0VC /chassis/adapter # set
    cli         CLI options
    description Adapter description
    fip-mode     Enable/disable FIP
    vntag-mode   Enable/disable VNTAG
    niv-mode not present.....
    C240-FCH1749V0VC /chassis # show adapter 2 detail
    PCI Slot 2:
       Product Name: UCS VIC 1225
       Serial Number: FCH17457ESH
       Product ID: UCSC-PCIE-CSC-02
       Adapter Hardware Revision: 6
       Current FW Version: 2.1(3a)
       VNTAG: Disabled
       FIP: Enabled
       Configuration Pending: no
       CIMC Management Enabled : yes
       VID: V03
       Vendor: Cisco Systems Inc
       Description:
       Bootloader Version: 2.1(3a)
       FW Image 1 Version: 2.1(3a)
       FW Image 1 State: RUNNING ACTIVATED
       FW Image 2 Version: 2.1(3a)
       FW Image 2 State: BACKUP INACTIVATED
       FW Update Status: Idle
       FW Update Error: No error
       FW Update Stage: No operation (0%)
       FW Update Overall Progress: 0%
    C240-FCH1749V0VC /chassis #
    any detail on NIV
    My C240 is connect to Catalyst 3750.
    Many thx.
    Nicolas.

    Hello Kenny,
    My main question is « how to use and to configure failover on VIC 1225 ». I have already configure failover on B-serie but never on c-series
    For more details (please see diagram in attach), my issue is that my C240 on DRP site (just 40 metres from main site) is connected to local switch (C3560) and to LAN core (C4506 on main site). This connection on 2 Catalyst devices seems to be a problem for vSphere :
    i could see that : as soon as I connect the 2 ports, C240 lost connection to vCenter ; CIMC is still pinging.
    I could read on ucsguru forum, someone has the same issue with 2 catalyst.
    I do not have a lot of time for this deployment and installation. So, I told me to use actif/passif should be the faster way. If I connect only a cable (by shuting/ no shuting an interface on a catalyst), it works. In order to do that, automatically, I would want to implement failover on VIC1225
    Any suggestion on my issue is welcome.
    Many thanks.
    Nicolas.

  • Issues configuring VIC 1225 in C240

    I'm trying to configure a C240 server with the VIC 1225 installed.
    First off, I'd like to know if it's even possible to use this without Fabric Interconnects or Nexus switches. Assume I'm just hooking them up to some regular 10GbE switches. I can change this but wante to have a better idea of my design decisions - not a lot of info regarding when the VIC 1225 can or should be used outside this context.'
    Secondly, I am following the directions here:
    http://www.cisco.com/en/US/docs/unified_computing/ucs/c/sw/cli/config/guide/1.4.1/b_Cisco_UCS_C-Series_CLI_Configuration_Guide_141_chapter_01001.html#task_3C31BD7B25BF4CF6839B7B12DE014482
    I've verified that the VIC is installed in slot 1 visually as well as through the output below, but the output below isn't what I expected per the documentation. I'm not able to get into the scope of this adapter, and it's showing up in "show pci-adapters" and not "show adapters". It's like it's not even being recognized as a VIC.
    Any help would be appreciated.
    ucs-c240-m3 /chassis # scope adapter 1Error: Managed object does not exist, use show command to list valid targetsucs-c240-m3 /chassis # scope network-adapter 1Error: Managed object does not exist, use show command to list valid targetsucs-c240-m3 /chassis # scope pci-adapter 1% Incomplete commanducs-c240-m3 /chassis # scope pci-adapter 1   <CR>  Press Enter keyucs-c240-m3 /chassis # scope   adapter          Cisco Systems UCS Virtual Interface Card  dimm-summary     Information common to all DIMMs  fan-policy       Fan Policy parameters  firmware         Get all Components Firmware  flexflash        Cisco FlexFlash Controller  gpu              Show GPU cards present in the system  hdd              Host local hard disk drive  network-adapter  Show network adapters present in the system  storageadapter   RAID Controllerucs-c240-m3 /chassis #

    Matt,
    The VIC 1225 is fully supported as a stand-alone card outside of UCSM and by default it runs in Classical Ethernet mode which means it's supported with any IEEE standard 10GE switch.
    The VIC is not supported in Slot 1 in the C240, it is supported in Slot 2 or 5
    (http://www.cisco.com/en/US/docs/unified_computing/ucs/c/hw/C240/install/replace.html#wp1337242).
    Without being installed in the proper slots, the NC-SI connector at the end of the PCIe bus will not be conencted and the CIMC has no interface to to configure the card.  Once you have installed it in a supported slot you should be able to scope chassis and show the adapter.  Then scope to the adapter as shown below
    ucs-c240-m3# scope chassis
    ucs-c240-m3 /chassis # show adapter
    PCI Slot Product Name   Serial Number  Product ID     Vendor              
    2        UCS VIC 1225   FCH162974VP    UCSC-PCIE-C... Cisco Systems Inc   
    ucs-c240-m3 /chassis # scope adapter 2
    ucs-c240-m3 /chassis/adapter #
    Once you are able to see your VIC let me know if you have additional questions.
    Steve McQuerry
    UCS - Technical Marketing

  • UCS C-Series VIC-1225 to Nexus 5000 setup

    Hello,
    I have two nexus 5000 setup with a vpc peer link. I also have an cisco c240 m3 server with a vic-1225 card that will be running esx 5.1. I also have some 4 2248 fabric extenders. I have been searching for some best practice information on how to best setup this equipment. The nexus equipment is already running, so its more about connecting the c240 and the vic-1225 to the nexus switches. I guess this is better to do rather than to connect to the fabric extenders in order to minmize hops?
    All documention I have found involves setup/configuration etc with fabric interconnects which I dont have, and have been told that I do not need. Does anyone have any info on this? and can point me in the right direction to setup this correctly?
    More specifically, how should I setup the vic-1225 card to the nexus? just create a regular vpc/port-channel to the nexuses? use lacp and set it to active?
    Do I need to make any configuration changes on the vic card via the cimc on the c240 server to make this work?

    Hello again, Im stuck
    This is what I have done. I have created the vPC between my esx host and my two nexus 5000 switches, but it doesnt seem to come up:
    S02# sh port-channel summary
    Flags:  D - Down        P - Up in port-channel (members)
            I - Individual  H - Hot-standby (LACP only)
            s - Suspended   r - Module-removed
            S - Switched    R - Routed
            U - Up (port-channel)
            M - Not in use. Min-links not met
    Group Port-       Type     Protocol  Member Ports
          Channel
    4     Po4(SD)     Eth      LACP      Eth1/9(D)
    vPC info:
    S02# sh vpc 4
    vPC status
    id     Port        Status Consistency Reason                     Active vlans
    4      Po4         down*  success     success                    -
    vPC config:
    interface port-channel4
      switchport mode trunk
      switchport trunk allowed vlan 20,27,30,50,100,500-501
      spanning-tree port type edge trunk
      vpc 4
    interface Ethernet1/9
      switchport mode trunk
      switchport trunk allowed vlan 20,27,30,50,100,500-501
      spanning-tree port type edge trunk
      channel-group 4 mode active
    Im unsure what I must configure on the cisco 240M3(esx host) side to make this work. I only have the two default interfaces(eth0 and eth1) on the vic-1225 installed in the esx host, and both have the vlan mode is set to TRUNK.
    Any ideas on what I am missing?
    Message was edited by: HDA

  • UCS C420M3 server with VIC 1225 , Cant see LOM ethernet ports

    Hi Guyz,
    we have C420M3 server with VIC 1225 connected on PCIe slot, with Fabric Interconnet.
    After installing OS & drivers , vNICs created on VIC 1225 by service profile appear, but 4 gig ports on Server LOM dont appear.
    Any Idea.?
    Thank

    If you integrate your rack server to UCSM, you will be able to use the LOM ports ONLY for Mgmt traffic, that is when you integrate the server in "Dual Wire Mode".
    There is no need (unless you have one for an special reason I am not considering in this very moment) to use the LOM ports once you have integrated the server, precisely cause the VIC 1225 is a not a regular NIC card, nor a regular HBA, it is actually a CNA (Converged Network Adapter) which basically lets you do in one card, what you would do with two (meaning "what you would do with a separate NIC and HBA")
    When you have a VIC card, you actually have the option to create up to 256 virtual interfaces (that's the capability of the hardware, always limited by the OS used, please keep that in mind), that is the reason why, after the server is integrated, you totally depend on the interfaces set in the Service Profile instead of the physical interfaces.
    Find more info here:
    http://www.cisco.com/c/en/us/products/interfaces-modules/unified-computing-system-adapters/models-comparison.html
    Do you have a particular reason for using the LOM ports instead of creating 2 additional virtual interfaces in the Server's Service Profile?
    -Kenny

  • Cisco UCS C220 with VIC 1225

    Hello,
    We have Cisco UCS C220 M3 with VIC 1225 card installed. We connected only one 10G port of VIC 1225 to Nexus 5548UP switch. But I do not see this port on switch and in CIMI the status for this port shows Link Down. I wanted to to iSCSI boot from storage NetApp FAS2240 but since I don't see this port on my Nexus switch I am unable to do boot from NetApp. I tried both ports on VIC 1225 with same result. Please I need help in this matter. I know I am missing something very simple but can't figure this out.
    Thanks,
    Salman

    Hi Kenny,
    Here is the answers:
    -What slot is this card installed in?
    Mezzenine
    -How many CPUs does the server have installed? (1 OR 2 CPUs can make the difference)
    2x 2.90 GHz E5-2690/135W 8C/20MB Cache/DDR3 1600MHz
    -Is the PCIe slot enabled in BIOS? << Let us know if you don't know how to check it from CIMC
    I believe I did. Server>BIOS>BIOS advanced> PCIe (Let me know if this correct)
    -Have you confirmed that the cable is good?
    I have changed four cables. I am using SFP-H10GB-CU2M= Twinax cable.
    -If the switch does not even see the port and CIMC says it is down, have you confirmed the switch port is properly configured?
    CIMI says “Link Down” in VIC adapter General area. The switch interface config has only “switchport mode access” in default vlan 1.
    -What is the firmware running on the server and the OS?
    We upgraded the firmware with latest ucs-c220-huu-1.5.4-3.iso.
    Let me share with you the complete BoM of the server:
    UCSC-C220-M3S              1x  UCS C220 M3 SFF w/o CPU  mem  HDD  PCIe  PSU  w/ rail kit
    UCS-CPU-E5-2690              2x  2.90 GHz E5-2690/135W 8C/20MB Cache/DDR3 1600MHz
    UCS-MR-1X082RY-A    16x 8GB DDR3-1600-MHz RDIMM/PC3-12800/dual rank/1.35v
    CAB-9K10A-UK              2x  Power Cord 250VAC 10A BS1363 Plug (13 A fuse) UK
    UCSC-PCIE-CSC-02    1x           Cisco VIC 1225 Dual Port 10Gb SFP+ CNA
    UCSC-PCIE-QSFP              1x  Qlogic QLE8242-CU Dual Port 10 GbE FCoE CNA
    UCSC-HS-C220M3              2x  Heat Sink for UCS C220 M3 Rack Server
    UCSC-RAIL1              1x  Rail Kit for C220 C22 C24 rack servers

  • VIC 1225 conectivity problems

    Hi guys,
    we have deployed a new UCS C460 on the network but we are observing connectivity problems for the directlly connected N3K.
    The UCS server has a VIC1225 with 2 vnics configured one to each physical 10Gb port, the ports are in port-channel to the 3ks that are configured in VPC
    to the server, with this topology we cant reach the HSRP vIP configured in the 3Ks and we can reach only one of them.
    The 3Ks are configured in VPC for multipe devices that use this HSRP without issues.
    The VPC for the server is up and well configured.
    Also the server OS is SUZE.
    Im wondering if this have anything to do with some caveat in the VIC1225? it appears like the VIS is in active/passive as when we cut one uplink the other 
    3K is reachable....
    anyone has some toughts about the issue
    Any help is apreciated.
    thanks.

    Tony ,
    According to some Cisco documentation:
    •  Creates fully functional unique and independent PCIe adapters and  interfaces (NICs or HBAs) without requiring single-root I/O  virtualization (SR-IOV) support from OSs or hypervisors
    •  Allows these virtual interfaces and adapters to be configured and  operated independently, just like physical interfaces and adapters
    • Creates a highly flexible I/O environment needing only one card for all I/O configurations
    Note:  Cisco UCS VIC 1225 hardware is SR-IOV capable, and you can enable  SR-IOV after SR-IOV is broadly supported by the popular operating  systems. Please refer to UCS Manager configuration limits for your  specific OS and environment in the configuration guide.
    You can check the details here:
    http://www.cisco.com/en/US/prod/collateral/modules/ps10277/ps12571/data_sheet_c78-708295.html 
    I hope this helps.
    - David

  • Is Cisco VIC 1225 supported on C210M2?

    According to the spec-sheet, the only supported Cisco CNA would be P81E. P81E is EoS with migration diverted towards 1225, but when looking at the datasheet for 1225, it seems like only newer hardware is supported.
    Can anyone confirm/deny if this would be a supported scenario or not?

    Hello Marcus,
    VIC 1225 is not supported on C210M2 Server.
    Please find the below link for VIC 1225/1225T and attached screen shot for supported servers list:-
    http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/ucs-virtual-interface-card-1225/data_sheet_c78-708295.pdf
    http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/ucs-virtual-interface-card-1225/data_sheet_c78-727604.pdf
    http://www.cisco.com/c/en/us/products/collateral/servers-unified-computing/ucs-c-series-rack-servers/data_sheet_c78-587522.html
    Hope it would helps you,Please mark as answered if you got your answer on this query.
    Thanks,
    Gaurav

  • Cisco VIC 1225 CNA Connectivity Options for 10G Upgrade

    I've currently got an opportunity to upgrade a C220M3 UCS server from the standard Intel 1G LOM's to 10G and I'm looking at various ways to achieve this.  This is for a standalone UCS server running VMware.
    At the present time in this environment there isn't a 10G uplink switch port that can be used to connect a 10G UCS port to, so I'm looking at ways to at least complete the 10G hardware upgrade on the UCS side and have that component completed, while having a transition period of 1G connectivity in the short term.
    It seems the VIC 1225 is the obvious choice for this, as price wise it's reasonable and it's fully featured, even if we only need the 10G ethernet (no FCoE in the short term).
    One option I was looking at was to use the 1225T model, as this supports 10BaseT backwards compatible with 1000BaseT.  However while it's an easy choice on the UCS, Cisco don't seem to have any 10G copper modules on the switch side, except in specific models in the Nexus family.  This limits our switching options in the future (this rules out the use of 4500-X's or 3850s for example).
    10G fibre is an option, as is Twinax, however this brings me to my next few questions.
    1. It appears that based on the C220M3 spec sheet at http://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-c-series-rack-servers/C220M3_SFF_SpecSheet.pdf (see Table 14) that the 1225 doesn't support Twinax.  In fact it's the only NIC and CNA listed that apparently doesn't support it, which seems odd.  Is this correct, and what is the reason behind this?   Is this a hardware issue, a software issue or a documentation issue?
    2. If Cisco Twinax is not an option, does the 1225 support 1G SFPs such as the GLC-SX-MM?
    3. It looks like the X520 card for UCS might work, as I believe it can run with dual-rate 1G/10G SFPs.  Has anyone tried this or have any comments on how those work with UCS?
    Thanks,
    Reuben

    Reuben Farrelly
    The 1225 (UCSC-PCIE-CSC-02) does supports twinax cables, the documentation has a type-o.  If you look at the documentation for the c240 M3 that supports the same 1225 adapter, you will see that this card does supports the twinax cables (see attach screenshots).  In the documentation it shows that the 1225T supports twinax but this card comes with 2 10GBASE-T ports so it won't support either twinax cables or SFPs.
    Please let me know is this is helpful
    C240 M3 Page (39)
    http://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-c-series-rack-servers/C240M3_SFF_SpecSheet.pdf
    1225T (Table 2. Product Specifications )
    http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/ucs-virtual-interface-card-1225/data_sheet_c78-727604.html

  • New VIC 1225

    So I see the VIC 1225 is a new card (presumably to replace the P81E), anyone know if it does Adapter-FEX? Only documentation I see is for VM-FEX.

    Tony ,
    According to some Cisco documentation:
    •  Creates fully functional unique and independent PCIe adapters and  interfaces (NICs or HBAs) without requiring single-root I/O  virtualization (SR-IOV) support from OSs or hypervisors
    •  Allows these virtual interfaces and adapters to be configured and  operated independently, just like physical interfaces and adapters
    • Creates a highly flexible I/O environment needing only one card for all I/O configurations
    Note:  Cisco UCS VIC 1225 hardware is SR-IOV capable, and you can enable  SR-IOV after SR-IOV is broadly supported by the popular operating  systems. Please refer to UCS Manager configuration limits for your  specific OS and environment in the configuration guide.
    You can check the details here:
    http://www.cisco.com/en/US/prod/collateral/modules/ps10277/ps12571/data_sheet_c78-708295.html 
    I hope this helps.
    - David

  • Unable to authenticate with diradmin in Workgroup Manager

    This has happened before, and I have no idea how it got fixed - too many independent variables...
    Anyway, I cannot authenticate the OD with diradmin even while using Workgroup Manager directly on the server.
    The setup:
    SLS 10.6.8
    Split-brained DNS
         Both public and private FQDNs are the same (myserver.mydomain.com). External DNS maps machine record to my static public IP address. Using an AirPort Extreme router, port fowarding services that I want open to the server. The router provides DHCP via NAT to the local network, with a fixed private IP assigned to the server. The server is running DNS with the same zones, machine records, services and aliases that the public IP DNS has, except mapped to the fixed private IP. DNS checks out with changeip, etc.
         The server is an OD master. Yesterday I exported it, demoted it, and restored it. All services (mail, web, etc.) seem to work fine (although I admit to not using Kerberos on AFP due to another issue).
         I have a wildcard certificate that is generated by GoDaddy (*.<mydomain>.com) which seems to work fine with the hosted websites.
    This is what the password service error log says when I try to log in with diradmin in Workgroup Manager:
    Jan 10 2012 14:01:32    AUTH2: {0x4bbe71ca6b8b45670000000200000002, diradmin} DHX authentication succeeded.
    Jan 10 2012 14:01:32    KERBEROS-LOGIN-CHECK: user {0x4bbe71ca6b8b45670000000200000002, diradmin} is in good standing.
    Jan 10 2012 14:01:32    KERBEROS-LOGIN-CHECK: user {0x4bbe71ca6b8b45670000000200000002, diradmin} authentication succeeded.
    Looks good to me. But I still get the "Information Not Valid for This Server" followed by stuff about invalid login ID or password.
    I did notice in the LDAP log:
    Jan 10 14:13:12 <myserver> slapd[52283]: SASL [conn=18] Failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Key table entry not found)
    And at the last bootup in the directory service error log:
    2012-01-10 08:52:03 EST - T[0x00007FFF7027ACC0] - DNSServiceProcessResult returned -65563
    The other thing I notice when I log into the library in Workgroup Manager FROM THE SERVER, even if I use the FQDN <myserver>.<mydomain>.com that Workgroup Manager says (in the title bar of the window) <myserver>.local.
    I have googled the various errors and messages, and I get folks with all sorts of variations ("change the binding options", etc.) none of which either applied or worked.
    Help?

    Continuing on my quest... I found this Technical note from Apple about re-kerberizing:
    http://support.apple.com/kb/HT3655
    Interestingly, in step 3 where it says to remove realm information from kdc.conf, there wasn't any of my realm information. Argh!
    So I completed all of the steps and executed the slapconfig command. This resulted in:
    bash-3.2# slapconfig -kerberize -f --allow_local_realm diradmin <MYREALM>
    diradmin's Password:
    Could not resolve hostname <MYDOMAIN>
    Skipping Kerberos configuration
    Sounds like a dreaded DNS problem. It had been working correctly, but changeip -checkhostname confirmed a problem. Turns out that there were EXTERNAL DNS servers in the Network preferences in System Preferences as well as on the router. With my Split-brained DNS this caused problems (thank you again MrHoffman). So I changed them both to my DNS server INTERNAL IP address and added the external ones to the Forwarder IP Address in DNS. Now checkhostname -changeip returns a favorable result.
    So after rebooting ran the slapconfig command again and got the same result. Argh. Cleared DNS caches. Still nothing.
    So I tried nslookup.
    nslookup <mydomain>
    Server:                    10.0.8.2
    Address:          10.0.8.2#53
    ** server can't find <mydomain>: SERVFAIL
    Where 10.0.8.2 is the fixed INTERNAL IP address.
    However, nslookup on using the fixed IP address yields:
    bash-3.2# nslookup 10.0.8.2
    Server:                    10.0.8.2
    Address:          10.0.8.2#53
    2.8.0.10.in-addr.arpa          name = <mydomain>.
    Scratching head here... changeip -checkhostname works, nslookup on the IP address works, but nslookup on the host name fails.

  • Hi, I've an iPad Mini with the latest version 6.0.2, a windows 7 Home Premium laptop and iTunes 11.0.1 (12), but I can't synchronize my music or videos with it. I managed to syncronize my books but thats all  I also have an iphone 5 and everything seems t

    Hi, I've an iPad Mini with the latest version 6.0.2, a windows 7 Home Premium laptop and iTunes 11.0.1 (12), but I can't synchronize my music or videos with it. I managed to syncronize my books but thats all.
    I also have an iphone 5 and everything seems to work fine with it.
    I see all movies and music available to be sync but when I click on the sync button, the process starts, the bottom bar shows an increase in consumed space then nothing happens and the bar goes back as nothing was added.
    Please help..
    I have tried everything but nothing works.

    Thanks Sk8dreams,
    ....but I wish I could have lol like u right now..
    If I could get a free iPad everything I'd already kept my iPad connected and restarted iTunes, I think I'd have had a truckload of them by now...
    I've done all of these..
    Like I said earlier I syncd everything to my iphone5 successfully...
    I got my PDF ebooks to this same iPad... Films &amp; Music do not seem to be getting through..
    I'm sure someone out there knows what to do..

Maybe you are looking for

  • Bought Refurbished MacBook Pro.  A few question...

    Ok, so I got a refurbished MacBook Pro because I've been using a Powerbook G4 for 5 years. I'm glad the look hasn't changed since the new ones are basically identical. I have a 17" now and am replacing it with another 17", but I have a few questions.

  • *Currency Conversion created in BW BEX query not working in BO report:*

    Hi, We have created a key figure with currency conversion and working fine in BEX when I execute that query. But when created a BO universe and WEBI report on that query, I am getting following error. "MDX query failed to execute with Error". Can any

  • Can i use 32 bit windows 7 for boot camp?

    I recently purchased a 15 inch mbp retina display and wanted to use boot camp to install windows 7 on it. I accidentally purchased 32 bit instead of 64 bit.  will this still work?

  • Landscape option gone from iPhoto/Epson.

    I'm using iPhoto 9.5.1 and my landscape option for printing is not available.  What happened to it?  I'm using an Epson Artisan 730.  All software up to date.

  • Nokia lumia 625 problems with 3 bottom buttons

    Ive only recently got my screen fixed and today the bottom 3 buttons on my 625 have just stopped working altogether but everything else on the screen works fine, has anyone had this problem and know a solution please, thanks