CIFS accelerator keepalive failure

Software Release 4.4.5
WAVE-294-K9
Alert:
cceAlarmHistModuleId= 1000 cceAlarmHistCategory= 3 cceAlarmHistInfo= Raise-Alarm: CIFS accelerator keepalive failure. cceAlarmHistTimeStamp= 3539553200
I got the following alert.
Does anyone know where I can find the log files or the CIFs accelerator keepalive failure counter?
I wanted to know the best way to clear the counter statistics and make sure that if this hits up again I can at least get a better
idea of how frequent it is happening.
I ran the following command and was curious if the "sessions timeout" is related to this keepalive failure?
show statistics accelerator cifs detail
CIFS:
Global Statistics
Time Accelerator was started: Wed Sep 25 08:51:51 2013
Time Statistics were Last Reset/Cleared: Wed Sep 25 08:51:51 2013
Total Handled Connections: 15293
Total Optimized Connections: 166
Total Connections Handed-off with Compression Policies Unchanged: 13638
Total Dropped Connections: 0
Current Active Connections: 0
Current Pending Connections: 0
Maximum Active Connections: 9
Number of local reply generating requests: 166596
Number of remote reply generating requests: 217438
The Average time to generate a local reply (msec): 4
Average time to receive remote reply (ms): 92
Policy Engine Statistics
Session timeouts: 13, Total timeouts: 121
Last keepalive received 00.0 Secs ago
Last registration occurred 19:03:18:36.6 Days:Hours:Mins:Secs ago
Hits: 1218122, Update Released: 142074
Active Connections: 18, Completed Connections: 821832
Drops: 0, Pre-Resource Counter: 0
Rejected Connection Counts Due To: (Total: 254198)
Not Registered : 3, Keepalive Timeout : 65
No License : 0, Load Level : 0
Connection Limit : 0, Rate Limit : 0
Minimum TFO : 254130, Resource Manager : 0
Global Config : 0, TFO Limit : 0
Server-Side : 0, DM Deny : 0
No DM Accept : 0
Auto-Discovery Statistics
Total Connections queued for accept: 487511
Connections queuing failures: 0
Socket pairs queued for accept: 487511
Socket pairs queuing failures: 0
AO discovery successful: 741192
AO discovery failure: 6

Hi,
The accelerator is failing to perform a wellness update within the allotted time. That is
why we see keepalive failures. The implications are that some connections may not be
getting optimized properly by the AO, and thus optimization performance may be reduced.
I don't think there is any counter for number of keep alive failure messages you get but you can
see if Keepalive Timeout counter is increasing.
You can find this counter under "policy engine statistics".
Keepalive Timeout : 65--->You can check if this value is increasing during the time you get this message.
Regards,
Kanwal

Similar Messages

Office extend 1142 and dtls keepalive failure

Hi
I am setting up office extend with 1142 APs on a 5508 controller. All seems ok and I see my SSIDs on the remote AP. However when I try to connect I don't get a dhcp address and the connection fails. When I look at logs and some debugs I see dtls keepalive failures and the AP is actually disconnecting and re-associating with the controller.
As a troubleshooting step I decided to disable Data encryption through the AP advanced tab and after the AP resets all is now working.
Would anyone have an idea why data encryption would cause the issue ? I have opened the standard 5246 and 5247 UDP ports on my firewall. Have I missed out some other port that may need opened ?
Many thanks, St.

Scott
The AP is changed from Local mode to H-REAP mode.
In the H-REAP tab we have Enable Office Extend ticked.
In the Advanced tab to get this to work the Data Encryption box is unticked and the text below says Current Dta Encryption Status is plain text. I can't think of any other settings related to office extend other than the NAT stuff on the management interface and allowing 5246 and 5247 through the firewall.
So if these settings are being correctly reported the question is why do I then see Data and ctrl being encrypted when I do "Show dtls connections" If I have unticked Data encryption I expect to see only ctrl connections being encrypted.
I can't see any other config issue that would allow dhcp and a connection to work with Data encryption disabled and cause it to fail with Data encryption enabled.
The AP always joins the controller no matter what the Data encryption setting is. However with it unticked the AP retains its connection to the controller and I can get an IP and pass data normally. With the data encryption box ticked the AP joins the controller then soon afterwards drops off reporting a DTLS keepalive issue. No IP address and no data passed. In fact with data encryption ticked I see a message of the form "DTLS plumbed in" or something similar. Then soon after I get the keepalive error and the AP drops off.
Thanks, St.

MS-Accelerator V2 Failure to create a DirectX 9 device

Hi~I run a sample of Microsoft Accelerator V2 on my computer. when I run an applications using
DX9Targets in visual studio 2012, a error shown up: Failure to create a DirectX 9 device. There are two graphics card in my computer,one is Intel HD graphics 4600, other one is NVIDIA GeForce
GTX 765M. Thanks a lot!
using System;
using Microsoft.ParallelArrays;
using FPA = Microsoft.ParallelArrays.FloatParallelArray;
using PA = Microsoft.ParallelArrays.ParallelArrays;
namespace AddArrays
class Program
static void Main(string[] args)
int arrayLength = 100;
Random ranf = new Random();
float[] inputArray1 = new float[arrayLength];
float[] inputArray2 = new float[arrayLength];
float[] stackedArray = new float[arrayLength];
// [1]
DX9Target evalTarget = new DX9Target();
// [2]
for (int i = 0; i < arrayLength; i++)
inputArray1[i] = (float)(Math.Sin((double)i / 10.0)
+ ranf.NextDouble() / 5.0);
inputArray2[i] = (float)(Math.Sin((double)i / 10.0)
+ ranf.NextDouble() / 5.0);
// [3]
FPA fpInput1 = new FPA(inputArray1);
FPA fpInput2 = new FPA(inputArray2);
// [4]
FPA fpStacked = PA.Add(fpInput1, fpInput2);
FPA fpOutput = PA.Divide(fpStacked, 2);
// [5]
stackedArray = evalTarget.ToArray1D(fpOutput);
// [6]
for (int i = 0; i < arrayLength; i++)
Console.WriteLine(stackedArray[i].ToString());

Hello,
I'd ask in the
Direct X forums on the Xbox Developer forums.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book:
Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C40686F746D61696C2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

RE: Hard Failures, KeepAlive, and Failover --Follow-up

Hi,
It's a really challenging question. However, what do you want to do after
the network crash? Failover or just stop the service? Should we assume
that when the network is down, and so do your name service?
One idea is to use externalconnection to "listen" to your external non-forte
alarm, so do "whatever" after you receive the alarm instead of letting the
"logical connection" to time out or hang.
Regards,
Peter Sham.
-----Original Message-----
From: Michael Lee [SMTP:[email protected]]
Sent: Wednesday, June 16, 1999 12:44 AM
To: [email protected]
Subject: Hard Failures, KeepAlive, and Failover -- Follow-up
I've gotten a handful of responses to my original post, and the suggested
solutions are all variations on the same theme -- periodically ping remote
nodes/partitions and then react when the node/partition goes down. In
other circumstance this would work, but unless I'm missing something this
solution doesn't solve the problem I'm running into.
Some background...
When a connection is set up between partitions on two different nodes,
Forte is effectively establishing two connections: a "physical
connection"
over TCP/IP between two ports and a "logical connection" between the two
partitions (running on top of the physical connection). Once a connection
is established between two partitions Forte assumes the logical connection
is valid until one of two things happen:
1) The logical connection is broken (by shutting down a partition from
Econsole/Escript, by killing a node manager, by terminating the ftexec,
etc.)
2) Forte detects that the physical connection is broken (via its KeepAlive
functionality).
If a physical connection is broken (via a cut cable or power-off
condition), and Forte has not yet detected the situation (via a KeepAlive
failure), the logical connection is still valid and Forte will still allow
method calls on the remote partition. In effect, Forte thinks the remote
partition is still up and running. In this situation, any method calls
made after the physical connection has been broken will simply hang. No
exceptions are generated and failover does not occur.
However, once a KeepAlive failure is detected all is made right.
Unfortunately, the lowest-bound latency of KeepAlive is greater than one
second, and we need to detect and react to hard failures in the 250-500ms
range. Using technology outside of Forte we are able to detect the hard
failures within the required times, but we haven't been able to get Forte
to react to this "outside" knowledge. Here's why:
Since Forte has not yet detected a KeepAlive failure, the logical
connection to the remote partition is still "valid". Although there are a
number of mechanisms that would allow a logical connection to be broken,
they all assume a valid physical connection -- which, of course, we don't
have!
It appears I'm in a "Catch-22" situation: In order to break a logical
connection between partitions, I need a valid physical connection. But
the
reason I'm trying to break the logical connection in the first place is
that I know (but Forte doesn't yet know) that the physical connection has
been broken.
If anyone knows a way around this Catch-22, please let me know.
Mike
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Make sure you chose the right format, and as far as partitioning in concerned, you have to select at least one partition, which will be the entire drive.

CIFS, not showing security properties

When attempting to view the security properties of a remote share we get an error message that says, "Unable to display security information". This happens when bringing up a remote server via UNC path, right clicking on a share or folder, and selecting the security tab. This only happens when viewing them through an optimized connection. If the domain admin remotes directly to that server, or another server at the same location, they are able to browse the properties fine.
We're using 4.1.3 and have disabled legacy WAFS services. All of our CIFS traffic is going through the CIFS accelerator. Couple of questions:
-Isn't the CIFS accelerator supposed to be transparent and pass this information along?
-Do the WAE's still need to be joined to the domain? I though this was a legacy WAFS function
-I did packet captures on both ends of the connection (and on the WAE) but didn't see anything obvious in the way of errors, any specific thing I can look for?
Thanks!

In the failed trace, note that the NT Security Descriptor Length in frame 392 is 0, whereas in the working trace it is >0. This looks like bug CSCtg28040, which is fixed in the WAAS 4.1.5f release. Can you confirm that you have installed Microsoft patch MS10-020 (KB980232)?
Thanks again for the traces.
Regards,
Zach

VPC Peer-Link Failure

Hello,
In the case I have two N5k acting as a vPC peers and I lose the vPC peer-link between two of them, but I do not lose the vPC peer-keepalive link, what would happen when the vPC peer-link comes back again?
As I understand in the case of vPC peer-link failure all vPC member ports on the secondary N5k will be shut down. When the vPC peer-link comes back again what would happen?
I have read that in that case the vPC member ports will not come back automatically, but they will remain disabled until you do manual recovery. Is that really so?
Is there some way that we can automate the process upon recovery?
Thanks

The reload restore command has been removed/replaced and the new feature is
now called auto recovery. Auto recovery covers the use case that reload
restore addressed, plus more.
If both switches reload, and only one switch boots up, auto-recovery allows
that switch to assume the role of the primary switch. The vPC links come up
after a configurable period of time if the vPC peer-link and the
peer-keepalive fail to become operational within that time. If the peer-link
comes up but the peer-keepalive does not come up, both peer switches keep
the vPC links down. This feature is similar to the reload restore feature in
Cisco NX-OS Release 5.0(2)N1(1) and earlier releases. The reload delay
period can range from 240 to 3600 seconds.
When you disable vPCs on a secondary vPC switch because of a peer-link
failure and then the primary vPC switch fails, the secondary switch
reenables the vPCs. In this scenario, the vPC waits for three consecutive
keepalive failures before recovering the vPC links.
The vPC consistency check cannot be performed when the peer link is lost.
When the vPC peer link is lost, the operational secondary switch suspends
all of its vPC member ports while the vPC member ports remain on the
operational primary switch. If the vPC member ports on the primary switch
flaps afterwards (for example, when the switch or server that connects to
the vPC primary switch is reloaded), the ports remain down due to the vPC
consistency check and you cannot add or bring up more vPCs.
For more information, please refer to the Operations Guide: As a best practice,
auto-recovery should be enabled in vPC.
HTH,
Alex

CIFS File Permissions Problem

Has anyone else experienced this? I have a remote site setup using a WAAS 574 in inline mode (connected to a 2811 router) and whenever I enable the CIFS Accelerator on the device (and the Central Office WAAS) the remote site end users start gaining access to each other’s files? Not all of them, just files that someone else was accessing recently. It seems like the CIFS Accelerator has recently accessed files cached and doesn’t check the User rights on Active Directory for some reason. I have CIFS disabled for now but I would love to re-enable it. FYI – The File Server being accessed is a MS Windows 2008 R2 will all Service Packs and Updates installed.

Hi William,
Do you know if this is a newly installed server and if Share
configured on this server are ABE (Access-bases Enumeration). If yes then
you would need to configure them as dynamic shares in WAAS. See below link.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v431/configurati
on/guide/filesvr.html#wpxref89338
Thanks
Ahsan

WAAS-CIFS setup for NME-WAE-522-K9

Hi,
We are developing a media solution in our lab. In that process, I was about to use a CIFS Sharing/Mouting for a DMM-DMP(Digtal media manager-digital media player). I have a cisco 3800 series router with NME-WAE-522-K9 Module , and an AXP module. I have configured the WAE with WCCP v2. It is in accelerator mode.
I want to know if i can use the same WAE device as a "CIFS share" or should i have to use a seperate Windows/Unix machine to be acting as a server. If at all i can use the WAE module itself as Share, Can i know any link from where i can get to know how to configure WAE device to work as share.
I came across WASF in many places of documents and wanted to check if this is what the WAE module is called when used as a Share?.
When i opened my webpage of WAE, i can see the CifsAO componenet as not licensed . So where should i download the license file from?. Does this CifsAO will be acting as a network Share.?
Sorry if it is too basic question. Am new to this WAAS setup.and moreover i am not able to find proper documentation.
Please advice.
Thanks,
JK

Hi JK,
What you are proposing is completely feasible with WAAS via the CIFS Accelerator (CIFS AO) and the prepositioning feature. The first thing you would need to make sure is all of your WAAS devices have the Enterprise license (specifically this WAE at the branch where your clients sit and the DC WAE where the CIFS file servers sit) . If you have not purchased this license/ it is not active on your WAAS devices please contact your Cisco SE and they can work with you on getting this feature licensed and activated. To verify your license status on the CLI of each WAE execute the command "show license"
Once you have verified the Enterprise license is enabled, you can then enable the CIFS AO on all of your accelerators either via the CM or the CLI with the command "accelerator cifs enable" Then you can verify it is running with the show accelerator command.
Next verify that a branch user connecting to the CIFS file server in the DC is accelerated via the CIFS AO. From a test PC connect to the share, then on the CLI of the branch WAE use the command "show stat con | in " and find the port 445 connection to your DC file server IP. This should be listed a T,C,D,L (meaning full optimization with CIFS AO acceleration).
Once this is verified setup a preposition job as per the configuration guide here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v421/configuration/guide/filesvr.html#wp1043490
You can then have this job run nightly/ weekly/ or whatever frequency is conducive to your environment.
Once the job has been completed your CIFS cache on the branch WAE will be populated with the data from the directory/ directories you specified in the preposition job. So when users or devices connect to the DC file share to pull these videos/ files they will be pulling them from the local WAE cache instead of over the WAN (note, some communication still goes over the WAN to maintain proper consistency).
Note, your WAE-522 has approximately 40GB of storage allocated for CIFS cache.
Hope this helps answer your questions.
Cheers,
Mike Korenbaum
Cisco WAAS PDI Help Desk
http://www.cisco.com/go/pdihelpdesk

WAAS / CIFS Problems

Hello all,
We recently deployed WAAS (4.1) system in our datacenter / remote office. The setup is fairly basic from what i'm being told. 2 application accelerators, and one central management device, nothing too tricky. We've opted to use WCCP redirection instead of inline mode.
All WAE's are registered to my CM, the problem i'm running into is at my remote site, after turning on WCCP redirection on my routers, all CIFS file shares stop working between sites. I have file servers at both locations, and after redirecting the traffic to my accelerator, I can no longer access file shares from my remote site to my central office, and vice versa.
The configs are very much default on the WAE's, everything is using automatic discovery, which I was assuming wouldn't cause any problems like this, and I admit that i'm not up to speed on the in's and out's of WAAS.
Any help is appreciated as always!
Thanks -
Jon

Sure:
The servers are Windows Server 2k3, no DFS here at all. These are dell SAN's that we use for storage.
I did see traffic hitting the WAE's, before I stopped redirecting traffic at my remote site, http / https, & domain services & exchange traffic were being optimzed. Basically what happens is after I start redirecting traffic to my remote site WAE's, file shares stop working, so I can't leave them running very long :).
I can post some of the config requests below, but since I'm no longer redirecting traffic to my WAE's, this is going to "skew" the results of the commands.
I did find a post in this forum that said I should upgrade my WAE's to 4.1.5(f), because an MS hotfix KB980232 possibly breaks CIFS accelerated connections. I'm working on downloading & upgrading my accelerators now & will let you know if this fixes my issue.
"We have seen the problems first hand and I would recommend against this patch if accelerating CIFS connections."
http://www.microsoft.com/technet/security/bulletin/MS10-020.mspx
Attached are the show commands you requested.
Thanks!
Jon

CIFS AO down after software upgrade

Hi all,
i'm currently starting software upgrade procedure in my WAAS environment.
I'm upgrading from 4.1.5b to 4.2.3c
after rebooting my WAE's i'm having the following alarm:
Critical Alarms:
        Alarm ID                 Module/Submodule               Instance
   1 cifs_ao_down              wafs                         WAFS
Major Alarms:
None
Minor Alarms:
None
nkrwa222#sh licens
License Name   Status      Activation Date Activated By
Transport      active      06/22/2010      guf
Enterprise     not active
Video          not active
nkrwa222#
However even if i start the CIFS Accelerator the alarm still persists.
nkrwa222(config)#accelerator cifs ena
Enabled windows-print accelerator
Enabled cifs accelerator
WARNING: Accelerator doesn't optimize the traffic until license is configured.
It takes up to 2 minutes to start the traffic optimization after the license is activated.
nkrwa222(config)#
nkrwa222(config)#
I'm running no application accelerator cause i'm using transport license. And so i do not really need CIFS AO however i need to clear the alarm especially on CM.
Any ideas how i can fix this?
thanks for your input

Dieter,
Correct, you can not enable any accelerators if you only have the Transport license.
I'd suggest you execute the following commands to see if the alarm clears.
pdi-7341-19(config)#no wafs edge enable
pdi-7341-19(config)#no wafs core enable
pdi-7341-19(config)#no accelerator cifs enable
Regards,
Mike Korenbaum
Cisco WAAS PDI Help Desk
http://www.cisco.com/go/pdihelpdesk

CIFS Operational State Disabled.

Hi All
The CIFS service on a NME-WAE-502 is showing an "disabled" operational state however the Config State is "enabled" and reporting a "
cifs_ao_down" alarm. I've tried re-enabling the accelerated service via the CLI and the console reports that it is enabled however the operational state of the acceleratored service remains disabled.
WAE1#sh alarm
Critical Alarms:
        Alarm ID                 Module/Submodule               Instance
   1 cifs_ao_down              wafs                         WAFS
Major Alarms:
None
Minor Alarms:
        Alarm ID                 Module/Submodule               Instance
   1 primary_interface         CIFS_AO/primary_interface    CIFS_AO
WAE1#sh license
License Name   Status      Activation Date Activated By
Transport      not active
Enterprise     active      05/22/2009      admin
Video          not active
WAE1#sh cms info
Device registration information :
Device Id                            = 3806504
Device registered as                 = WAAS Application Engine
Current WAAS Central Manager         = 10.###.###.##
Registered with WAAS Central Manager = 10.###.###.##
Status                               = Online
Time of last config-sync             = Tue Jan 3 12:45:18 2012
CMS services information :
Service cms_ce is running
WAE1#sh acc
Accelerator     Licensed        Config State    Operational State
cifs            Yes             Enabled         Disabled
epm             Yes             Enabled         Running
http            Yes             Enabled         Running
mapi            Yes             Enabled         Running
nfs             Yes             Enabled         Running
ssl             Yes             Enabled         Running
video           No              Enabled         Shutdown
WAE1#conf t
WAE1(config)#accelerator cifs enable
Enabled windows-print accelerator
Enabled cifs accelerator
WAE1(config)#
Does anyone know how to solve this issue?

As requested:
WAE1#sh alarm history detail
     Op Sev Alarm ID             Module/Submodule     Instance
   1 R Cr cifs_ao_down         wafs                 WAFS
     Dec 31 16:57:20.389 EST, Processing Error Alarm, #000002, 10000:1000003
     CIFS Accelerator is down.
   2 R Mi primary_interface    CIFS_AO/primary_interface CIFS_AO
     Dec 31 16:56:21.861 EST, Environment Alarm, #000001, 20000:20001
     primary-interface miss-configured. cifs-ao will work in passthrough mode.
Op - Operation: R-Raised, C-Cleared
Sev - Severity: Cr-Critical, Ma-Major, Mi-Minor
WAE1#sh ver
Cisco Wide Area Application Services Software (WAAS)
Copyright (c) 1999-2011 by Cisco Systems, Inc.
Cisco Wide Area Application Services (accelerator-k9) Software Release 4.4.3b (build b2 Oct 20 2011)
Version: nme-wae-502-4.4.3b.2
Compiled 16:38:43 Oct 20 2011 by damaster
Device Id: 00:21:55:##:##:##
System was restarted on Sat Dec 31 16:49:10 2011.
The system has been up for 3 days, 2 hours, 38 minutes, 24 seconds.
WAE1#sh disk detail
Physical disk information:
disk00: Present    080606BB6200WBFM69UF       (h01 c00 i00 l00 - Int DAS-SATA)
          114470MB(111.8GB)
Mounted file systems:
MOUNT POINT      TYPE       DEVICE                SIZE     INUSE      FREE USE%
/sw              internal   /dev/sdb1            991MB     698MB     293MB 70%
/swstore         internal   /dev/sdb2            991MB     562MB     429MB 56%
/state           internal   /dev/sdb3           3967MB     137MB    3830MB   3%
/local/local1    SYSFS      /dev/sdb7           5951MB     808MB    5143MB 13%
/disk00-04       CONTENT    /dev/sdb6          96995MB   33965MB   63030MB 35%
.../local1/spool PRINTSPOOL /dev/sdb8            991MB      16MB     975MB   1%
No RAID devices present.
Disk encryption feature is disabled.

WAAS 4.1 CIFS AO Issue

I have an interesting problem with the CIFS accelerator and wanted to see if you've seen similar problems.
Initially started troubleshooting when a user at Site A (WAAS 4.1.3 w/ CIFS AO on) tried to logon to the network with his profile information stored at Site B (WAAS 4.1.3 w/ CIFS AO on). I had just enabled the CIFS AO on both of the WAEs.
The user could not logon on his first attempt since I enabled the CIFS AO on both sides. Then one of the SysAdmins (trying to resolve the users issue) tried to copy the users profile from the Site B server to the Site A server. The SysAdmin could successfully map the drive but indicated the copy job for his profile directory did not work.
Once I had this background I started troubleshooting and wanted to see if I could replicate the problem. Here are the results of my testing:
1) With CIFS AO enabled at Site A and Site B, tried to copy entire user profile directory from A to B (and B to A). I could map the drive and saw the session being optimized with TFO/DRE/LZ and CIFS AO. The copy job started but I then got an error indicating that 'Cannot copy identifydb.obj. Cannot find the file specified'
2) With CIFS AO enabled at Site A and Site B, was able to successfully copy any single file bidirectionally b/w A and B.
3) Repeated test 1 and this time the copy job started and I got an erro indicating that ''Cannot copy registry.dat. Cannot find the file specified'
4) Turned off the CIFS AO on both Site A and Site B WAE's, tried to copy entire user profile directory from A to B. Saw the session being optimized with TFO/DRE/LZ. It took a while but the ~ 30MB profile copied successfully.
5) Repeated step 1 with Site C and Site D, with CIFS AO enabled. Tried to copy the entire user profile from C to D ( and D to C). I could map the drive and saw the session being optimized with TFO/DRE/LZ and CIFS AO. The copy job started but then I got an error indicating that 'Cannot copy properties131_04. Cannot find the file specified'
I repeated step 4 multiple times with CIFS AO disabled and successfully copied the profile directory every time (b/w multiple sites and with multiple profiles). I was never able to successfully copy the entire profile directory with the CIFS AO enabled. It seemed to be a different small file everytime that caused the copy process to halt.
HTTP AO works fine and all other traffic flows seem to work well through the TFO/LZ/DRE accelerators.
I'm assuming the same issue causing the profile to be copied via the CIFS AO is why users can't logon when I have CIFS AO enabled. Has anyone
ever seen anything like this? Any ideas?
Thanks.

We are using 4.1.1d and randomly users cannot save to HQ data server. There is no problem with the server but users across WAN and 4.1.1d devices cannot save.

What's the difference between CIFs AO and WAFs-edge?

(version 4.1.1) I can only active one or the other, and not both, on my edge NME-WAE-522-K9. Does enable WAFs-edge file services give CIF acceleration also?
MDF-3845-EdgeWAE#sh accelerator detail
Accelerator Licensed Config State Operational State
cifs Yes Disabled Shutdown
epm Yes Enabled Running
http Yes Enabled Running
mapi Yes Enabled Running
nfs Yes Enabled Running
video No Enabled Shutdown
wafs-core Yes Disabled Shutdown
wafs-edge Yes Enabled Running

[Q] What would be the preferred method - the new CIFS AO?
[A] The CIFS AO is preferred for new deployments. Existing deployments using WAFS should migrate to the CIFS AO when ready.
[Q] Also, what are the 4.1.1 replacement commands for:
sh tfo connection summary
sh statistics dre connection active
sh statistics tfo saving
[A] All of the connection related statistics are now available using the 'sh stat conn ...' command. That covers the first two commands above. The third command is now 'sh stat app savings'.
[Q] When connected via the GUI to an edge device running edge-services, when looking at 'Cisco WAFS' monitoring - the Cache size entry. Is that only showing the Cache size when WAFS/CIFS is being used, or does it also show the DRE Cache?
[A] That's just showing statistics for the CIFS object cache. The global DRE cache statistics can be seen with the 'sh stat dre' CLI command. For per-connection DRE statistics, use 'sh stat conn ...'.
Zach

WAAS 4.1.1C & DFS

Help please,I am not really a MS expert and am having trouble configuring the WAE's to see our DFS structure.
I can set up pre positioning for a physical server,just not for a DFS share.
I was lead to believe this was possible.Since WAAS was introduced DFS browsing on our remote site has been affected.Do the WAE's need to be authenticated by the domain? If so where is this configured?
Thanks in advance,
Nick

Nick,
The CIFS object cache in WAAS (either in 4.0 or 4.1) is by server name or IP address. So if you preposition a dfs share, it could be from the leaf node closest to your core WAE, which may not be the one closest to your users at the edge. You can affect this by naming the WAE location where you want to preposition from (http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v411/configuration/guide/filesvr.html#wp1043516). The CIFS acceleration is designed to be transparent to the end users and to use autodiscovery to accelerate remote servers, including DFS servers. You should not have to join the WAEs to the domain, it should be transparent to both them and the DFS servers.
Are the users going from a local server to a remote server and their responses are worse? Or they had a remote file server and now it's worse?
Can you tell if the users traffic is being accelerated by the CIFS adapters? Look in the connections listings to see if the CIFS adapter is identified in them.
Hope that gives you some places to start looking,
Dan

How to load-balance LotusNotes "Sametime" with CSS11500

I have 2 redundant CSS since a while, working fine. Recently I wanted to add load-balancing for the Chat service of LotusNotes Sametime. The problem is that the chat conversations are disconeected some how. On a first configuration, I didn't configure sticky mode on this content. Since then I added sticky mode "srcip" and a long sticky timeout (600 mn or 10 h.). But th eproblem is still the same. Can someone help ? Thank you. note : you'll find attached the configuration for the chat content.

Hi,
The CSS 11500 uses the ArrowPoint Content Aware (ACA) service to gather response time data for every flow for building statistical averages/variances for every service and content rule. The best servers are used, while the slow servers are pruned from the eligible list. This service also can manage persistent connections for e-commerce based on IP addresses (range), Secure Socket Layer (SSL) application IDs, and cookies.
As you are having only 2 servers for load-balance.
As your keepalive time is 30 sec which is quite high.
I suppose you should change your keepalive frequency 30 to
keepalive frequency 5
try this
as
using the default values of a 5-second keepalive frequency interval, a 5-second retry period interval, and maximum of three failures, a service can transition from the alive state to the dead state in 15 seconds; a 5-second interval between a keepalive response and the initial keepalive failure based on the keepalive frequency, and two failures, each occurring at 5-second intervals based on the retry period.

CIFS accelerator keepalive failure

Similar Messages

Maybe you are looking for