Cisco Nac Error message

Hi.
Today I found one of my standby NAC servers is down. The power switch in front shows amber and the power supply behind too shows amber. When accessing through serial i see the following output. What could be wrong?
Regards
Prasanth George

Hi
I did remove the power and reconnected the power. Still it ends in ILO. Even if i continously keep pressing the power button in front, the light keeps remaining amber. Its model is 3140 CAS server
Any suggestions?
Regards
Prasanth Mathews

Similar Messages

NAC Error Message in 4500 Switch

Hi There,
I have a 4507R core Switch running IOS version 12.2(31). I am trying to configure this switch for Clean Access; I have already configured the ACS server but when configuring the switch as a NAD and apply the "ip admission NAC" command on the interface level, I get the following error message:
% This config is not supported on this platform. Try configuring a new rule.
The NAC configuration I entered on the switch is as follows:
Switch(config)=ip access-list extended Interface_ACL
Switch(config-nacl)=permit udp any any eq 21862
Switch(config-nacl)=permit udp any any eq domain
Switch(config-nacl)=permit udp any any eq bootpc
Switch(config-nacl)=permit udp any any eq bootps
Switch(config-nacl)=permit tcp any host (antivirus ip address)
Switch(config)=ip admission name NAC eapoudp
Can somebody clarify to me the meaning of that error message and assist me whether my NAC configuration is alright?
Thanking in advance.
Regards,
Haitham

Hello All,
I just figured out the problem; you need first to configure the following commands before applying the ip admission command:
switchport mode access
switchport access vlan
Thanks to all.
Regards,
Haitham

Cisco works error messages

Posted by: alphaomegait - Aug 15, 2005, 7:00am PST
I get messages this, InCharge Domain : DFM Clear: Router FALSE 172.16.1.17 PerformanceException - System is experiencing Port or Interface performance problems.
all day long from Cisco Works.
I have not been able to find anything in technical support on the Cisco site to help with this. Can anyone give me a push in the right direction?
Thanks up front.

I think you have QOS setup on the interface it is possible that this is causing the drops and to rule it out we should try removing "service-policy output llq " from the interface and see if the drops still increment.

NAC - AV Definition Rule Error Message

Hello,
I have a NAC 4.9(3) with a Virus Definition rule for McAfee 8.8.x that is showing this error message:
From this error, It seems that winxp and win2k are not supported by this virus definition rule (for the installation it works fine), but from the AV rule config I only can select "Windows All" so I can not exclude from there winxp and win2k.
In the requirements config I can choose what version of windows to work with and there I didn't select winxp and win2k (just for testing) but the problem remains.
Any ideas??
Thanks in advance.

Hi Alfonso,
The requirement must be corrected and made valid before it can be used. Typically requirements/rules become invalid when there is an operating system mismatch.
The Clean Access Manager automatically validates requirements and rules as they are created. The Validity column under Device Management > Clean Access > Clean Access Agent > Requirements > Requirement List displays a blue checkmark if the requirement is valid and a red "X" if the requirement is invalid.
Highlighting red "X" icons (if any) with your mouse reveals which rule and which check is causing the requirement to be invalid.
To Correct an Invalid Requirement:
Step 1 Go to Device Management > Clean Access > Clean Access Agent > Requirements > Requirement-Rules.
Step 2 Correct any invalid rules or checks as described in Valid.
Step 3 Select the invalid Requirement Name from the dropdown menu.
Step 4 Select the Operating System.
Step 5 Make sure the Requirement met if: expression is correctly configured.
Step 6 Make sure the rules selected for the requirement are valid (blue checkmark in Validity column).
Moreover kindly make sure that all rule configuration steps are according to the given below link:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cam/m_agntd.html#wp1354971

Cisco ISE 1.2.1 - "12929 NAS sends RADIUS accounting update messages too frequently" error message

Hello,
Running ISE 1.2.1 Patch 1, we get following error message: "12929 NAS sends RADIUS accounting update messages too frequently" on all NAS Devices (i.e. C-4500s running SPA.03.04.00.SG.151-2.SG.bin).
There was a previous post on this forum (RE: https://supportforums.cisco.com/discussion/11894006/ise-12-wlc-5508-nas-sends-radius-accounting-update-messages-too-frequently) that stated that the "aaa accounting update newinfo" command doesn't solve this problem even though bug CSCuh01760 "Misconfigured NAS criteria needs to be changed" is resolved in ISE 1.2.1 as per the release notes.
Could you please advise us on that to do now? Thank you.
Regards.

For the WLC side:
1. You are probably hitting this bug CSCug14713
2. You can also change the "Interim Update" located under the SSID > Security AAA Servers
For the Switch side:
1. You might be hitting this bug:CSCuh01760
2. Make sure that you have the following command in your config "aaa accounting update newinfo"
Thank you for rating helpful posts!

I am getting an un expected error message when updating the setting to "extend network". Is there an obvious setting I may be missing? Cisco router being used.

I am getting an un expected error message when updating the setting to "extend network". Is there an obvious setting I may be missing? Cisco router being used.

If you are trying to "extend" using wireless only, you may not be aware that Apple designed the "extend" feature as a proprietary setting to only work with other Apple routers.
It is extremely unlikely that this will work with a Cisco router.
If your plans call for connecting the AirPort Express to the Cisco router using a wired Ethernet connection, it should be possible to configure the Express that way.

Error Message in Cisco Works

I am running device troubleshooting in cisco works on a 1200 series acces point.
I am getting the followinf error message:
VTP Disconnected Domain DomainName:NO_VTP
Do I need to upgrade IOS on all AP's??

It seems like that Link in a VTP domain is not set to trunk. Verify the trunk.

I am trying to get an AP to associate with a wireless Controller but keep getting this error message (%CAPWAP-3-ERRORLOG:Could not resovle CISCO-CAPWAP-CONTRPLLER)

I am trying to get an AP to associate with a wireless Controller but keep getting this error message (%CAPWAP-3-ERRORLOG:Could not resovle CISCO-CAPWAP-CONTRPLLER)
I can ping through to the WLC and the AP.

Thanks a lot Loe for the Feedback. The issue was not my configuration but rather the type of Wireless LAN controller I have, the WLC does not support my AP's. I have a Cisco 520 series WLC and got to know they only work with the 500 series AP's. my AP's are 1130 series meaning i have to get another controller or change the APs.
thanks once again..

DCR error message in Cisco Works

get error message:Error in communicating with DCR server.
Went in an restart server but still getttin message.
DCR log is attached.

Hi ,
Seems to be Certificate has expired on the LMS server:
java.security.cert.CertificateExpiredException: NotAfter: Sun Jan 13 09:22:18 CST 2013
at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:256)
Genearte a new certificate and check the issue :
To generate a new certificate in LMS
1. Stop the daemon Manager
a. Windows: net stop crmdmgtd
b. Solaris: /etc/init.d/dmgtd stop
1. Remove the following certificate files from (NMSROOT/MDC/Apache/conf/ssl)
a. server.crt
b. server.key
c. server.pk8
d. server.csr
2. Disable SSL:
for E.g
D:\Program Files\CSCOpx\bin>perl "D:\Program Files\CSCOpx\MDC\Apache\ConfigSSL.pl" -disable
3. Enable SSL to generate certificate:
D:\Program Files\CSCOpx\bin>perl "D:\Program Files\CSCOpx\MDC\Apache\ConfigSSL.pl" -enable
4. Start Daemon Manager
I hope this will help
Thanks
Afroz

Cisco switch 3750x TE Error Message

Dears
Hello
PLease I faced the following Error Message in my switch c3750x TE ver 15 , please let me know what is this error , does my switch has bug ?
%TCP-2-INVALIDTCB: Invalid TCB pointer: 0x7B7A89C -Process= "HTTP CORE", ipl= 0, pid= 301
-Traceback= 4FF410z 11ED788z 11CDA1Cz 11D53A4z CF3D84z CF4190z CFB78Cz CEDEB8z 26E07A8z 26DAD58z
Jan 7 07:08:22.264: %TCP-2-INVALIDTCB: Invalid TCB pointer: 0x6D4BC2C -Process= "HTTP CORE", ipl= 0, pid= 301
-Traceback= 4FF410z 11ED788z 11CDA1Cz 11D53A4z CF3D84z CF4190z CFB78Cz CEDEB8z 26E07A8z 26DAD58z
Jan 7 07:08:22.272: %TCP-2-INVALIDTCB: Invalid TCB pointer: 0x5448928 -Process= "HTTP CORE", ipl= 0, pid= 301
-Traceback= 4FF410z 11ED788z 11CDA1Cz 11D53A4z CF3D84z CF4190z CFB78Cz CEDEB8z 26E07A8z 26DAD58z
Jan 7 07:08:22.281: %TCP-2-INVALIDTCB: Invalid TCB pointer: 0x7B8D718 -Process= "HTTP CORE", ipl= 0, pid= 301
-Traceback= 4FF410z 11ED788z 11CDA1Cz 11D53A4z CF3D84z CF4190z CFB78Cz CEDEB8z 26E07A8z 26DAD58z
Jan 8 01:47:14.816: %IPC-2-INVALIDZONE: Invalid IPC Zone 0x60000000.
-Traceback= 4FF410z DC93DCz 62D3Cz 62E44z 26E07A8z 26DAD58z
Jan 8 01:47:34.772: %IPC-2-INVALIDZONE: Invalid IPC Zone 0xB0000000.
-Traceback= 4FF410z DC93DCz 62D3Cz 62E44z 26E07A8z 26DAD58z
Jan 8 01:47:55.660: %IPC-2-INVALIDZONE: Invalid IPC Zone 0x20000000.
-Traceback= 4FF410z DC93DCz 62D3Cz 62E44z 26E07A8z 26DAD58z
Jan 8 01:48:16.698: %IPC-2-INVALIDZONE: Invalid IPC Zone 0x20000000.
-Traceback= 4FF410z DC93DCz 62D3Cz 62E44z 26E07A8z 26DAD58z
Switch Ports Model SW Version SW Image
* 1 30 WS-C3750X-24 15.0(2)SE6 C3750E-UNIVERSALK9-M

I just did a lookup on the error, and this is the information I got. Theres not a lot of information here. And no similar bugs on the 3750X recorded.

Error with GPOs on Cisco NAC

I have cisco nac deployed inband, all PCs had the CCA Agent deployed via a gpo before the migration. Now that all the systems are behind NAC inband, none of the systems will process GPOs, Machine or user policies. I have the unauthenticated role allowing all traffic to all the domain controllers, but with no luck. If i move the PC to a vlan that is not trunked to the CAS the GPOs process with no problem. Any ideas...?

I think the ports list in the CAS Manual is not complete. Try this list of ports from the CAM Manual chapter:User Management: Traffic Control, Bandwidth, Schedule
Allow TCP *:* Server/255.255.255.255: 88
Allow UDP *:* Server/255.255.255.255: 88
Allow TCP *:* Server/255.255.255.255: 389
Allow UDP *:* Server/255.255.255.255: 389
Allow TCP *:* Server/255.255.255.255: 445
Allow UDP *:* Server/255.255.255.255: 445
Allow TCP *:* Server/255.255.255.255: 135
Allow UDP *:* Server/255.255.255.255: 135
Allow TCP *:* Server/255.255.255.255: 3268
Allow UDP *:* Server/255.255.255.255: 3268
Allow TCP *:* Server/255.255.255.255: 139
Allow TCP *:* Server/255.255.255.255: 1025

Script Error - Cisco NAC Agent

I have no idea why this program stopped working. The attached files shows just exactly what's happening.
This program originally worked perfectly fine, and i've only recently have had these errors pop up.
I've also reinstalled, and tried to repair it during the installation process, but these problems still arised.
Does anyone know how to fix it?

Hi Kyle,
I have seen these errors sometimes when a DLL file is missing or not registered properly. Can you run a tool like Process Monitor or Process Explorer from Microsoft Sysinternals and load the agent and when the error messages pop up see if there are any errors in the DLLs the agent is trying to access?
Also the Microsoft event viewer logs may show some additional information as well.
Thanks,
Nate

Cisco NAC agent services not running on Windows XP

Hi,
I've problem with Cisco NAC agent services on Windows XP professional SP3.
After first installation using user local administrator, the services of Cisco NAC agent on windows machine running well, but after logout, and login using another user which is registered in domain users, the services of Cisco NAC agent is going to stopped (going to Manual mode not automatic, and the status is stopped).
This situation is not happened on all windows machines, several machines running well.
Cisco NAC agent version 4.9.0.42
Has anyone seen this type of problem?
Below i attached windows machine information from ones running well and not running, Thanks
Regards,
Rian

Hi thanks for your answers, dbconsole is started in services.msc and also Agent, but goes on to say that the agent is not running.
In sysman log shows this,
"03/20/2012 13:38:54,553 [MetricCollector: HOMETAB_THREAD600: 60] ERROR rt.DbMetricCollectorTarget _getAllData.328 - oracle.sysman.emSDK.emd.comm.CommException: Exception in sending Request :: null
oracle.sysman.emSDK.emd.comm.CommException: Exception in sending Request :: null
at oracle.sysman.emSDK.emd.comm.EMDClient.getResponseForRequest_ (EMDClient.java: 1330)
at oracle.sysman.emSDK.emd.comm.EMDClient.getResponseForRequest (EMDClient.java: 1223)
at oracle.sysman.emSDK.emd.comm.EMDClient.getMetrics (EMDClient.java: 640)
at oracle.sysman.emo.perf.metric.rt.DbHomeTab._getAllData (DbHomeTab.java: 324)
at oracle.sysman.emo.perf.metric.rt.DbHomeTab.getData (DbHomeTab.java: 139)
at oracle.sysman.emo.perf.metric.eng.MetricCached.collectCachedData (MetricCached.java: 402)
at
at oracle.sysman.emo.perf.metric.eng.MetricCollectorThread.run (MetricCollectorThread.java: 320)
at java.lang.Thread.run (Thread.java: 595)
20/03/2012 22:00:03,335 [JobWorker 772: Thread-13] ERROR em.jobs executeCommand.161 - UpdateARUTables: Oracle MetaLink credentials are incorrect or missing. Click Patching Setup parameters required to September."
In event viewer shows this,
"Agent process exited abnormally DURING initialization." but this message appears a few hours after having started the service.
I am using the Administrator account

Lots of Anyconnect Error Message in Windows Event Log

Hi Community.
We have lots of Anyconnect Error Messages in the Windows Event Log. Following two examples.
Can anyone tell me why these errors appears and how do I fix them ? I already installed the newest Anyconnect on my machine.
Thanks in advance and Kind Regards Patrick
Example 1
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97564</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::logProbeFailure File: .\NetEnvironment.cpp Line: 1432 Invoked Function: CHttpProbeAsync::SendProbe Return Code: -27066354 (0xFE63000E) Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT HTTP (host: 109.164.211.237)</Data>
</EventData>
Example 2
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97565</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp Line: 1385 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target</Data>
</EventData>

HI and welcome to Discussions,
in my personal opinion there is not much for you to worry about.
The 'Windows Tool for the elimination of malware' is nothing you miss as long as you have a decent Anti-Virus Software running.
The update for the IE 7 might be missing an installed IE 7, which can do by downloading it yourself from Microsofts webpage.
If you don't use the IE but something like Firefox or Opera or Safari, than don't bother with these update.
Stefan

Webex Connect "An unknown error ocurred connecting the server" Error Message

Hi,
We have the latest Cisco Webex Connect Clients (7.1.1 Build 16597) in use in our company. With no obvious reason one of our employees now can't connect to Webex Connect getting the Error Message "An unknown error ocurred while connecting to the server." We tried to close and re open the client and to re-enter the password, both with no succes. Using another Jabber/XMPP capable IM Client works but not using Cisco Webex Connect.
Can anyone help?
Cheers,
Patrick

You may face this issue if your IE is working in offline mode.
To resolve:
Try going to google.com on internet explorer.
Click on connect when prompted.
Once google.com opens fine then try logging in to the WebEx Connect again.
It should work now.

Cisco Nac Error message

Similar Messages

Maybe you are looking for