Client notification

I was curious if its possible to be notified when a MAC address is seen again. I am looking for a laptop that is not currently online.

I know of no way you can notify on a specific MAC in WCS but you might be able to kluge a location change event notification if you have a location appliance:
http://www.cisco.com/en/US/docs/wireless/location/2700/5.2/configuration/guide/lacg_52.html
Not elegant but might work.

Similar Messages

Client Notification Issue

Hoping someone can point me in the right direction here.
Infrastructure:
SCCM 2012 R2 CU1:
Single Primary Site Server (Server 2012 R2 Update), With MP Role
Remote SQL 2012 Server (Server 2012 R2 Update)
Second Standalone MP (Server 2012 R2 Update)
HTTPS with PKI Certificate deployed for DP and MP roles
We have been testing client rollout to pilot machine over the past couple of weeks and everything (appears) to be working fine. OSD, Application deployments, etc. all working as expected.
The default ports for Client communication are select (80/443 and 10123)
Client Notification is not working however. I can go through the motions to create a "Download Machine Policy" notification, but the policy doesn't make it to the machine and all status messages for the notification stay at "unknown".
*Side note, the online tests to keep the client active appears to be working fine.
The BGBSetup logs show successful installation for both servers.
I get lots of messages similar to this in the BGBServer.log (on both MP's):
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: Client ID is not 41 length. 8478e00c-d07b-4d93-b0f4-e01f4c78cc3b
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
ERROR: The message body is invalid. <BgbSignInMessage TimeStamp="2014-06-27T18:50:02Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7958.1203</ClientVersion><ClientID>8478e00c-d07b-4d93-b0f4-e01f4c78cc3b</ClientID></BgbSignInMessage>
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
Failed to process SignIn message from client [::ffff:10.100.122.71]:56195.
SMS_NOTIFICATION_SERVER 6/27/2014 1:50:02 PM
4000 (0x0FA0)
BGBmgr.log shows no errors:
Begin to handle file Bgbi1v41.BOS SMS_NOTIFICATION_MANAGER
6/27/2014 2:00:26 PM 6892 (0x1AEC)
Begin to process file C:\Program Files\Microsoft Configuration Manager\inboxes\bgb.box\Bgbi1v41.BOS
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
Server Name: MP.DOMAIN.COM, Version: 704
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
No records need to be BCPed SMS_NOTIFICATION_MANAGER
6/27/2014 2:00:26 PM 6892 (0x1AEC)
Successfully processed file C:\Program Files\Microsoft Configuration Manager\inboxes\bgb.box\Bgbi1v41.BOS
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
Successfully processed file Bgbi1v41.BOS, clean it.
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
BgbManager is waiting for file and registry change notification or timeout after 60 seconds
SMS_NOTIFICATION_MANAGER 6/27/2014 2:00:26 PM
6892 (0x1AEC)
CcmNotificationAgent.log on a client:
Access point is MP.DOMAIN.COM. (SSLEnabled = 0)
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
CRL Checking is Enabled. BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Both TCP and http are enabled, let's try TCP connection first.
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Connecting to server with IP: 10.32.8.135 Port: 10123
BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Handshake was successful
BgbAgent
6/27/2014 12:52:29 PM 5544 (0x15A8)
Pass verification on server certificate.
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Update the timeout to 900 second(s)
BgbAgent 6/27/2014 12:52:29 PM
5544 (0x15A8)
Receive signin confirmation message from server, client is signed in.
BgbAgent 6/27/2014 12:52:31 PM
5544 (0x15A8)
Successfully sent keep-alive message.
BgbAgent 6/27/2014 1:07:32 PM
5544 (0x15A8)
Successfully sent keep-alive message.
BgbAgent 6/27/2014 1:22:33 PM
5544 (0x15A8)
IIS log shows 200's across the board.
Any ideas on where to look next?

You can check to see if Firewall is the issue.
You can also use the following log files to help you troubleshoot client notification problems.
Component
Log
Notification Manager
<smssiteserver setup dir>\logs\bgbmgr.log
Notification Server
<mp setup dir>\logs\BGBServer.log
<sms_ccm dir or client setup dir>\logs\BgbHttpProxy.log
For installation issues:
<mp setup dir>\logs\BgbSetup.log
<mp setup dir>\logs\bgbisapiMSI.log
Notification Agent
<client setup dir>\logs\CcmNotificationAgent.log
Refer to the blog posted by Yvette...
http://blogs.technet.com/b/configmgrteam/archive/2012/09/27/fast-channel-for-system-management.aspx
Krishna Santosh Maadasu Please remember to click “Mark as Answer” on the post that helps you, and click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Client Notification Agent error

hello,
I've been using client notification to update computer policy for a certain device collection but it is failing to do, the status of the client shows as "offline" when I check the status of the policy update in "Client
Operations" even though the client is online, and has the sccm client installed and active, and I get the following error when I look at CCMNotificationAgent.log file on the client:
<![LOG[Both TCP and http are enabled, let's try TCP connection first.]LOG]!><time="12:59:27.915+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbcontroller.cpp:792">
<![LOG[Connecting to server with IP: 192.168.137.131 Port: 10123
]LOG]!><time="12:59:27.915+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbtcpclient.cpp:699">
<![LOG[Failed to connect to server with IP v4 address with error 10060. Try next IP...
]LOG]!><time="12:59:48.947+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbtcpclient.cpp:703">
<![LOG[Failed to signin bgb client with error = 80004005.]LOG]!><time="12:59:48.947+420" date="11-01-2014" component="BgbAgent" context="" type="3" thread="3488" file="bgbcontroller.cpp:635">
<![LOG[Connecting to server with IP: 192.168.137.131 Port: 10123
]LOG]!><time="13:00:48.951+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbtcpclient.cpp:699">
<![LOG[Failed to connect to server with IP v4 address with error 10060. Try next IP...
]LOG]!><time="13:01:09.979+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbtcpclient.cpp:703">
<![LOG[Failed to signin bgb client with error = 80004005.]LOG]!><time="13:01:09.979+420" date="11-01-2014" component="BgbAgent" context="" type="3" thread="3488" file="bgbcontroller.cpp:635">
<![LOG[Fallback to HTTP connection.]LOG]!><time="13:01:09.979+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="bgbcontroller.cpp:828">
<![LOG[Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:8C18125B-D340-45F9-86AF-C05EA762DDD3";
DateTime = "20141101200109.995000+000";
HostName = "cm01.viamonstra.local";
HRESULT = "0x00000000";
ProcessID = 3728;
StatusCode = 0;
ThreadID = 3488;
]LOG]!><time="13:01:09.995+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="event.cpp:715">
<![LOG[Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:8C18125B-D340-45F9-86AF-C05EA762DDD3";
DateTime = "20141101200111.167000+000";
HostName = "cm01.viamonstra.local";
HRESULT = "0x00000000";
ProcessID = 3728;
StatusCode = 0;
ThreadID = 3488;
]LOG]!><time="13:01:11.167+420" date="11-01-2014" component="BgbAgent" context="" type="1" thread="3488" file="event.cpp:715">
<![LOG[Message validation failure with error = 87d00309.]LOG]!><time="13:01:11.182+420" date="11-01-2014" component="BgbAgent" context="" type="3" thread="3488" file="bgbconnector.cpp:371">
<![LOG[Failed to signin bgb client with error = 87d00309.]LOG]!><time="13:01:11.182+420" date="11-01-2014" component="BgbAgent" context="" type="3" thread="3488" file="bgbcontroller.cpp:635">
I'm using SCCM 2012 R2 CU3, and other clients in other device collections are not having this issue, so I'm assuming it's this one client. I tried to disable firewall completely on the client and even restarted it a couple of times, no luck. Any thoughts?
Thanks,

That's really strange if there's only a single client that's not able to connect to the BGB server on the MP. The 10060 error means that:
A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Have you verified that the client can actually establish a connection on port 10123? Like with telnet, or a custom PowerShell script?
Here's some more information regarding the error message:
Message : A TCPIP socket error has occurred (10052): The connection has been broken due to the keep-alive activity detecting a failure while the operation was in progress.
Reason : The server closed the client connection.
Have a look at the Troubleshooting section in this blog post:
http://blogs.technet.com/b/configmgrteam/archive/2012/10/11/3522960.aspx
Regards,
Nickolaj Andersen | www.scconfigmgr.com | @Nickolaja

Client notification and/or permission?

Does anyone know if ARD 3 offers a better notification system for when clients are being controlled/observed? The current option of showing status in the menu bar is not as obvious as I would like. Ideally, a permission dialog would be available to require client permission to observe, but even a more obvious notification would be helpful.
If ARD 3 doesn't have this, has anyone solved this problem using another method?
PowerMac G5 with v2.2, connecting to a MacBook Pro Mac OS X (10.4.6)

ARD 3's permission request is for guest user control only; administrators can still observe and take control without the user's permission. And the menu bar icon is still the only notification mechanism that the system is being observed.

OCI client notification without a AQ queue

Hi Forum,
Well, put it in the simplest manner, I want to run a perl script when a Insert trigger occurs.
And I was wondering if it is possible that a OCI client be notified, when a trigger occurs, without using a AQ queue ?
I ask that because in Oracle Manuals we can find this:
An OCI application can:
* register interest in notifications in the AQ namespace and be notified when an enqueue occurs.
* register interest in subscriptions to database events and receive notifications when the events are triggered.
* manage registrations, such as disabling registrations temporarily or dropping the registrations entirely.
* post, or send, notifications to registered clients.
Hoping to hear from you soon, forum.
Pedro Campos Galvão
Edited by: user639404 on 20/Nov/2008 16:01

yes, you can.
follow the oracle documentation:
Oracle Call Interface Programmer's Guide -
9. OCI Programming Advanced Topics :: Database Change Notification.

No client notifications on WCS

We have two WLC'2 4402(sw 5.2.193.0) and one WCS with sw 5.2.148.0. I have a lot of client warnings in the controllers trap logs but none clients alarms on my WCS. Is there any reason why the WCS does not reports client problems ?

Use Administration > Logging to access the Administer Logging Options page. This logging function is only related to WCS logging and not syslog information. The logging for controller syslog information can be done on the Controller > Management > Syslog page.
Email Notification can be done with WCS. WCS includes a built-in email notification function that can notify network operators when critical alarms occur. Refer to the WCS Monitor > All Alarms > Email Notification page to view the current alarm notification settings.
Use Monitor/Alarms.
From a command drop-down list, choose Email Notification.
Click GO to access this page.
This page allows you to view the alarm categories with the critical-alarm email notification enabled and disabled, the current From and To email addresses, and the current SMTP server. This page also allows you to enable and disable email notification (check box checked = email notification ON; check box unchecked = email notification OFF) for any or all of the alarm categories, and it allows you to access an alarm category email notification setup page.
For every category except Coverage Holes, the alarm severity must be critical to trigger the email. Email notification is available only for alarms, not for events.
Note: If you do not receive emails from WCS, check whether port 25 is blocked.
Note: A WCS administrator currently has no control over which events generate alarms, when they time out, or the degree of their severity. On the controller, individual types of events can be enabled or disabled (such as management, SNMP, trap controls, etc.).

No client notification if EJB store fails

We are using Oracle EJB's with bean managed persistence. The client app ends a transaction using the usertransaction.commit and doesn't get any exception if a update failed.
How can we make shure that the client gets an exception if an update fails ?
Thanks in advance

Thanks for taking out the time... really appreciate it.
The problem is as follows:
Entity EJB:
Bean managed Persistence:
Transaction Attribute: Required
Home Interface:------------------------------
import java.rmi.*;
import javax.ejb.*;
import com.derigen.common.*;
public interface DerigenFuturesBean extends EJBObject {
public FuturesBean getDbObject() throws EJBException;
public void setDbObject(FuturesBean newDbObject) throws EJBException;
Remote Interface:----------------------------
import java.rmi.*;
import javax.ejb.*;
import com.derigen.common.*;
public interface DerigenFuturesBeanHome extends EJBHome {
public DerigenFuturesBean create(FuturesBean newDbObject) throws RemoteException, CreateException;
public DerigenFuturesBean findByPrimaryKey(DerigenPK primaryKey) throws RemoteException, FinderException;
Bean Class:----------------------------------
import javax.ejb.*;
import java.sql.*;
import com.derigen.common.*;
public class DerigenFuturesBeanBean implements EntityBean{
EntityContext ctx;
FuturesBean dbObject;
Connection conn;
String iString = "insert into future_deals (ID,TRADE_DATE,BUY_SELL_FLAG,CONTRACTS,CMD_ID,FM_MTH_ID,TO_MTH_ID,PRICE,BROKER_CP_ID,BROKER_RATE,CHA_CP_ID,CHACCT_ID,CHA_RATE,BOOK_ID,SPECULATIVE_HEDGE_FLAG) values (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
String uString = "update future_deals set TRADE_DATE = ?,BUY_SELL_FLAG = ?,CONTRACTS = ?,CMD_ID = ?,FM_MTH_ID = ?,TO_MTH_ID = ?,PRICE = ?,BROKER_CP_ID = ?,BROKER_RATE = ?,CHA_CP_ID = ?,CHACCT_ID = ?,CHA_RATE = ?,BOOK_ID = ?,SPECULATIVE_HEDGE_FLAG = ? where ID = ?";
String dString = "delete future_deals where ID = ?";
String sString = "SELECT FD.ID,to_char(FD.TRADE_DATE,\'DD-MON-YY\'),FD.BUY_SELL_FLAG,FD.CONTRACTS,FD.CMD_ID,CMD.CODE,FD.FM_MTH_ID,FMMTH.CODE,FD.TO_MTH_ID,TOMTH.CODE,FD.PRICE,FD.BROKER_CP_ID,BRKCP.CODE,FD.B ROKER_RATE,FD.CHA_CP_ID,CHACP.CODE,FD.CHACCT_ID,CHACCT.CODE,FD.CHA_RATE,FD.BOOK_ID,BOOK.CODE,FD.SPECULATIVE_HEDGE_FLAG FROM FUTURE_DEALS FD, COMMODITIES CMD, MONTHS FMMTH, MONTHS TOMTH, COUNTERPARTIES BRKCP, COUNTERPARTIES CHACP, CLEARINGHOUSE_ACCOUNTS CHACCT, TRADING_BOOKS BOOK WHERE FD.ID = ? AND FD.CMD_ID = CMD.ID AND FD.FM_MTH_ID = FMMTH.ID AND FD.TO_MTH_ID = TOMTH.ID AND FD.BROKER_CP_ID = BRKCP.ID AND FD.CHA_CP_ID = CHACP.ID AND FD.CHACCT_ID = CHACCT.ACCOUNT_ID AND FD.CHA_CP_ID = CHACCT.CP_ID AND FD.BOOK_ID = BOOK.ID";
String idString = "select id from future_deals where id = ?";
String sqString = "select fd_seq.nextval from dual";
PreparedStatement iStmt;
PreparedStatement idStmt;
PreparedStatement uStmt;
PreparedStatement dStmt;
PreparedStatement sStmt;
public DerigenFuturesBeanBean() {
public DerigenPK ejbCreate(FuturesBean newDbObject) throws CreateException {
dbObject = newDbObject;
try {
dbObject.setPrimaryKey(new FuturesPK(getIdFromSequence()));
if (((FuturesPK) dbObject.getPrimaryKey()).getId().equals("0"))
throw new CreateException("ID could not be retrieved from sequence.");
getConn();
iStmt = conn.prepareStatement(iString);
iStmt.setString(1, ((FuturesPK) dbObject.getPrimaryKey()).getId());
iStmt.setString(2, dbObject.getTradedate());
iStmt.setString(3, dbObject.getBuysellflag());
iStmt.setString(4, dbObject.getContracts());
iStmt.setString(5, dbObject.getCmdid());
iStmt.setString(6, dbObject.getFmmthid());
iStmt.setString(7, dbObject.getTomthid());
iStmt.setString(8, dbObject.getPrice());
iStmt.setString(9, dbObject.getBrokercpid());
iStmt.setString(10, dbObject.getBrokerrate());
iStmt.setString(11, dbObject.getChacpid());
iStmt.setString(12, dbObject.getChacctid());
iStmt.setString(13, dbObject.getCharate());
iStmt.setString(14, dbObject.getBookid());
iStmt.setString(15, dbObject.getSpechedgeflag());
int a = iStmt.executeUpdate();
iStmt.close();
return dbObject.getPrimaryKey();
} catch (SQLException se) {
throw new CreateException(se.getMessage());
public void ejbPostCreate(FuturesBean newDbObject) {
public DerigenPK ejbFindByPrimaryKey(DerigenPK primaryKey) throws FinderException {
FuturesPK pk = (FuturesPK) primaryKey;
try {
getConn();
idStmt = conn.prepareStatement(idString);
idStmt.setString(1, pk.getId());
ResultSet rs = idStmt.executeQuery();
if (!rs.next())
throw new FinderException("Record does not exist.");
rs.close();
idStmt.close();
return pk;
} catch (SQLException se) {
throw new FinderException(se.getMessage());
public void ejbActivate() {
public void ejbLoad() throws EJBException {
FuturesPK pk = (FuturesPK) ctx.getPrimaryKey();
dbObject = new FuturesBean();
dbObject.setPrimaryKey(pk);
try {
getConn();
sStmt = conn.prepareStatement(sString);
sStmt.setString(1, pk.getId());
ResultSet rs = sStmt.executeQuery();
if (rs.next()) {
dbObject.setTradedate(rs.getString(2));
dbObject.setBuysellflag(rs.getString(3));
dbObject.setContracts(rs.getString(4));
dbObject.setCmdid(rs.getString(5));
dbObject.setCmd(rs.getString(6));
dbObject.setFmmthid(rs.getString(7));
dbObject.setFmmonth(rs.getString(8));
dbObject.setTomthid(rs.getString(9));
dbObject.setTomonth(rs.getString(10));
dbObject.setPrice(rs.getString(11));
dbObject.setBrokercpid(rs.getString(12));
dbObject.setBroker(rs.getString(13));
dbObject.setBrokerrate(rs.getString(14));
dbObject.setChacpid(rs.getString(15));
dbObject.setClearinghouse(rs.getString(16));
dbObject.setChacctid(rs.getString(17));
dbObject.setClearinghouseaccount(rs.getString(18));
dbObject.setCharate(rs.getString(19));
dbObject.setBookid(rs.getString(20));
dbObject.setBook(rs.getString(21));
dbObject.setSpechedgeflag(rs.getString(22));
dbObject.setOlds();
rs.close();
sStmt.close();
} catch (SQLException se) {
throw new EJBException(se.getMessage());
public void ejbPassivate() {
public void ejbRemove() throws EJBException {
FuturesPK pk = (FuturesPK) ctx.getPrimaryKey();
try {
getConn();
dStmt = conn.prepareStatement(dString);
dStmt.setString(1, pk.getId());
int a = dStmt.executeUpdate();
dStmt.close();
} catch (SQLException se) {
throw new EJBException(se.getMessage());
public void ejbStore() throws EJBException {
try {
getConn();
uStmt = conn.prepareStatement(uString);
uStmt.setString(1, dbObject.getTradedate());
uStmt.setString(2, dbObject.getBuysellflag());
uStmt.setString(3, dbObject.getContracts());
uStmt.setString(4, dbObject.getCmdid());
uStmt.setString(5, dbObject.getFmmthid());
uStmt.setString(6, dbObject.getTomthid());
uStmt.setString(7, dbObject.getPrice());
uStmt.setString(8, dbObject.getBrokercpid());
uStmt.setString(9, dbObject.getBrokerrate());
uStmt.setString(10, dbObject.getChacpid());
uStmt.setString(11, dbObject.getChacctid());
uStmt.setString(12, dbObject.getCharate());
uStmt.setString(13, dbObject.getBookid());
uStmt.setString(14, dbObject.getSpechedgeflag());
uStmt.setString(15, ((FuturesPK) dbObject.getPrimaryKey()).getId());
int a = uStmt.executeUpdate();
uStmt.close();
} catch (SQLException se) {
throw new EJBException(se.getMessage());
public void setEntityContext(EntityContext ctx) {
this.ctx = ctx;
public void unsetEntityContext() {
this.ctx = null;
private String getIdFromSequence() throws SQLException {
getConn();
String idFromSeq = "0";
Statement stmt = conn.createStatement();
ResultSet rs = stmt.executeQuery(sqString);
if (rs.next())
idFromSeq = rs.getString(1);
return idFromSeq;
public FuturesBean getDbObject() {
return dbObject;
public void setDbObject(FuturesBean newDbObject) {
dbObject = newDbObject;
public void getConn() throws SQLException {
if (conn == null)
conn = new oracle.jdbc.driver.OracleDriver().defaultConnection();
XML Deployment Descriptor:-------------------
<?xml version = '1.0' encoding = 'UTF-8'?>
<!DOCTYPE ejb-jar PUBLIC "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 1.1//EN" "ejb-jar.dtd">
<ejb-jar>
<enterprise-beans>
<entity>
<description>Entity Bean (Bean-managed Persis tence)</description>
<display-name>DerigenFuturesBean</display-name>
<ejb-name>DerigenFuturesBean</ejb-name>
<home>distributed.DerigenFuturesBeanHome</home>
<remote>distributed.DerigenFuturesBean</remote>
<ejb-class>distributedserver.DerigenFuturesBeanBean</ejb-class>
<persistence-type>Bean</persistence-type>
<prim-key-class>com.derigen.common.DerigenPK</prim-key-class>
<reentrant>False</reentrant>
</entity>
</enterprise-beans>
<assembly-descriptor>
<security-role>
<description>no description</description>
<role-name>PUBLIC</role-name>
</security-role>
<method-permission>
<description>no description</description>
<role-name>PUBLIC</role-name>
<method>
<ejb-name>DerigenFuturesBean</ejb-name>
<method-name>*</method-name>
</method>
</method-permission>
<container-transaction>
<description>no description</description>
<method>
<ejb-name>DerigenFuturesBean</ejb-name>
<method-name>*</method-name>
</method>
<trans-attribute>Required</trans-attribute>
</container-transaction>
</assembly-descriptor>
</ejb-jar>
Oracle Specific Deployment Descriptor:-------
<?xml version = '1.0' encoding = 'UTF-8'?>
<!DOCTYPE oracle-descriptor PUBLIC "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 1.1//EN" "oracle-ejb-jar.dtd">
<oracle-descriptor>
<mappings>
<ejb-mapping>
<ejb-name>DerigenFuturesBean</ejb-name>
<jndi-name>test/DerigenFuturesBean</jndi-name>
</ejb-mapping>
</mappings>
</oracle-descriptor>
I have left out code for the generic/primary key classes, if you need that code too, please let me know.
As you can see ejbStore does an update and supposing it fails because the value being updated is too large or the tablespace fills up etc. I would expect to recieve an exception at the client side, but that doesn't happen.
Again I appreciate all the help.
Ashish.
null

Failed to install CM Client on computers located in untrusted site

Hello,
I deploy System Center 2012 SP1 Configuration Manager and successfully push client to Desktops/Servers, I read in TechNet that this scenario is supported:
"The client is on a domain computer that does not have a two-way forest trust with the site server and site system roles are not installed in the client's
forest"
In my case, I have servers in DMZ and those servers are member of domain created in DMZ, for security reason we can's create two-way trust with AD in the main site.
I found the following guides from blog.technet.com:
Cross Forest Support in ConfigMgr 2012 Part 2: Forest Discovery, Publishing, and Client
Push Installation.
Unfortunately I didn't found in TechNet what required ports to open between site system and DMZ to manage client in un-trusted forest and receive the following error what I add DMZ forest:
I open the following ports CM and AD in DMZ:
Outbound and inbound: TCP/UDP port 389
Outbound and inbound: TCP port 636
Outbound and inbound: TCP port 3268
Outbound and inbound: TCP port 3269
Outbound and inbound: TCP/UDP port 88 “User and Computer Authentication, Forest Level Trusts”.
Outbound and inbound: TCP and UDP 53 “User and Computer Authentication, Name Resolution”
Outbound and inbound: TCP and UDP 445 “User and Computer Authentication”
Outbound and inbound: TCP Dynamic “User and Computer Authentication”
Outbound and inbound: TCP and UDP 464 “User and Computer Authentication”
Outbound and inbound: UDP 137 “User and Computer Authentication”
Outbound and inbound: TCP 139 “User and Computer Authentication”
I Open the following ports between DMZ servers and CM
Outbound and inbound: File and Printer Sharing
Inbound: Windows Management Instrumentation (WMI)
Outbound: TCP Port 80 (for HTTP communication)
Outbound: TCP Port 443 (for HTTPS communication)
Outbound: TCP Port 10123
(for Client notification)
Inbound: TCP port 2701 (for Remote control)
Allow ICMP traffic (for client push installation to succeed)
Outbound and inbound: TCP port 445
(for Server Message Block (SMB) between the site server and client computer)
Outbound and inbound: TCP/UDP port 135
(for RPC endpoint mapper between the site server and the client computer)
Outbound and inbound: Dynamic ports RPC “49152 – 65535” (Dynamic ports for Windows 7, Windows 2008)
Outbound and inbound: Dynamic ports RPC “1025 – 5000” (Dynamic ports for Windows XP, Windows 2003)
Inbound: TCP port 1027
Outbound and inbound: TCP port 8530 and 8531
(for Software Update Point)
Abduljalil Abolzahab

Name resolution ok? Are you able to resolve the target domain from the computer where you're running the discovery? More details in Kent's post
http://blog.coretech.dk/kea/multi-forest-support-in-configmgr-2012-part-i-managing-clients-in-an-untrusted-forest/
Anoop C Nair -
@anoopmannur :: MY Site:
www.AnoopCNair.com ::
FaceBook:
ConfigMgr(SCCM) Page ::
Linkedin:
Linkedin<

Client communication port for workgroup servers

We have SCCM 2012 R2 Single Primary Site in intranet. We have PKI with ADCS 2012. We are in process of mirating to HTTPS communication using certificates. We have few servers in workgroup and we plan to manage those servers with configuration manager by
manually installing client and specifying smsmp=sccm fqdn. for lookup management point.
Can we change client communication port for these servers?
For successful client communication do we need to open any ports except 443 in firewall?
What all ports needed to be open in this scenario?

Hi,
You configure the Communications port for the MP in the site so they must use the same ports, you can configure alternate ports so if it cannot communicate on port 443 it tries the next port.
http://technet.microsoft.com/en-us/library/gg712276.aspx
443 is sufficient, the client will also try to communicate on port 10123 for Client Notification,
http://www.google.se/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CCsQFjAA&url=http%3A%2F%2Fblogs.technet.com%2Fb%2Fconfigmgrteam%2Farchive%2F2012%2F09%2F27%2Ffast-channel-for-system-management.aspx&ei=1dAhU7qqOIL8ygPb1IHQAQ&usg=AFQjCNF4_G2sZBMbDDtJa95LBx7EYYBrRw
But it should fallback to 443 if not available as well.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Re: clients sharing a ServiceObject

It is a LOGGER_FLAG that needs to be set.
Vallas, George wrote:
>
I am coming across a problem with clients sharing a ServiceObject that I
have created. The SO is a ClientLinkExecutor that has a HoldingList
which contains proxies to the clients that have successfully logged on
to the application. This way I can remotely shutdown or send a message
to a particular client that is selected from a list of logged on
clients. This works fine when the application is being tested on one
node. The problem is that when I run in distributed mode and have
another developer also login in distributed mode, I can only see my
logged on client and same with him. The Visibility is set to
"Environment" and the Dialog Duration is set to "Session" but it does
not work. I tried changing the Dialog Duration to "Message" so that one
client does not hog a connection to the SO but it gave the following
error message:
"Invalid attempt to register for an event on an object of class
(SurgeCLExecutorProxy) which has a dialog duration of message. The
semantics of message duration do not guarantee that the same object
instance will service each message, which is in conflict with the
semantics of event registration (which requires that the same object
instance to which the event is registered for generates the event; these
are two separate actions). To disable this restriction, restart this
process with cfg:do:4 specified."
Does anyone know what it means to restart with cfg:do:4 specified?
Thank you in advance for any help with this matter!!
George Vallas
EDS Medi-Cal - Systems
3215 Prospect Park Dr.
Rancho Cordova, CA 95670
Phone: (916)636-1183
Mail: [email protected]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>--
Paul Monax
Consultant
Sage It Partners
303.779.3309 x204
[email protected]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Actually, I AM using anchored objects on the client to be able to send a
proxy of that client object to the SO. I am then posting the event on
that client object. I think I need to try setting the logger flag and
see if that helps. Thank you all for your assistance in this matter.
George Vallas
EDS Medi-Cal - Systems
3215 Prospect Park Dr.
Rancho Cordova, CA 95670
Phone: (916)636-1183
Mail: [email protected]
-----Original Message-----
From: Ajith Kallambella M [SMTP:[email protected]]
Sent: Thursday, October 01, 1998 3:04 PM
To: Vallas, George; ForteUsers
Subject: RE: clients sharing a ServiceObject
George,
Typically you will get this exception in R2. In R1, you
were
allowed to do this.
Forte will not guarantee, that it will not swap objects
while routing
requests under certain situations unless the dialog
duration is
session. This is true even for a non-replicated,
non-failover
plain vanilla partition.
If the swap ever happened, you would lose your
registration and not
even know it. That is the reason why Forte raises an
exception
and make you correct your settings. The logger flag
cfg:do:4
was designed for backward compatibility. It is really
not
recommended to use it, though they say it does not have
any
significant overhead.
However, the recommended solution is to use a client
notification
architecture when ever you need direct registrations.
Let the client
partition pass a reference to an object anchored in its
partition
to the service object in the remote partition. The
service object can
then post events on the anchored object, which is
guaranteed to be
there during the life of that client partition.
Hope this helps!
Ajith Kallambella. M.
Forte Systems Engineer,
International Business Corporation.
-----Original Message-----
From: Vallas, George [SMTP:[email protected]]
Sent: Thursday, October 01, 1998 4:13 PM
To: Forte News Group
Subject: clients sharing a ServiceObject
I am coming across a problem with clients sharing a
ServiceObject that I
have created. The SO is a ClientLinkExecutor that has
a HoldingList
which contains proxies to the clients that have
successfully logged on
to the application. This way I can remotely shutdown
or send a message
to a particular client that is selected from a list of
logged on
clients. This works fine when the application is being
tested on one
node. The problem is that when I run in distributed
mode and have
another developer also login in distributed mode, I can
only see my
logged on client and same with him. The Visibility is
set to
"Environment" and the Dialog Duration is set to
"Session" but it does
not work. I tried changing the Dialog Duration to
"Message" so that one
client does not hog a connection to the SO but it gave
the following
error message:
"Invalid attempt to register for an event on an object
of class
(SurgeCLExecutorProxy) which has a dialog duration of
message. The
semantics of message duration do not guarantee that the
same object
instance will service each message, which is in
conflict with the
semantics of event registration (which requires that
the same object
instance to which the event is registered for generates
the event; these
are two separate actions). To disable this
restriction, restart this
process with cfg:do:4 specified."
Does anyone know what it means to restart with cfg:do:4
specified?
Thank you in advance for any help with this matter!!
George Vallas
EDS Medi-Cal - Systems
3215 Prospect Park Dr.
Rancho Cordova, CA 95670
Phone: (916)636-1183
Mail: [email protected]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

JMS Client hangs while trying to create a TopicSession

We have a thick client which connects to a WLS 8.1 Sp3 server. At client startup, it subscribes to a distributed topic. Today morning, we noticed that most of the clients started hanging at the point where they try to subcribe to the distributed topic. We had to restart the servers to resolve this issue. I've pasted a part of the thread dump at the end of this message, and would appreciate any feedback on this.
 
 This happened on our test servers which run in a cluster, and which have a limited scale license. 
 Here's the thread dump - 
 "AWT-EventQueue-1" prio=7 tid=0x009e85d0 nid=0x7f8 in Object.wait() [190ef000..190efd88] 
 at java.lang.Object.wait(Native Method) 
 - waiting on <0x20217400> (a weblogic.rjvm.ResponseImpl) 
 at weblogic.rjvm.ResponseImpl.waitForData(ResponseImpl.java:74) 
 - locked <0x20217400> (a weblogic.rjvm.ResponseImpl) 
 at weblogic.rjvm.ResponseImpl.getTxContext(ResponseImpl.java:99) 
 at weblogic.rjvm.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:104) 
 at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:137) 
 at weblogic.jms.dispatcher.DispatcherImpl_813_WLStub.dispatchSyncFuture(Unknown Source) 
 at weblogic.jms.dispatcher.DispatcherWrapperState.dispatchSync(DispatcherWrapperState.java:339) 
 at weblogic.jms.client.JMSConnection.createSessionInternal(JMSConnection.java:400) 
 at weblogic.jms.client.JMSConnection.createTopicSession(JMSConnection.java:359) 
 at com.wellmanage.trading.shared.util.PmwMessageService.subscribe(PmwMessageService.java:373) 
 at com.wellmanage.fipmt.client.notification.NotificationListener.subscribeToNotificationMessages(NotificationListener.java:173) 
 at com.wellmanage.fipmt.client.Main$11.run(Main.java:1174) 
 at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:178) 
 at java.awt.EventQueue.dispatchEvent(EventQueue.java:454) 
 at com.wellmanage.common.pcsf.client.exception.ExceptionHandlerEventQueue.dispatchEvent(ExceptionHandlerEventQueue.java:26) 
 at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:201) 
 at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:151) 
 at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:145) 
 at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:137) 
 at java.awt.EventDispatchThread.run(EventDispatchThread.java:100) 

Hello,
 Were you able to resolve your problem? How did you resolve it? I am having the same problem.
 Any help will be greatly appreciated!
 Thanks,
 Mamta

Queries regarding Internet Based Client Management (IBCM) 2012 R2

Hi All,
I am trying to work with IBCM, but I have few queries for which I am not able to get any proper Information from Internet. I would be really Thankful if you all can help with your advice.
1) I will need to publish host record Internet FQDN of the Site system server, which will point to Public IP on Public DNS.
- So If I NAT the public IP to Local SCCM server IP on firewall, will that work, or I will have to give a different Private IP?
2) Let say I have Few workgroup machine which will be on Internet and they wont even come to office network, so in this scenario, how should I proceed.
a. Will I be able to get Remote session of the user?
b. Can I install SCCM client manually over the internet? if yes then what all information I will need to provide while client installation.
c. If I use Public wild card certificate on the server, do I need to purchase Client certificate as well?
d. If I use Internal CA certificate on the server, then I will have to install Client certificate manually on all the work group machine, I am right? can Public Certificate act as an alternative?
e. Any other specific Port apart from 443 that need to open on firewall?
3) Is it necessary to put the internet facing Site system server in DMZ or it is OK to use the same Site System server for Intranet and internet.
4) Currently I have a Site System fully functional, and set to HTTP & HTTPS communication setting, For IBCM I will be moving MP and DP from HTTP to HTTPS, I want to know will there be any issue, or any other aspect that I need to take care before performing
these steps.
5) Currently My OS deployment, App Deployement & Software Update is working perfectly, Moving MP and DP to Https, will that effect any of the current functionality, please advise.
Thanking in advance,
Regards,
Ritesh
Thanks & Regards, Ritesh Hegde, Exchange,BPOS, FOPE, O365.

1. Yes, the device performing the NAT will forward the traffic to the private IP of the site system. That's the whole point of NAT assuming you've configured it correctly and allowed the traffic to pass.
2a. No, remote Control does not work for Internet based clients.
2b. What are your expectations and what does "manually over the Internet mean"? If you are talking about client push, then technically, yes its possible, although in reality it won't work because almost everything connected on the Internet is behind
its own NAT and firewalls that won't allow the traffic to reach the destination. Additionally, if these clients are to be Internet only (which workgroup machine must be), then they must be installed with the CCMALWAYSINF property set to true which is only
done when manually installing the client on the system by directly initiating ccmsetup.
2c. The certs on the clients have nothing to do with cert on the servers. All clients connecting via IBCM require their own, unique client auth cert. If you plan on purchasing these, it will get real expensive, real quick and of course remember that this
is a recurring cost.
2d. How else would you install any certificate? They can't magically appear on the systems particularly since they are workgroup systems.
2e. 8531 for WSUS and 10123 for client notification.
3. Using the same internal site system is technically fine, but I doubt your security folks would like that idea.
4. Site Systems cannot be set to both HTTPS and HTTP. They can only be set to one or the other. Your site can accept both, but the site systems cannot. If you convert your existing/only MP and DP to HTTPS, then *all* of your clients will need their own unique
client auth certs.
5. Only if you don't configure things properly.
Jason | http://blog.configmgrftw.com | @jasonsandys

End user notifications not appearing for Software updates

I'm pushing out security updates to Windows 7 clients. The updates are deploying correctly but some users say they are not seeing any notification that the updates are available or that they are installing - It's set up in the deployment to notify. They
say the first time they know about them is when the machine reboots. On my own machine I always get the notifications, on all the IT users near me we always get the notifications, and on all the test machines I've built I see the notifications. It's possible
my users are just not registering the message before it fades away.
I've made some changes to the Computer Agent, Greater than 24 hours - remind every 3 hours, less than 24 remind every 2 and less than 1 remind every 5 minutes so that may help. What I'm wondering though is there a local log on the client end anywhere that
updates every time a notification appears - I could at least verify it - or is there a local reason why the balloon doesn't show. It's not turned of in a GPO.
Is there any way that the balloon can be replaced with a pop up that the user would have to click OK to clear?

Thanks for the reply - I had a look at the logs - here's an example
Adding Open Software Center Menu for Icon Microsoft.SoftwareCenter.Client.Notification.NotifyObjectComplete, because no required item and no reboot are present.    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectComplete at get_VisibleMenuItems)
SCClient   05/11/2014 12:15:55   1 (0x0001)
Setting the current app data    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at HandleNotificationEvent)   SCClient   05/11/2014 12:15:55   1 (0x0001)
Verbosity set to low, don't show balloon    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at HandleNotificationEvent)   SCClient   05/11/2014 12:15:55   1 (0x0001)
The current visible object is of type Microsoft.SoftwareCenter.Client.Notification.NotifyObjectInstalling with priority Installing    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at HandleCurrentNotifyObject)   SCClient
05/11/2014 12:15:55   1 (0x0001)
This object is of type Microsoft.SoftwareCenter.Client.Notification.NotifyObjectComplete with priority Completed    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at HandleCurrentNotifyObject)   SCClient
05/11/2014 12:15:55   1 (0x0001)
Removing monitored notification object Microsoft.SoftwareCenter.Client.Notification.NotifyObjectInstalling for app Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972100)
(Microsoft.SoftwareCenter.Client.Notification.MonitoredNotifyObjectsCollection at RemoveObject)   SCClient   05/11/2014 12:15:55   1 (0x0001)
Number of total seconds in countdown is 5400; starting value is 4; seconds til restart is 5396, system will restart at 13:45:54 (utc end time = 13:45:55)    (Microsoft.SoftwareCenter.Client.Pages.RestartCountdownDialog at .ctor)
SCClient   05/11/2014 12:15:58   1 (0x0001)
User will be alerted (and hide/close disabled) at 13:15:54    (Microsoft.SoftwareCenter.Client.Pages.RestartCountdownDialog at .ctor)   SCClient   05/11/2014 12:15:58   1 (0x0001)
ShowBalloonTip: determining if tooltip should be shown for notification type = Microsoft.SoftwareCenter.Client.Notification.NotifyObjectRestartCountdown    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at ShowBalloonTip)
SCClient   05/11/2014 12:15:58   1 (0x0001)
Notification is for a logoff/restart required or logoff/restart countdown.    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at ShowBalloonTip)   SCClient   05/11/2014 12:15:58
1 (0x0001)
Attempting to display the notification balloon with title 'Restart Required' and tooltip 'Recently installed software requires your computer to restart in 90 minutes to complete the installation. No additional software can be installed until your computer has
restarted. '.    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at ShowBalloonTip)   SCClient   05/11/2014 12:15:58   1 (0x0001)
The operating system version is 6.1.7601.65536    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at ShowBalloonTip)   SCClient   05/11/2014 12:15:58   1 (0x0001)
This is Windows 7 or earlier, showing notification balloon    (Microsoft.SoftwareCenter.Client.Notification.NotifyObjectBase at ShowBalloonTip)   SCClient   05/11/2014 12:15:58   1 (0x0001)
NamedTimer: Starting timer timeToAvoidDisplayingTheSameBalloon, interval = 120000, period = -1    (Microsoft.SoftwareCenter.Client.Common.NamedTimer at .ctor)   SCClient   05/11/2014 12:15:58   1
(0x0001)
NamedTimer: timeToAvoidDisplayingTheSameBalloon initial interval = 120 seconds, subsequent period = 0 seconds, overall due at 05/11/2014 12:17:58    (Microsoft.SoftwareCenter.Client.Common.NamedTimer at SetTimerInternals)   SCClient
05/11/2014 12:15:58   1 (0x0001)
Would that imply that it's set not to show the balloon - except on the reboot?
I had a look at the following policies using wbemtest
DisplayNewProgramNotification
CCM_SoftwareDistributionClientConfig/DisplayNewProgramNotification
CCM_ClientAgentConfig/DisplayNewProgramNotification
and both are correct - DisplayNewProgramNotification set to true

I want to use Native System Center Software Center Notification box or Windows Update dialogue box to force a reboot.

I'm installing software that will require a reboot. I would like to use the Windows Update dialogue box to prompt users to reboot.
Or a reboot dialogue box that mimics System Center Software Center Notification box
Does anyone know of a way to use the System Center Client notification or the Windows update box to force a reboot. This is familiar to my users and will not freak them out

The Coretech Shutdown Tool is free, excellent and would satisfy your requirement.
http://blog.coretech.dk/kea/new-version-of-the-coretech-shutdown-tool/
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

ISE and CDP device sensor

Hi, all.
Anyone can explain to me, how the CDP device sensor probe works with ISE ???
What I am trying to do, is to identify different Cisco Wireless Access Point models (i.e. LAP 1142) with ISE.
Since the APs do speak CDP (I can see the AP devices on the switch), this should be possible with the CDP device sensor on the switch, shouldn't it ....
I have done the following so far:
Configured the switch to talk to ISE via radius accounting:
aaa group server radius SERVERGROUP_radius_accounting
     server name ISE02
radius server ISE02
      address ipv4 [ISE02 ip address] auth-port 1645 acct-port 1646
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute nas-port-id include remote-id
radius-server dead-criteria time 30 tries 3
radius-server retry method reorder
radius-server retransmit 2
radius-server timeout 2
radius-server deadtime 1
radius-server key 7 [ISE02 radius key]
radius-server vsa send cisco-nas-port
radius-server vsa send accounting
radius-server vsa send authentication
aaa accounting dot1x default start-stop group SERVERGROUP_radius_accounting
Configured SNMP traps to be sent to ISE:
snmp-server host [ISE02 ip address] [SNMP RO Community]
authentication mac-move permit
authentication critical recovery delay 120
mac address-table notification change interval 60
mac address-table notification change
mac address-table notification mac-move
interface GigabitEthernet0/1
snmp trap mac-notification change added
snmp trap mac-notification change removed
Configured logging to ISE:
epm logging
logging host [ISE02 ip address] transport udp port 20514
Configured CoA:
aaa server radius dynamic-author
client [ISE02 ip address] server-key 7 [ISE02 radius key]
Configured DHCP snooping, device tracking and device sensors:
ip dhcp snooping vlan xyz
no ip dhcp snooping information option
ip dhcp snooping
ip device tracking
device-sensor filter-list dhcp list DSFL_dhcp
option name domain-name-servers
option name host-name
option name domain-name
option name class-identifier
option name client-identifier
device-sensor filter-list lldp list DSFL_lldp
tlv name system-name
tlv name system-description
tlv name system-capabilities
tlv name management-address
device-sensor filter-list cdp list DSFL_cdp
tlv name device-name
tlv name port-id-type
tlv name capabilities-type
tlv name version-type
tlv name platform-type
tlv name duplex-type
tlv number 34
device-sensor filter-spec dhcp include list DSFL_dhcp
device-sensor filter-spec lldp include list DSFL_lldp
device-sensor filter-spec cdp include list DSFL_cdp
device-sensor notify all-changes
Configured an additional IP helper on the AP vlan pointing to ISE:
interface vlan xyz
ip helper-address [ISE02 ip address]
I have configured new profiling conditions on ISE, which use the cdp attributes:
and used these conditions in a new profiling policy for the 114x AP:
ISE is configured to listen to DHCP, radius, DNS and SNMP traps ....
However, the only thing ISE sees of this AP, is the dhcp probe:
and therefore, the 114x policy has no effect .......
ISE version is the following:
Cisco Application Deployment Engine OS Release: 2.0
ADE-OS Build Version: 2.0.4.018
ADE-OS System Architecture: i386
Copyright (c) 2005-2011 by Cisco Systems, Inc.
All rights reserved.
Hostname: deess01nise02
Version information of installed applications
Cisco Identity Services Engine
Version      : 1.1.2.145
Build Date   : Fri Oct 26 21:10:35 2012
Install Date : Fri Jan 18 07:18:49 2013
Cisco Identity Services Engine Patch
Version      : 2
Install Date : Mon Jan 21 07:36:50 2013
Cisco Identity Services Engine Patch
Version      : 3
Install Date : Mon Jan 21 07:42:11 2013
Version of the switch:
cisco WS-C3560CG-8PC-S (PowerPC) processor (revision C0) with 131072K bytes of memory.
Processor board ID FOC1619Y180
Last reset from power-on
7 Virtual Ethernet interfaces
10 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 58:BF:EA:B9:AC:80
Motherboard assembly number     : 73-13272-06
Power supply part number        : 341-0407-01
Motherboard serial number       : FOC16174ZZ5
Power supply serial number      : LIT16120XR8
Model revision number           : C0
Motherboard revision number     : A0
Model number                    : WS-C3560CG-8PC-S
System serial number            : FOC1619Y180
Top Assembly Part Number        : 800-33676-02
Top Assembly Revision Number    : A0
Version ID                      : V02
CLEI Code Number                : CMMD900ARB
Hardware Board Revision Number : 0x00
Switch Ports Model              SW Version            SW Image
*    1 10    WS-C3560CG-8PC-S   15.0(2)SE             C3560c405ex-UNIVERSALK9-M
What am I missing ??? Should this config make the switch send CDP information about connected devices to the ISE (via radius accounting) ???
How do the device sensors work ???
Rgs
Frank

A switch with sensor capability gathers endpoint information from network devices using protocols such as Cisco Discovery Protocol (CDP), LLDP, and DHCP, subject to statically configured filters, and makes this information available to its registered clients in the context of an access session. An access session represents an endpoint's connection to the network device
Client notifications and accounting messages containing profiling data along with the session events, and other session-related data, such as MAC address and ingress port are generated and sent to the internal and external clients (ISE). By default, for each supported peer protocol, client notifications and accounting events are only generated where an incoming packet includes a TLV that has not previously been received in the context of a given session. You can enable client notifications and accounting events for all TLV changes, where either a new TLV has been received or a previously received TLV has been received with a different value using CLI commands.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/15.0_1_se/device_sensor/guide/sensor_guide.html#wp1112722

Client notification

Similar Messages

Maybe you are looking for