Configure interface

Hello,
does anybody know if it is possible using aaa and privilage level commands to let a user to configure a specific interface on Catalyst 2950 switch (IOS version 12.1(22)EA4) ? For example, a FastEthernet interface but not the Giga interface.
Thanks in advance.
Maxime Frolov

Hello,
I think I can let a user with a privelege level 3 to configure interfaces if I put the following commands in the config :
username labo2 privilege 3 secret 5 XXXXXXXXXXX
privilege configure level 3 interface
privilege interface level 3 duplex
privilege interface level 3 speed
etc..
The problem is the user labo2 will be able to configure speed not only ont the FastEthenet interfaces but also ont the Giga interfaces. Do you know if there is any way to avoid it or it's just impossible.
Thanks.
Maxime

Similar Messages

Configure Interface channel monitoring for PI in SOLMAN 7.1

Hi Experts,
I am configuring interface channel monitoring for PI in SOLMAN 7.1.In step 5 (Define scope) it is asking to select scenario.I can see all PI systems (Dev,QA and PRD) is listed in the table with "monitoring and alerting setup status" as yellow.when I select PI (prod) and proceed , in step 6.3 (Interface channel Monitoring config) I don't find any channel name in table.I need your support to clear my understanding on this.
1)My objective is to monitor all the interfaces that are existing between PI system and other SAP as well as non SAP systems (that include JDBC connections also).How can find all these interfaces in solman while doing Interface channel monitoring config?
2)I am not sure if I have understood correctly that I need to create scenario that includes technical systems between which Interface channel are to be monitored. If I am correct then how can I bring the technical system to SOLMAN SLD from Local SLD of PI(prod).Here I am not getting option to synchronize SOLMAN SLD from PI Local SLD. Even Import option is also not there. Do I need to create all the Technical systems (present in PI) to SOLMAN SLD manually?
If my understanding is not correct then please guide me through steps to do the configuration to achieve my objective.
Thanks
Aditya Roushan.

yes, the problem solved. thanks for your replies all.
the users SLDDSUSER and SLDAPIUSER got locked, I changed it in su01.
and I created rfc in SM59 for SAPSLDAPI and LCRSAPRFC and create the same in JCo RFC provider.
both are working.
but iam facing new problem.
I have solution manager 7.1 system and I configured local SLD. I did not connect any managed system as of now.
after all the trouble shooting, SLDAPICUST and SLDCHECK is fine but
the error is
"Functional call returned exception code 3"
"Access to XI Profile currently disrupted.
I have solution manager 7.1, I did not configure managed systems as of now. is this error belongs to solution manager 7.1 or for PI system.
can u please guide me how to trouble shoot this error. check the following screen shot for reference.
thanks in advance.

Is it possible to move some tools or their setting parameter from Configuration interface to Inspection Interface?

Hi
We use Vision Builder for machine vision. There are two interfaces in Vision Builder (Inspection Interface & Configuration interface). It is better machine vision operator would work with Inspection Interface and he should not access to all of setting and tools but he need to redefine some parameter like RIO in some tools like measuring tools for different products.
Is it possible to move some tools or their setting parameter from Configuration interface to Inspection Interface?
Or is it possible to define security like password to some tools and their setting but not all of them?
Thanks
Refa

Vision Builder generally isn't supposed to rely on user input, but there is a step called "User Input" that allows you to get input from the user. ROI would be tricky. I think the slickest way to do that would be to create a VI that displays the image, lets the user drag a rectangle, then pass those coordinates back to Vision Builder to configure the ROI.
Tanner B.
Applications Engineer
National Instruments

Workspace 'configure interface datasource' error

Hi All
I have just installed Hyperion 11.1.2.2 on a linux 32 bit machine. The installation and configuration finished succesfully.
When I logged in to console http://ip:9000/workspace and click on "configure interface datasource"
i get error message.
; nested exception is:
HTTP transport error: java.net.MalformedURLException: no protocol: Sessions.asmx
Code: java.rmi.RemoteException
Description: An error occurred processing the result from the server.
Actor: none
Any Help

Thanks John. Yes, I have configured the embbeded Http server. I am accessing the url from the linux system directly.
Do you mean the below by wondows component?
11.1.2.2.0 Client Installers for Microsoft Windows V32789-01
I have not configured this on linux.
Thanks!

Hyperion configure interface datasource problem

i installed hyperion 11.1.2.2 and installation finished succesfully.
I login to console http://ip:19000/workspace and i try to call "configure interface datasource" menu
i get error message.
; nested exception is:
HTTP transport error: java.net.MalformedURLException: no protocol: Sessions.asmx
Code: java.rmi.RemoteException
Description: An error occurred processing the result from the server.
Actor: none
Any thoughts would be great. Thanks...

l Use this URL:
http(s)://Local_machine_name/hyperion-bpma-server/Sessions.asmx
If a Sessions page is displayed, then IIS is correctly configured. If there is any error in IIS, check the Event Log to identify the problems. Check the System and Application Log to see if errors were logged by ASP.NET or IIS, and fix any errors. A possible cause is incorrect privileges for the user for the TEMP directory.
l Check the Event Logs from sources starting with HyS9EPMA. Possible causes are communication errors with Shared Services or the database.
l The ASPNET user may not have access to certain folders. If the Event Log displays any security-related errors, assign rights to the ASPNET user.
1. From the command prompt, go to this directory: C:\Windows\Microsoft.NET\Framework\v2.0.50727.
2. Enter run aspnet_regiis.exe -ga.
Refer: Pg 105 of http://docs.oracle.com/cd/E17236_01/epm.1112/epm_install_troubleshooting_1112200.pdf
HTH-
Jasmine.

After disabling failover can't configure interfaces

I had a pair of ASA 5510s in failover and needed to move one so I disabled failover. Now I can't configure any of the interfaces. When I put an IP on an interface and then show interface ip brief, it shows as unassigned.
What else do I have to do after disabling failover to be able to configure the interfaces again?

Hi,
Are you not able to assign ip address on both the devices? If i am not wrong, you should be able to assign the ip address to the active one but not to the stand by one. There are two ways to assign ip address to the standby device. One is to reload the stand by so that it comes out of the stand by state.
Second way is to configure the standby ip address on the interface. For ex on the interface configure:
ip address 172.16.1.1 255.255.0.0 standby 172.16.1.2
The stand by device will take the standby ip address.
Rahul

PI 2.0 - Interface bulk configuration - Interface Roles

Hi,
I did some research on how to use CLI configuration template do bulk configure Ports depending on their Port description. I found the Interface Role definition located in "Design --> Shared Policy Objects" which seemed perfect to be used inside a configuration template. It is also written in the User Guide that Interface Roles can be used in configuration templates. The problem for me now is that i did not find out how to use Interface Roles inside custom CLI configuration templates!? The Interface Roles can be choosen inside some pre-defined templeats like the AVC template but apart from that i am not aware how to include Interface Roles in any custom configuration template!?
Does anyone have some experience with this or maybe a link to a more detailed documentation for creating configuration templates? All i found out about CLI templates so far is how to define variables!?
Thanks in advance!

Hey Florian,
well let's see if port groups is the solution.
All the other things are just workarounds and we are confused how to treat LAN switches.
Our customers used templates for access switches to tell the device what is necessary to monitor. If prime does it from now, we should have the information what is necessary to configure on Switches.
I'll let you know, if we have the right answer.
br,
chris

Unable to query IPv4 router of manually configured interface

I need to determine the IPv4 router for a given Ethernet/WiFi interface.
The route table can not always be used to determine the router in the case of a multi-homed system.
So, the SystemConfiguration framework seems to be the right choice to use by querying the kSCPropNetIPv4Router property from the network service associated with the interface.
This works fine assuming the Ethernet or WiFi interface is configured using DHCP. However, if the interface is manually configured then the kSCPropNetIPv4Router property doesn't seem to exist!
I have a sample program which illustrates this and scutil seems to show the same thing.
Any help?

PWD=/
SHLVL=1
SECURITYSESSIONID=ceb19270
_=/usr/bin/printenv
uid=0(root) gid=0(wheel) groups=0(wheel)
The script works much better when it can find the required programs. :0)
which netstat awk ping arp sed
/usr/sbin/netstat
/usr/local/bin/awk
/sbin/ping
/usr/sbin/arp
/usr/bin/sed
<pre style="border: 1px solid #ddd; padding-left: .75ex; padding-top: .25em; padding-bottom: .25em; margin-top: .5em; margin-bottom: .5em; margin-left: 1ex; max-width: 80ex; overflow: auto; font-size: 10px; font-family: Monaco, 'Courier New', Courier, monospace; color: #444; background: #eee; line-height: normal">get_route_mac() {
ip=$(/usr/sbin/netstat -nrfinet | /usr/local/bin/awk '/^default/{print $2; exit}')
[[ "$ip" = *.*.*.* ]] || return 1
[ ${1:-0} -gt 0 ] && /sbin/ping -nc$1 $ip 2>&1 >/dev/null
/usr/sbin/arp -n $ip | /usr/bin/sed -n 's/.* at (.*:.*:.*:.*:.*:.*) on .*/ /p'
}</pre>
Thanks for your help, Bob!

Configure interface vlan on switch 3524 XL

Hi all,
I have an old switch C3524 running image "C3500XL-c3h2s-mz-120.5.2-xu". I had successfully created vlan 120 but when I config "interface vlan 120" as follows:
swicth # conf t
switch(config-subif)#interface vlan 120
switch(config-subif)#ip address 172.10.10.1 255.255.255.0
switch(config-subif)#no shut
then show run does not see this interface. Show vlan indicates vlan 120 is active.
Please help. thank you.

you're right. I just shut down interface vlan 10 (interface vlan 1 is down already) then interface vlan 120 comes up. Question is: if I need to configure several ports: some in vlan 10 and some in vlan 120 then should I have interface vlan 10 up too ?
Thank you very much.

I cannot access my router's web configuration interface since Firefox 4. It does not let me enter a password with the username blank (as specified by the router manufacturer). Is there a workaround for this?

since updating to Firefox 4, I cannot access my router's configuration page (http://192.168.x.x). When prompted for the username and password,Firefox's log in window does not accept a blank username field (The router does not require a username, only a password, and it's the default password). If I click OK, the password entry just comes up again. This works fine in other browsers. Is there anything I can do about this?

I had this issue, too, and fixed it by turning off the option "Tell Websites I do not want to be tracked" under Options->Advanced->Browsing.

Post-installation configuration interface not running

I've just installed Ops Center 12.1 on a new SPARC T4-1b running Solaris 11.
We are using a remote database hosted inside an Oracle Database Appliance. The installation went through entirely, and I'm at the point where I need to configure the application.
The problem is that the web GUI that is supposed to be running on port 9443 isn't running. (doesn't appear in netstat -an).
The instances bound to port 80 (the redirect) and port 443 exist -- but the rewrite sends me to the non-existent service running on port 9443, so I am stuck.
root@host:/opt/SUNWxvmoc/bin# ./ecadm status
online
OCDoctor reports no issues.
root@host:/opt/SUNWxvmoc/bin# /var/opt/sun/xvm/OCDoctor/OCDoctor.sh --troubleshoot
Ops Center Doctor 4.05 [OC 12.1.1.2076,SunOS11] [Read only] [21-Aug-2012 14:46PM EDT]
======================== Checking Enterprise Controller... ==============================
OK: Total number of agents: 0
OK: Number of agents with inventories: 0
OK: Memory is (65024), ZFS is used and zfs_arc_max is set to 8589934592 in /etc/system
OK: /etc/netboot folder exists
OK: User 'uce-sds' home folder points to the right location
OK: User 'oracleoc' home folder points to the right location
OK: User 'allstart' home folder points to the right location
OK: Apache logs are smaller than 2 GB
OK: n1gc folder has the right permissions
OK: All Enterprise Controller packages are installed properly
OK: All agent packages are installed properly
OK: Enterprise Controller status is online
OK: the version is the latest one (12.1.1.2076)
OK: satadm timeouts were increased
OK: tar command was properly adjusted in satadm
OK: Found the server .uce.rc
OK: Server .uce.rc has the correct file permissions
OK: Server .uce.rc has the correct ownership
OK: Connectivity to the KB public servers works properly
OK: Grouplock file doesn't exist
OK: Locales are OK ("C")
OK: No partially installed packages
OK: No old jobs rerun (CR 6990675)
OK: No NCP encryption is used
OK: No credential issues foundWhere is this instance
=========== Proxy controller is installed but not configured, skipping ==================
=========== Agent controller is installed but not configured, skipping ==================
How can I start this instance on port 9443 so I can begin configuring the platform?
Edited by: fchagnon on Aug 21, 2012 11:50 AM

Thanks for your reply.
root@manager1:~# netstat -an | grep 443
*.443 *.* 0 0 128000 0 LISTEN
*.443 *.* 0 0 128000 0 LISTEN
root@manager1:~# ps -ef | grep java
root 12584 11237 0 20:40:15 pts/1 0:00 grep java
root 13185 13184 0 14:22:01 ? 2:14 /usr/jdk/instances/jdk1.7.0/bin/sparcv9/java -Xms200M -Xmx8192M -server -XX:Str
root@manager1:~# svcs scn common
STATE STIME FMRI
disabled Aug_20 svc:/application/management/common-agent-container-1:default
disabled Aug_20 svc:/application/management/common-agent-container-1:scn-proxy
disabled Aug_20 svc:/application/scn/db:local
disabled Aug_20 svc:/application/scn/oracle:default
disabled Aug_20 svc:/application/scn/oralistener:default
disabled Aug_20 svc:/application/scn/proxy-enable:default
disabled Aug_20 svc:/application/scn/ec-server-splashpage:default
disabled Aug_20 svc:/application/scn/dhcpd:default
online 14:21:59 svc:/application/scn/satellite-enable:default
online 14:22:00 svc:/application/scn/db:remote
online 14:22:00 svc:/application/scn/uce-scheduler:default
online 14:22:00 svc:/application/scn/db:default
online 14:22:00 svc:/application/scn/uce-server:default
online 14:22:05 svc:/application/scn/ajaxterm:default
online 14:22:40 svc:/application/management/common-agent-container-1:oem-ec
online 14:22:40 svc:/application/scn/satellite-available:default
offline Aug_20 svc:/application/scn/proxy-available:default
root@manager1:~# getent hosts `hostname`
172.19.233.26 manager1
root@manager1:~# getent hosts `getent hosts \`hostname\` | awk '{print $1}'
172.19.233.26 manager1
The new version of OCDoctor has some issues with accessing the KB. However the 'check-connectivity' function works fine.
root@manager1:~# /var/opt/sun/xvm/OCDoctor/OCDoctor.sh --troubleshoot
Ops Center Doctor 4.10 [OC 12.1.1.2076,SunOS11] [Read only] [21-Aug-2012 20:43PM EDT]
======================== Checking Enterprise Controller... ==============================
OK: Total number of agents: 0
OK: Number of agents with inventories: 0
OK: Memory is 65024 MB, ZFS is used and zfs_arc_max is set to 8589934592 in /etc/system
OK: All Solaris 11 agent bundles in /var/opt/sun/xvm/images/agent/ are imported properly to the repository
OK: Files in /var/opt/sun/xvm/images/agent/ have the right permissions
OK: Files in /var/opt/sun/xvm/osp/web/pub/pkgs/ have the right permissions
OK: auth.cgi returns XML
OK: User 'oracleoc' home folder points to the right location
OK: User 'allstart' home folder points to the right location
OK: Apache logs are smaller than 2 GB
OK: n1gc folder has the right permissions
OK: All Enterprise Controller packages are installed properly
OK: All agent packages are installed properly
OK: Enterprise Controller status is online
OK: the version is the latest one (12.1.1.2076)
OK: satadm timeouts were increased
OK: tar command was properly adjusted in satadm
OK: no 'conn_properties_file_name' value in .uce.rc
OK: Found the server .uce.rc
OK: Server .uce.rc has the correct file permissions
OK: Server .uce.rc has the correct ownership
ERROR: Could not access the KB public servers
Check the username and password and proxy configuration in "Administration" ->
"Edit Authentications" and "Change HTTP proxy"
Also, you may try the following command to test connectivity:
/var/opt/sun/xvm/OCDoctor/OCDoctor.sh --check-connectivity
OK: Grouplock file doesn't exist
OK: uce-server .uce.rc file points to a proper JAVA
OK: Disconnected mode is not configured
OK: Locales are OK ("C")
OK: Found only one Solaris 11 agent bundle
OK: No partially installed packages
OK: No http_proxy is set in the user profile files
OK: 'public' folder has the right ownership
OK: 'public' folder is writable for uce-sds
OK: 'private' folder has the right ownership
OK: 'private' folder is writable for uce-sds
OK: No old jobs rerun (CR 6990675)
OK: No NCP encryption is used
OK: 'update-saved-state' folder exists and has the right permissions
OK: No credential issues found
=========== Proxy controller is installed but not configured, skipping ==================
=========== Agent controller is installed but not configured, skipping ==================
root@manager1:~# /var/opt/sun/xvm/OCDoctor/OCDoctor.sh --check-connectivity
Ops Center Doctor 4.10 [OC 12.1.1.2076,SunOS11]OCDoctor.sh --check-connectivity
======================== Checking Network Connectivity ==============================
Please enter the My Oracle Support (MOS) Username: xxxxxxxxxxxxxxxx
Password:
Is there a proxy? Type the proxy server here, for example 'www-proxy.us.oracle.com' (hit Enter if there is no proxy):
Test 1/4: Checking CC service reachability (without using user/password yet)
==============================================================================
OK: CC status is OK
Test 2/4: Checking GUUS service reachability (without using user/password yet)
==============================================================================
OK: GUUS status is OK
Test 3/4: Downloading Knowledge Channels file from updates.oracle.com
===========================================================================
OK: Knowledge download was successful!
Test 4/4: Downloading patch 108437-06 from updates.oracle.com
===========================================================================
OK: Patch download was successful!

How to identify configured Interface Bandwidth

HI,
I have a very basic question, would appreciate if you can give me a prompt answer.
I have one ISP connnected on one serial interface.
He is confirming that he has given me 2 Mbps one to one Bandwidth.
How can i check it from the IOS commands that he has given 2 Mbps.
Thanks
Irshad

Show interface will give you a 5-minute average. If you run what you think is sustained traffic across the link for a 5 to 10 minute period, it should come out close to 2Mbps.
An easier way would probably be to run a utilization monitor like PRTG, and shorten the measuring interval. I have one set up that monitors at 6-second intervals, it gives a near-real-time view of what's happening on the port. Then you can chart your usage over time. The free version of PRTG lets you monitor one interface, which should be fine for what you want to do. Here's a link:
PRTG Traffic Grapher 4
Bandwidth and Network Usage Monitoring Made Easy
http://www.paessler.com/prtg

Alert configuration - interface based

Hi,
I have the below requirement - Please help.
There has to be a report or mail to be generated with the count of messages that have been processed in XI per day.
The count has to be grouped by the Business service & Business system names.
We need this report to analysis on load that XI received in production system.
Regards,
Subbu

Hi Subbu,
Below are some of the tables where you get the data for the messages.
Transaction Codes - (SE11, SE 16)
SXMSPMAS XI Messages - Master
SXMSPHIST XI Messages - Master History table
SXMSPEMAS Integration Engine: Enhanced Message Queue (Master)
SXMSPVERS Integration Engine: Message Version
SXMSPERROR XML Message Broker: Message Queue (Incorrect Entries)
SMPPMAP3 Mapping Runtime: Mapping
SMPPREL3 Mapping Runtime: Mapping Relation
SMPPSPLIT XI Mapping: Merge and Split
SXMSPFRAWH Integration Engine - Header Table for Raw Data for Performance Evaluation
SXMSPFRAWD Integration Engine: Data Table for Raw Data for Performance
Adapter Engine Tables -
Schema Name - SAPSR3DB
XI_AF_MSG AF XI Message
XI_AF_MSG_AUDIT audit log entries
If runing on PI 7.1, table names are as follows -
BC_MSG AF PI 7.1 Message
BC_MSG_AUDIT PI 7.1 audit log entries (**)
Thanks,

On attempting to connect to my router's configuration interface, I get Secure Connection Failed

When connecting to my local router's configuraton webpage, I get a "Secure Connection Failed" Error message. "The page you are trying to view can not be shown because the authenticity of the received data could not be verified." No SSL error is shown, so I am unable to track it further. I just did a full distribution upgrade but it appears that Seamonkey also exhibits this behavior as well. Restarting safe mode did nothing, so I am at a loss.

Sounds that your router doesn't send a full certificate chain that ends with a Firefox built-in root certificate.
Check out why the site is untrusted (click "Technical Details to expand that section) and if this is caused by a missing intermediate certificate then see if you can install this intermediate certificate from another source.
You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.
*Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
*Click the "View..." button and inspect the certificate and check who is the issuer.
You can see more Details like intermediate certificates that are used in the Details pane.

Create a configurable Web Interfaces

Good Afternoon,
I would like to build a Web application using JSP, Servlets and Struts. However I want that the users could configure their interfaces once they are logged. By configuring interface, I mean that a user could choose to hide/show an input of a form and chose if this input is read-only or not.
I've though it would be a good idea of using a simple XML configuration file for each user to do that like this one :
<config>
<ITEM ID="name_input">
<DISPLAY>1</DISPLAY>
<CHANGE>1</CHANGE>
</ITEM>
<config>
By the way, I must use the i18n tag to manage the translation of my application in different language.
I'm a beginner in using these technologies and I'd like to have some advises from someone who did a configurable Web application.
I hope Someone will help me.
Thank you very much
Xavier

hello, ive also started to build a web site that will allow some configuration.
But im using a bd to store all info for the web site.
I dont know how good it is to use xml file or struct to configure dynamicaly since i dont use/know how to use this technologie.
As for the bd case, you need at least 1 table per web page and some info to identifie eatch user parameters, also, you could need to keep a table with user login/info as to identifie them.
To keep the language for every user, you may need to put extra field in eatch web page table.
Hope this can help you :)

Configure interface

Similar Messages

Maybe you are looking for