CSACS-3415 ACS 5.4 NIC Bonding / Teaming possible ?

Hi Team,
I know, this topic has been answered for the "old" 11x Appliances: not possible.
Does the new UCS hardware change anything ?
Can we bundle 2 NICs somehow to get interface redundancy ?
If still not possible to configure that in ACS 5 itself:
Can it enentually be done on the "hardware" level
within the appliance firmware (UCS BIOS) ?
Frank
(RHEL would provide NIC bonding,,, unfortunately its not accessable from ACS5 CLI)

Yes it does. ACS 5.5 with the Cisco SNS-3415, Cisco SNS-3495, virtual machine, or CSACS-1121 platform allows you to use up to four network interfaces: Ethernet 0, Ethernet 1, Ethernet 2, and Ethernet 3.
NIC Bonding
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-5/installation/guide/csacs_book/csacs_hw_ins.html#pgfId-1191791
Creating interface bonding
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-5/installation/guide/csacs_book/csacs_hw_ins.html#pgfId-1197533
Regards,
Jatin Katyal
*Do rate helpful posts*

Similar Messages

ISE 1.2 SNS-3415 NIC Bonding / Teaming

Hello,
I have installed the SNS-3415 with ISE 1.2 and i'm trying to setup redundnacy (Team) nic modes for the authentication requests and not for management purpose.
The tests showed that when the one interface was unpluged everything was lost and nobody from our internal users was able to authenticated by the ISE node.
In contrast when i was unpluged the " second interface " (probably the inactive ) nothing was happened which shows that is a useless interface
My purpose is to connect it to my twins core switches and have a full high availability deployment.
- I have search enough on the WEB but i didn't found any clear and precisely document of saying how this could be achieved.
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/installation/guide/csacs_book/csacs_hw_ins_ucs.html#wp1185589
Themis

ISE 1.2 does not support NIC teaming. Especially on appliances. There is a workaround for VM using the ESXi host to team the NICs so that it is transparent to the VM.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

NIC Bonding not behaving as it should

Hi Folks, am trying to setup NIC bonding on my VM (OEL5u6) having two virtualised NICs, i have done the setup which is quite simple however my active-backup mode is not working as expected.
My Bonded interface
[root@Gateway network-scripts]# cat ifcfg-bond0
DEVICE=bond0
IPADDR=192.169.25.2
NETMASK=255.255.255.248
ONBOOT=yes
BOOTPROTO=none
USERCTL=no
BONDING_OPTS='mode=active-backup miimon=1000'
TYPE=Ethernet
individual interfaces
[root@Gateway network-scripts]# cat ifcfg-eth2
DEVICE=eth2
HWADDR=08:00:27:1e:57:cf
MASTER=bond0
SLAVE=yes
ONBOOT=yes
BOOTPROTO=none
USERCTL=no
[root@Gateway network-scripts]# cat ifcfg-eth4
DEVICE=eth4
HWADDR=08:00:27:46:69:69
MASTER=bond0
SLAVE=yes
ONBOOT=yes
BOOTPROTO=none
USERCTL=no
Bonding status (looks good)
[root@Gateway network-scripts]# cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.5.0 (November 4, 2008)
Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth2
MII Status: up
MII Polling Interval (ms): 1000
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth2
MII Status: up
Link Failure Count: 0
Permanent HW addr: 08:00:27:1e:57:cf
Slave Interface: eth4
MII Status: up
Link Failure Count: 0
Permanent HW addr: 08:00:27:46:69:69
I am doing a continous ping from another host in the same n/w to this bonded interface IP to check if the ping streak breaks when i test this setup
Testing -
[root@Gateway network-scripts]# ifenslave -c bond0 eth4
and that's it my SSH connection is gone, and ping is broken with "Request timed out"
when i check the bond status now -
Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth4
MII Status: up
MII Polling Interval (ms): 1000
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth2
MII Status: up
Link Failure Count: 0
Permanent HW addr: 08:00:27:1e:57:cf
Slave Interface: eth4
MII Status: up
Link Failure Count: 0
Permanent HW addr: 08:00:27:46:69:69
am afraid there's not much help in the message log to debug this.
Any views what's wrong and how to resolve? appreciate ur replies. Thanks
Regards Amit

Hi,
I'm having the same problem, when i disconnect the cable from the eth0 (active slave) stop receiving respond
I have tried bridged conf and interal net.
I'm using VirtualBox 4.1.16
This is my conf:
[root@integrador ~]# cat /etc/sysconfig/network-scripts/ifcfg-bond0
DEVICE=bond0
IPADDR=10.10.0.2
NETWORK=10.10.0.0
NETMASK=255.255.255.0
BONDING_OPTS="mode=1 miimon=100"
BOOTPROTO=none
ONBOOT=yes
[root@integrador ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=none
MASTER=bond0
SLAVE=yes
USERCTL=no
[root@integrador ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
ONBOOT=yes
BOOTPROTO=none
MASTER=bond0
SLAVE=yes
USERCTL=no
[root@integrador ~]# cat /etc/modprobe.d/bonding.conf
alias bond0 bonding
[root@integrador ~]# ifconfig -a
bond0 Link encap:Ethernet HWaddr 08:00:27:5C:C5:BA
inet addr:10.10.0.2 Bcast:10.10.0.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe5c:c5ba/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:402 errors:0 dropped:0 overruns:0 frame:0
TX packets:92 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:39487 (38.5 KiB) TX bytes:11045 (10.7 KiB)
eth0 Link encap:Ethernet HWaddr 08:00:27:5C:C5:BA
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:211 errors:0 dropped:0 overruns:0 frame:0
TX packets:89 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:23061 (22.5 KiB) TX bytes:10863 (10.6 KiB)
eth1 Link encap:Ethernet HWaddr 08:00:27:5C:C5:BA
UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
RX packets:191 errors:0 dropped:0 overruns:0 frame:0
TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:16426 (16.0 KiB) TX bytes:182 (182.0 b)
eth2 Link encap:Ethernet HWaddr 08:00:27:DF:11:A2
inet addr:192.168.57.1 Bcast:192.168.57.3 Mask:255.255.255.252
inet6 addr: fe80::a00:27ff:fedf:11a2/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:1142 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:119508 (116.7 KiB)
eth3 Link encap:Ethernet HWaddr 08:00:27:D1:41:9A
inet addr:192.168.1.50 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fed1:419a/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:825 errors:0 dropped:0 overruns:0 frame:0
TX packets:625 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:563221 (550.0 KiB) TX bytes:85914 (83.9 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:25 errors:0 dropped:0 overruns:0 frame:0
TX packets:25 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2690 (2.6 KiB) TX bytes:2690 (2.6 KiB)
[root@integrador ~]# cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.6.0 (September 26, 2009)
Bonding Mode: fault-tolerance (active-backup)
Primary Slave: None
Currently Active Slave: eth0
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth0
MII Status: up
Speed: 1000 Mbps
Duplex: full
Link Failure Count: 0
Permanent HW addr: 08:00:27:5c:c5:ba
Slave queue ID: 0
Slave Interface: eth1
MII Status: up
Speed: 1000 Mbps
Duplex: full
Link Failure Count: 0
Permanent HW addr: 08:00:27:fc:6b:f6
Slave queue ID: 0
[root@integrador ~]# lsmod | grep -i bond
bonding 109558 0
ipv6 264641 39 cnic,bonding,ip6t_REJECT,nf_conntrack_ipv6,nf_defrag_ipv6
[root@integrador ~]# uname -a
Linux integrador 2.6.32-220.el6.i686 #1 SMP Tue Dec 6 16:15:40 GMT 2011 i686 i686 i386 GNU/Linux
Sorry for my english!

Nic Bonding in OVM Server

Hi
I am setting up a OVM environment where I want to implement NIC bonding. I want to bond eth1 and eth3, the IP address are showing against xenbr1 and xenbr3. Please let me know the steps of doing this.
Thanks

itsakc wrote:
I am setting up a OVM environment where I want to implement NIC bonding. I want to bond eth1 and eth3, the IP address are showing against xenbr1 and xenbr3. Please let me know the steps of doing this.The Underground Oracle VM Manual has an entire chapter on this: http://itnewscast.com/chapter-7-oracle-vm-networking-8021q

Switching from single NIC to NIC bonding in "active" RAC

Hi
I have a 4 node RAC cluster on RHEL 4, running 10.2.0.3.0 in "semi-production".
"Everything" is multiplexed, except the NICs. The servers have 2 NIC ports one for public and one for interconnect.
If we add another NIC with 2 ports, is it possible to change the NIC configuration from single port to NIC bonding, without reinstalling CRS?
I can get a maintenance window, so this doesn't have to be done on the fly, I just need to know if its do-able.
I have checked some notes on MetaLink and for me it looks like this should be possible.
E.g. Note:436555.1 and Note:283684.1
Regards
Niklas

Nicke, Its very well doable and supported approach. You can use oifcfg to reconfigure the interfaces and there is no need to reinstall the CRS.
-Harish Kalra

Oracle VM 2.2 Nic bonding

Hi everybody,
I want to set NIC bonding on my VM 2.2 server. How does NIC bonding work? Also would I have to do any setup on my switch? Thank you to anyone who can help me understand.

Sean314 wrote:
I want to set NIC bonding on my VM 2.2 server. How does NIC bonding work? Also would I have to do any setup on my switch? Thank you to anyone who can help me understand.There is a great document on the Oracle Wiki for this: [ Oracle VM Server Configuration- bonded and trunked network interfaces|http://wiki.oracle.com/page/Oracle+VM+Server+Configuration-+bonded+and+trunked+network+interfaces].

GUIDE: Oracle VM VirtualBox and Oracle Linux NIC bonding

Author: Dude
Date: 01-Jun-2013
Version: B
Last updates:
23-Jul-2013, changes required due to forum upgrade
The following is provided in the hope that it might be useful. If you wish to use it for the purpose of reference, presentation or education, please include the link or information to this forum posting. Thank you!
What is Linux network interface bonding? Simply put, the Linux system provides a kernel driver, which can create a logical network device (bond) using 2 or more Network Interface Controllers (NIC) to accomplish link-aggregation and adapter fault-tolerance. For more information, please see the Deployment Guide at https://linux.oracle.com/documentation/
The channel bonding interface supports several modes of operation. In a typical active-backup set up for fault-tolerance, the system performs MII-based health monitoring of the network interface slaves (eth0, eth1) and assigns them according to bond options and interface availability. In active-backup mode (mode 1), only the current active network device is seen externally.
Linux bonding for fault-tolerance under Oracle VM VirtualBox does not seem to function as advertised. Searching the Internet for more information shows that other people have tried to set up Linux bonding using various virtualization products, virtual host network adapter and bonding options, but without success.
It appears the management of Media Access Control addresses (MAC) interferes with internal routing methods between the host and the virtual machine guest. Using the modinfo bonding command (fig. 1) shows a listing of available parameters for the bonding kernel module. The fail_over_mac parameter addresses the Mac address issue in VirtualBox.
Fig.1
# modinfo bonding
filename:       /lib/modules/2.6.39-400.17.1.el6uek.x86_64
                /kernel/drivers/net/bonding/bonding.ko
parm:           fail_over_mac:For active-backup,
                do not set all slaves to the same MAC;
                0 for none (default), 1 for active, 2 for follow (charp)
Configuration Example
Virtualization Product: Oracle VM VirtualBox 4.2.10
VM Guest OS: Oracle Linux 6.4 (x64)
VM adapter settings: Bridged Adapter, Paravirtualized Network (virtio-net)
Adapter1 (eth0): 080027436617, en0, Ethernet 1
Adapter2 (eth1): 08002708F36A, en0, Ethernet 1
Note: If you wish to reset the network adapter names and MAC addresses used by the Oracle Linux guest system, erase the content of /etc/udev/rules.d/70-persistent-net.rules and restart the virtual machine.
1. Create or modify the following configuration files:
/etc/modprobe.d/bonding-eth0_eth1.conf
alias bond0 bonding
/etc/sysconfig/network-scripts/ifcfg-bond0
DEVICE=bond0
IPADDR=10.0.2.12
NETMASK=255.0.0.0
GATEWAY=10.0.0.138
DNS1=10.0.0.138
DNS2=8.8.8.8
ONBOOT=yes
BOOTPROTO=none
USERCTL=no
BONDING_OPTS="mode=1 miimon=100 fail_over_mac=1"
/etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=none
ONBOOT=yes
MASTER=bond0
SLAVE=yes
USERCTL=no
/etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
BOOTPROTO=none
ONBOOT=yes
MASTER=bond0
SLAVE=yes
USERCTL=no
2. Restart the system or network services (root):
Fig. 2
# service network restart
Configuration Test
Enter the following commands as user root to verify proper operation of NIC bonding:
Fig. 3
# tail /var/log/messages
bond0: setting mode to active-backup (1).
bond0: Setting MII monitoring interval to 100.
bond0: Setting fail_over_mac to active (1).
bond0: Adding slave eth0.
bond0: making interface eth0 the new active one.
bond0: first active interface up!
bond0: enslaving eth0 as an active interface with an up link.
bond0: Adding slave eth1.
bond0: enslaving eth1 as a backup interface with an up link.
Fig. 4
# ifconfig
bond0     Link encap:Ethernet HWaddr 08:00:27:43:66:17
          inet addr:10.0.2.12 Bcast:10.255.255.255 Mask:255.0.0.0
          inet6 addr: fe80::a00:27ff:fe43:6617/64 Scope:Link
          UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
eth0      Link encap:Ethernet HWaddr 08:00:27:43:66:17
          UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
eth1      Link encap:Ethernet HWaddr 08:00:27:08:F3:6A
          UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
Fig. 5
# netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window irtt Iface
0.0.0.0         10.0.0.138      0.0.0.0         UG        0 0          0 bond0
10.0.0.0        0.0.0.0         255.0.0.0       U         0 0          0 bond0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 bond0
Fig. 6
# ifconfig eth0 down
# tail /var/log/messages
bond0: link status definitely down for interface eth0, disabling it
bond0: making interface eth1 the new active one.
# ifconfig
bond0     Link encap:Ethernet HWaddr 08:00:27:08:F3:6A
          inet addr:10.0.2.12 Bcast:10.255.255.255 Mask:255.0.0.0
          inet6 addr: fe80::a00:27ff:fe43:6617/64 Scope:Link
          UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
eth1      Link encap:Ethernet HWaddr 08:00:27:08:F3:6A
          UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
Fig. 7
# ifconfig eth0 up
# ifconfig eth1 down
# tail /var/log/messages
bond0: link status definitely up for interface eth0, 4294967295 Mbps full duplex.
bond0: link status definitely down for interface eth1, disabling it
bond0: making interface eth0 the new active one.
# ifconfig
bond0     Link encap:Ethernet HWaddr 08:00:27:43:66:17
          inet addr:10.0.2.12 Bcast:10.255.255.255 Mask:255.0.0.0
          inet6 addr: fe80::a00:27ff:fe43:6617/64 Scope:Link
          UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
eth0      Link encap:Ethernet HWaddr 08:00:27:43:66:17
          UP BROADCAST RUNNING SLAVE MULTICAST MTU:1500 Metric:1
During the above test, the client network connection from host 10.0.0.1 (ssh) was maintained without any noticeable interruption. As it can be seen from the syslog and ifconfig command output, the bond0 interface was automatically assigned either the MAC address of eth0 or eth1 and the fail-over worked as advertised.
Good luck!

Please see these docs/links.
Using Oracle VM with Oracle E-Business Suite Release 11i or Release 12 [ID 465915.1]
Certified Software on Oracle VM [ID 464754.1]
Oracle VM Templates -- Oracle E-Business Suite 12.1.3 (32-bit), Oracle E-Business Suite 12.1.1 (64-bit and 32-bit) and Oracle E-Business Suite Release 12.X Sparse Middle Tier (32-bit)
http://www.oracle.com/technetwork/server-storage/vm/ebs-093153.html
E-Business Suite 12.1.3 Templates for Oracle VM Now Available
http://blogs.oracle.com/stevenChan/2010/11/ebs1213_oraclevm.html
Live Migration of EBS Services Using Oracle VM
http://blogs.oracle.com/stevenChan/2010/01/ebs_live_migration_ovm.html
Using Oracle VM with Oracle E-Business Suite Virtualization Kit
http://blogs.oracle.com/stevenChan/2009/12/oracle_vm_ebs_virtualization_kit.html
New Oracle® VM Templates for Oracle Applications Now Available
http://www.oracle.com/us/corporate/press/068341
Very Cool! New Oracle VM Templates for Oracle E-Business Suite
http://blogs.oracle.com/virtualization/2010/11/very_cool_new_oracle_vm_templa.html
Thanks,
Hussein

Oracle VM 3.1.1 Manager: Configuraing NIC Bonding?

Each of the two OVM 3.1.1 servers in the OVMM 3.1.1 server pool has three Gigabit Ethernet NIC's:
<ol>
<li>One for the Management + VM + Heartbeat Networks (eth0) and
<li>The other two (eth1 + eth2) should be bonded for redundancy and performance and connected to the Live Migration + Storage Networks.
</ol>
However, OVMM 3.1.1 doesn't seem to have the ability to configure the bonding for NIC's. Am I overlooking something?
Eric Pretorious
Truckee, CA

Refer to the Oracle VM User's Guide for Release 3.1.1:
<li>Chapter 5.4, Network Bonding discusses bonding Management interfaces.
<li>Chapter 5.8, Managing Bonded Interfaces discusses bonding non-Management interfaces.
Eric Pretorious
Truckee, CA
REFERENCE
http://docs.oracle.com/cd/E27300_01/E27309/html/vmusg-network-bonding.html
http://docs.oracle.com/cd/E27300_01/E27309/html/vmusg-network-bondintfce.html

ACS SE and NIC Cards

After reading the documentation regarding the NIC cards on the ACS appliance it seems the both cant be used together. Can one be used as a management Interface like on CS-MARS and IPS? while the other performs its normal operation?

unfortunately no, you can only use one NIC that too bottom NIC (NIC 1).
If you want such a feature, you may want to contact your AM, and go for a feature request on this product.
Regards,
Prem
Please rate if it helps!

Network teaming/bonding - Team a wifi connection and an eth one ???

Hello,
Is it possible to team/bond a wifi network connection with a ethernet one to increase the overall connexion speed?
I believe that it can be done with 2 eth one, but not sure about a eth and a wifi one.
Thanks in advance.
Ludo

No reason you can't AFAIK depending on the bonding mode you want to use, but it wouldn't be desirable if your goal is speed.
Bonding does NOT aggregate the links per stream. Each stream still only goes over 1 "physical" connection to avoid packets getting out of order etc, so you would find that some connections would be sent over the wifi (and be limited by it's connection speed), while other connections would be on the wire connection.
Bonding allows more streams to happen in parallel, it doesn't magically speed up individual streams.
You would still be able to obtain redundancy using bonding (eg, mode 1)

New rc.conf networking and nic bonding

I understand that net-tools is deprecated (actually a good idea),
but i have the feeling that someone forget to think about bonds.
Netcfg should support it (optionally), but i am not able to get it working (lack of documentation).
It is possible to make the new method working:
in rc.conf:
interface=bond0
address=
then in rc.local
echo +eth0 > /sys/class/net/bond0/bonding/slaves
echo +eth1 > /sys/class/net/bond0/bonding/slaves
ip link set dev bond0 up
but i don't think that is *the* way to go
is there a better way to do it ?
maybe a feature request ?

geometric wrote:I think that optimal decision would be both ways of configuring network.
Why developers wouldn't do that? the old way is more flexible anyway
"Optimal" from who's point of view?
Have you read http://www.archlinux.org/news/deprecation-of-net-tools/ ?

Are drawable bond issues possible in ECC 6 FSCM - Treasury & Risk Mgmt

We have been attempting to use drawable bonds from the debt side (versus as an investment) and have been unsuccessful in making it work as category 41 does not allow for issues and redemptions like product category 40 with product types 04X and 04Y. The category appears to only allow for purchase or sale. Has anyone found a workaround to allow for Drawable Bond Issues to occur? If so please point us in the right direction.
Thank you,
Lisa
P.S. We have walked through the link below and been able to make drawable bonds work from the investment side.
http://help.sap.com/SAPHELP_ERP2005/helpdata/EN/2f/b9b5386f64b555e10000009b38f8cf/content.htm

Hi,
How are you tracking your TDS? Through derived flows? In that case you can have 2 different procedures and assign suitable procedure for the corresponding business partner.
you can check here for country specific settings.
http://help.sap.com/erp2005_ehp_05/helpdata/en/2d/dd27906749406eb46c6746c4a7ce2d/frameset.htm
Regards,
Ravi

WLC 4402 + ACS 5.4 + AD: is it possible to use separate ip dhcp pools according to AD user group?

Hello, we are using WLC with ACS and it is working well.
We have AD group WiFi_access, and all users from these group are able to athunticate during connecting to corporate wifi network.
How we could make, for example, two AD groups: WiFi_access and WiFi_VIP and users from first group get 10.7.0.0/24 adressess and 10.8.0.0/24 from the second? or it could be 10.7.0.0-100 and 10.7.0.100-200 it doesn't matter.
the main goal is: different AD groups of users must have different privileges and these is controling via ACL on their default gateway switch.

You can use "aaa-override" feature to do that. In that case once user get connected & if he is belong to "WIFI_VIP" group ACS can override the user vlan to a different one (10.8.0.0/24) what they initially associate to.
You can get an idea about the concept from the below post
http://mrncciew.com/2013/05/21/aaa-override-in-acs5-2/
HTH
Rasika
*** Pls rate all useful responses ***

Cluster with only 2 NICs, is it possible?

I am trying to setup a non-production 2 node cluster, problem is I only have 2 NIC ports avail since I can't spend any money on it. Is it possible to work around that and get the second node to join the cluster with one public and one private interface? Not having any luck and am curious if anyone has done the same and knows of some sort of hack to get around it? When node 2 first boots and tries to join the cluster, it is unable to communicate over the cluster interconnect. I understand this isn't the desired setup and voids the whole HA scenario, but this is just a proof of concept before moving a new production app over to SC3.2, which will not have this limitation.
Thanks in advance for any input.

A little more research in the interconnect not working I've found two common causes that people have discovered, ipfilter and kernel patch 138888-01. I am not using ipfilter, the service is disabled, and as I understand it, kernel patch 138888-01 and above only cause this issue if connected via a switch. My cluster nodes are connected directly by a crossover cable. Is this still possibly my issue, or should I keep digging? One node is a T2000 with e1000g interfaces, so that also lines up.
Thanks again..

I'm looking to remotely disable then re-enable a NIC ... possible?

My organization is having quite a few issues now that we're finally rid of XP. We think we've narrowed it down to the default setting of Win 7 NIC cards Power Management, specifically the "Allow the computer to turn off this device to save power"
checkbox being enabled (checked). Example below:
We've had hundreds of complaints of disconnects and issues re-connecting when people leave their computer at lunchtime or an extended break, and on a few dozen of those specific people we have tried disabling this (manually) and they report the issue has
stopped for them. We'd like to test this on a few dozen more people, but they're at remote locations and we'd have to do it remotely. Making the actual change isn't a problem, it's a specific registry key located at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\
- the problem is the NIC needs to be disabled and re-enabled after changing the key to make it stick, otherwise it seems to revert back to a default (which is that box checked on).
Does anyone know of a way to disable and then re-enable a NIC on a remote machine via PowerShell? We have full remote access to these machines, so we can copy scripts to them or invoke-command if need be.
Thanks in advance.
[email protected]

If running PowerShell V3, you can take advantage of disconnected remote sessions to continue running code even if the session has been disconnected (and in theory should work if the NIC drops).
Something like this should work:
#Create the session option; Drop is important so the command execution continues on after the disconnect
$Option = New-PSSessionOption -OutputBufferingMode Drop
$Session = New-PSSession -ComputerName 'client1' -SessionOption $Option
Invoke-Command -Session $Session -ScriptBlock {
#Registry code work goes here
$NetAdapter = Get-WMIObject Win32_NetworkAdapter -filter "Name='Intel(R) 82579LM Gigabit Network Connection'"
$NetAdapter.Disable()
$NetAdapter.Enable()
#This may not be needed since the connection will drop anyways
Disconnect-PSSession $Session
#Wait a bit and see if the system comes up as the commands should still be running remotely
Note: The clients need to be running V3 for this to work.
Boe Prox
Blog |
Twitter
PoshWSUS |
PoshPAIG | PoshChat |
PoshEventUI
PowerShell Deep Dives Book

CSACS-3415 ACS 5.4 NIC Bonding / Teaming possible ?

Similar Messages

Maybe you are looking for