CSS & Service Port Command

I am trying to fix a problem in our network that I believe to be caused by ephemeral ports originating on the CSS (tcp 6000-6063). My questions is as follows: what exactly does the "(config-service)port" command do? I trying to avoid using the above mentioned ports as destination port numbers (I thing?!). Would the following command accomplish this?
(config-service)port 6064 range 65535
If you have any questions or need further clarification just let me know. Thanks for the help guys.
bc

Gilles,
I'm attaching a diagram and config file to help explain what is happening.
In step 5 of the diagram when the webservers are responding to the request for content is where we encounter the issue. When the web boxes respond to the CSS with content they respond with incrementing source ports. These ports range from approx. 2000-65500. I am thinking that the CSS doesn't really care what the actual source port of the internet user is and assigns a source port from the incrementing range I described above. When the checkpoint FW see ports in the 6000-6063 range it recognizes them as X11 traffic and denies it b/c it is considered a security risk (or at least thats what I assume). When these packets are denied we lose access to those webservers for about 2 minutes untill the ports cycle out of the X11 range. I've also attached a screenshot of some of the loggs so that you can see the incrementing port numbers.
I have two possible soutions for this problem. The first is to add an extra rule in the FW and the second is to somehow exclude the 6000-6063 range in the CSS. Let me know if you have any further questoins. Thanks.
bc

Similar Messages

CSS11501 - Rejects incoming connections on VIP service port

Hi,
I have configured CSS11501 in one-armed mode with only one server behind the VIP. After every couple of hours the connectivity to VIP Service port (80) is lost. Telnet to VIP on port 80 does not reach the server. During the same time ping to the VIP works continuously. The interface throughput does not go beyond 40Mbps and the max concurrent connections does not go beyond 200 connections. And the 'show service summary' continues to show the server alive on http. NAT is defined for the return traffic through 'group' command
The problem gets resolved by itself within 3-4 minutes or by deactivating and re-activating the VIP within CSS configurations.
CSS model : CSS11501
Version: 08.20.0.01
Any clue or hint to troubleshoot this problem will be of great assistance.
Thanks.

Good afternoon,
Probably the best would be opening a TAC service request to get this investigated further.
Before you do, I would anyway recommend you to try a software upgrade to the latest 8.20 release. 8.20.001 was the first release in the 8.20 train, so a lot of bug fixes have been added since then. There is still the chance that your issue will go away with this upgrade
Regards
Daniel

Problem: Socket connection is not creating in machine, through utility program (MFC Dll), on ListDisplay service port - 3334 (on separate machine), while we are able to telnet on same ListDisplay service port - 3334 from same issue machine on same time

Problem: Socket
connection is not creating in machine, through utility program (MFC Dll), on ListDisplay service port - 3334 (on separate machine), while we are able to telnet on same ListDisplay service port - 3334 from same issue machine on same time
Environment: -
OS:
Windows XP SP2/7
Code:
VC 6.0
Dll: MFC
Problem Description: -
We have written a utility program which create socket (Using windows standard method [MFC]), and then make connection with another service (List Display) running
on port 3334 in different machine and retrieve the required list data. This program was working fine in almost all the machines.
But, we have received a severe intermittent issue on two machines. Client is facing issue in displaying the list data from port 3334.
Attempt: -
First we tried to debug code, and we come to know that socket is not creating in utility program. So we tried to telnet on ListDisplay service port 3334 and we were surprised that we were able to telnet, then we opened some more
telnet window on same port 3334 around (6 to 8) window, and each cmd connected properly. But we were not able to create socket from utility program.
Problem is severe because issue is intermittent.
We have tried all the way, but we are not able to figure it out, that what can be the exact problem and what are the conditions, when utility program will not
connect with ListDisplay service on port 3334.
Kindly assist to resolve this issue. For any help, we would be really thankful.

Hi,
According to your description, it seems that you have created an utility program which is making connection with another service port 3334, however, two clients are facing issue in display the data list from port 3334.
Port: 3334/TCP
3334/TCP - Known port assignments (1 record found)
Service
Details
Source
directv-web
Direct TV Webcasting
IANA
Since the port 3334 is used by directv-web service, I'd like to suggest check this service it is working well on the problematic clients.
1. The client can be resolved in DNS well? Please run "nslookup" in the prompt command.
2. Is there any 3rd party application interrupting? Do test in clean boot.
2. Strongly suggest you run process monitor tool to analysis it.
I am looking forward to your reply if you have any updated on your side.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Issue on Service Ports for outgoing connection

Hi,
My question is regarding to my desktop Mac making outgoing connection to an external IP address 184.84.124.244 using TCP protocol destination port 443 but using 40 Service Ports between 49170 through 49217. This is an automatic outgoing connection by OS X 10.7.3 (I assumed as I did not make that connection). Why such connection required 40 ports to be opened at the same time? Anyone have any idea what might have caused that? Thanks.

There could be lots of outgoing connections when you fire up Safari, as an example, because by default it has many favourites that are RSS feeder. You could have added some new yourself.
How do I find out if those connections stay up indefinitely?
By the way just curious, how did you look up the IP address as who they are?
If you are "Terminal aware" there are some commands that can help you in this direction
host
host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. When no arguments or options are given, host prints a short summary of its command line arguments and options.
netstat
show network status
whois
The whois utility looks up records in the databases maintained by several Network Information Centers (NICs).
nslookup
query Internet name servers interactively
dig
dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity of output. Other lookup tools tend to have less functionality than dig.
just to name a few.
netstat in particular let you know which connections and their relative status are going on between your computer and the rest of the world

On a 3750 enhanced services port, are hierarchical queueing and standard queuing features mutually exclusive?

When you configure hierarchical queueing on an enhanced services port, should one also configure the egress queue chararcteristics such as buffer space and thresholds, shaped/shared weights, egress priority queue, etc., that is all of those characteristics that one would configure if one were configuring a port for standard QOS. In other words, on an enhanced services port, are the hierarchical queueing features using the modular QOS CLI and the standard egress queueing features supposed to be used together or are they mutually exclusive?

Hi Christine,
Answer to your confusion is in the following document.
http://www.cisco.com/en/US/docs/switches/metro/catalyst3750m/software/release/12.1_14_ax/release/notes/OL464603.html#wp58682
On an ES port, you can use LLQ (enabled with the priority policy-map class configuration command) and the egress priority queue (enabled with the priority-queue out
interface configuration command). By using these two features, you can
give priority to a class of traffic and avoid losing traffic when the
switch is congested. In previous releases (before the egress priority
queue was supported), you could put a traffic class into the
strict-priority queue, but congestion at the egress queue-sets could
result in the dropping of that priority traffic. The priority-queue out
interface configuration command enables you to prioritize the same
traffic class at the egress queue-sets, ensuring that priority traffic
reaches the hierarchical queues and is processed with priority.
you can also fine tune the Queue-sets for your desired results.
http://www.cisco.com/en/US/docs/switches/metro/catalyst3750m/software/release/12.2_50_se/configuration/guide/swqos.html#wp1162303

HA on 5508 and service ports

Hi everybody.
Two 5508 WLCs running 7.4.100.60. I had to activate HA
I decided to configure Service ports: following HA conf guide, I used DHCP. That's because static IPs on service ports are often cleared and forgot during switchover. HA went up perfectly; tests were positive: by rebooting the active unit, standby was immediately ready, and so on.
I decided to test maintenance mode: by shutting down the mgt ports of the active unit, the standby one was activated, and the active went into maintenance mode (because it did not reach the standby). This again is correct.
Issue: when the unit is in this status (maintenance), its service port IS NOT reachable! I have to open again its mgt ports: the unit does not change tha maintenance status (and this is fully correct), but becomes reachable through its service port.
This is not enough: the active unit remembers the peer service port address, but the standby one does not.
Moreover, after some time, when I try to contact the latter, I jump on the former (I am always talking of Service ports).
This is really diffcult for me to explain.... Any suggestion?
Thanks
Davide

Hi
In my 5508 WLC i have exactly the same problem as you gsutherland
I tried apply this command config 802.11b 11nSupport a-mpdu tx priority all disable
and i get message
"802.11b network not disabled"
Why i must turn off b standard ?
Thanks for respons

I am facing problem when configuring listener.ora and tnsnamess.ora in listener side it is showing The listener supports no services The command completed successfully and in when i cross check with listener from tns it is showing the error

i am facing problem when configuring listener.ora and tnsnamess.ora in listener side it is showing The listener supports no services The command completed successfully and in when i cross check with listener from tns it is showing the error
ORA-12514: TNS:listener does not currently know of service requested in connect
descriptor
here is my listener file
lsn =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
      (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.125.128)(PORT = 1575))
#ADR_BASE_LISTENER = /u01/app/oracle
(SID_LIST_LISTENER=
(SERVICE_NAME=kull)
(ORACLE_HOME=/u01/app/oracle/product/11.2.0/db_1)
tnsnames.ora
to_lsn=
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = server1)(PORT = 1575))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = kull )
my database name is kull
please somebody help

Biswaranjan wrote:
i have two database one is kull and another is kk
i configured listener.ora in kull
and tnsnames.ora in kk
when i am running lsnrctl start listener in database kull
This makes no sense. You don't configure a listener nor a tnsnames.ora "in a database".   I hope this is just a language issue and not reflective of a fundamental misunderstanding of how tns works.
read: http://edstevensdba.wordpress.com/2011/02/09/sqlnet_overview/ Help! I can’t connect to my database
read: http://edstevensdba.wordpress.com/2011/02/16/sqlnet_client_cfg/ Help! I can’t connect to my database (part duex)
it is showing the message
Alias                     lsn
Version                   TNSLSNR for Linux: Version 11.2.0.1.0 - Production
Start Date                05-JUL-2013 19:08:06
Uptime                    0 days 0 hr. 0 min. 0 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   /u01/app/oracle/product/11.2.0/db_1/network/admin/listener.ora
Listener Log File         /u01/app/oracle/product/11.2.0/db_1/log/diag/tnslsnr/server1/lsn/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1575)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=server1)(PORT=1575)))
The listener supports no services
The command completed successfully
and in another database in kk when i am giving the command tnsping to_lsn
it is giving this message
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = server1)(PORT = 1575)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = kull)))
OK (0 msec)
but when i am cross check sqlplus system/manager@ to_lsn
it is giving the following error
ORA-12514: TNS:listener does not currently know of service requested in connect
descriptor

CSS service Down even though responding to icmp probe

Hi,
A server is responding to PINGs but when configured to be used on the CSS service, it will keep in "Down" state. I have tried to add additional services on the CSS for other valid destinations and all would not become Alive.
CSS01#
ping 10.10.101.98
Pinging 10.10.101.98 1 time(s)...
Working(-) 1/1
100% Success.
CSS01#
service test_service
ip address 10.10.101.98
keepalive type icmp
active
show keepalive AUTO_test_service
Name: AUTO_test_service Index: 66 State: Down
Description: Auto generated for service test_service
Address: 10.10.101.98 Port: Any
Type:            ICMP
Frequency:        5
Max Failures:     3
Retry Frequency: 5
Dependent Services:
    test_service
Anything to check on the CSS that might indicate what is the issue? system-resource does not give an indication that memory or cpu are exhausted.
Regards

I am currently having this issue myself - very annoying. No new services will show "Alive" no matter what the keepalive configured is.
I am currently thinking a reload will "fix all" but I would rather not reload my production CSS - if there is a reason/explianation and a solution?!
CSS11503(debug)# show uptime ${output}
Uptime:
CSS5-SCM-2GE G0        : 1281 days 23:59:08
CSS5-IOM-2GE E0        : 1281 days 23:59:05
CSS5-SSL-K9 G0         : 1281 days 23:59:05
CSS503-SM-INT          : 1281 days 23:59:05
CSS11503(debug)# echo "show disk" ${output}
show disk
CSS11503(debug)# show disk ${output}
PCMCIA Slot: 0
          total # of clusters: 62544
            bytes per cluster: 16384
                free clusters: 57668
                 bad clusters: 0
                   free bytes: 944832512 (944 MB)
    max contiguous free bytes: 876724224 (876 MB)
                        files: 707
                      folders: 40
         total bytes in files: 71821754
                  lost chains: 0
   total bytes in lost chains: 0
CSS11503(debug)# echo "show running-config" ${output}
show running-config
CSS11503(debug)# show running-config ${output}
!Generated on 03/18/2010 14:24:02
!Active version: sg0810106

SVI needed for WiSM service-port?

I currently have a vlan/SVI on my 6506 for the WiSM service-port. The WiSM has an address on the same subnet. To manage the WiSM, I either https to the Management interface address or use 'session slot X proc Y' from the the 6506. Since I am essentially only using two addresses from a subnet for this service-port I would like to free up the subnet. Can I keep my current functionality by having a vlan only (with the wism service-vlan XX command) with no SVI? Thanks.

Yes, correct. You dont have to have this as a SVI. You can just drop them into the vlan with no SVI. So long as the WiSMs have a service port and IP and they are on the same subnet in the same vlan you are good.
After you set this up do a show wism status .. You should see thet are all up.
In fact I bloged about a security issue with the service port and the SVI interface. Its a good read..
http://www.my80211.com/security-labs/2010/10/7/cisco-wism-config-practice-opens-svi-vulnerability.html
I hope this helps.

FTP Server: PASV / Illegal PORT Command Issues

Hi,
I'm hoping someone can shed some light on this.
We have an iMac running 10.6.6 server with the FTP service running. Everything has worked fine for the last 6 months, including an office move (new IPs, etc) but suddenly in this last week, a lot of users (internal and external) are getting an "Illegal PORT Command" error when connecting.
The iMac is behind an Airport firewall with ports 20 and 21 forwarded to the server.
From what I've read the issue is a NAT related but I can figure out how to fix. The weird thing is that none of us here can think of any changes we've made on the server or Airport in the last week.
I've tried a mismatch of rules in the ftpaccess config file in /Library/FTPServer/Configuration/:
passive address external_ip 0.0.0.0/0
pasv-allow all 10.0.1.1/24
passive ports 10.0.1.1/24 54350 65535
with no success.
Debug from transmit when connecting:
Transmit 4.1.5 (x86_64) Session Transcript [Version 10.6.6 (Build 10J567)] (11-02-24 2:10 PM)
LibNcFTP 3.2.3 (July 23, 2009) compiled for UNIX
220: server.private FTP server ready.
Connected to domain_name
Cmd: USER username
331: Password required for username.
Cmd: PASS xxxxxxxx
230: User username logged in.
Cmd: TYPE A
200: Type set to A.
Logged in to domain_name as username.
Cmd: SYST
215: UNIX Type: L8 Version: BSD-199506
Cmd: FEAT
211: Supported features:
REST STREAM
ADAT
AUTH
CCC
CONF
ENC
MIC
PBSZ
PROT
MDTM
UTF8
SIZE
End
Cmd: OPTS UTF8 ON
200: UTF-8 encoding enabled
Cmd: PWD
257: "/" is current directory.
Cmd: PASV
425: Can't open passive connection: Can't assign requested address.
Passive mode refused.
Connection falling back to port (PORT) mode.
Cmd: PORT 10,0,1,6,250,79
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,80
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,81
500: Illegal PORT Command
Cmd: PORT 10,0,1,6,250,82
500: Illegal PORT Command
Disconnecting from server…
Cmd: QUIT
221: You have transferred 0 bytes in 0 files.
Total traffic for this session was 187 bytes in 0 transfers.
Thank you for using the FTP service on server.private.
Goodbye.
Anyone know what I can try?
Thanks.
Message was edited by: s-chilly

In terms of the Airport Extreme, is the Mac Mini Server currently set to the default host? If the Mac Mini Server is not currently set to the default host, this needs to be configured as such.
To set up the Mac Mini Server as the default host on the Airport Extreme:
1 Open AirPort Utility, select your wireless device, and then choose Manual Setup from the Base Station menu, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2 Click the Internet button, and then click NAT.
3 Select the “Enable Default Host at” checkbox if not already checked.
4 Enter the same IP address of the Mac Mini Server.
This works

Static nat and service port groups

I need some help with opening ports on my ASA using firmware 9.1.2.
I read earlier today that I can create service groups and tie ports to those. But how do I use those instead of using 'object network obj-ExchangeSever-smtp' ?
I have the ACL -
access-list incoming extended permit tcp any object-group Permit-1.1.1.1 interface outside
Can this statement
object network obj-ExchangeSever-smtp
nat (inside,outside) static interface service tcp smtp smtp
reference the service port groups instead?
Thanks,
Andrew

Hi,
Are you looking a way to group all the ports/services you need to allow from the external network to a specific server/servers?
Well you can for example configure this kind of "object-group"
object-group service SERVER-PORTS
service-object tcp destination eq www
service-object tcp destination eq ftp
service-object tcp destination eq https
service-object icmp echo
access-list OUTSIDE-IN permit object-group SERVER-PORTS any object
The above would essentially let you use a single ACL rule to allow multiple ports to a server or a group of servers. (Depending if you use an "object" or "object-group" to tell the destination address/addresses)
I am not sure how you have configured your NAT. Are they all Static PAT (Port Forward) configurations like the one you have posted above or perhaps Static NAT configurations?
You can use the "object network " created for the NAT configuration in the above ACL rule destination field to specify the host to which traffic will be allowed to. Using the "object" in the ACL doesnt tell the ASA the ports however. That needs to be configured in the above way or in your typical way.
Hope this helps
- Jouni

FTP/File Sender Adapter over SSL - 500 Illegal PORT command.

Hello Experts!
I'm trying to configure FTP Sender Adapter over SSL. This is the configuration I'm using:
Server: server01
Port: 21
Data Connection: Active
Timeout: 100
Connection Security: FTPS (FTP Using SSL/TLS) for Control and Data Connection
Command Order: AUTH TLS, USER, PASS, PBSZ, PROT
I have imported ftp server certificate into TrustedCAs key store. When the sender adapter tries to connect it receives the error 500 Illegal PORT command when getting files list.
This is an excerpt of the logs of connection steps:
#Plain##ftp server returns reply '220 Restricted Access. All Actions are monitored.'#
#Plain##Detected 'AUTH TLS' command: Preparing TLS/SSL connection upgrade#
#Plain##'AUTH TLS' successful: Upgrading control channel to TLS/SSL#
#Plain##ftp server returns reply '234 Proceed with negotiation.'#
#Plain##ftp server returns reply '331 Please specify the password.'#
#Plain##ftp server returns reply '230 Login successful.'#
#Plain##ftp server returns reply '200 PBSZ set to 0.'#
#Plain##ftp server returns reply '200 PROT now Private.'#
#Plain##ftp server returns reply '215 UNIX Type: L8'#
#Plain##ftp server returns reply '200 Switching to ASCII mode.'#
#Plain##ftp server returns reply '250 Directory successfully changed.'#
#Plain##ftp server returns reply '500 Illegal PORT command.'#
Does anybody know how to solve it?
Thank you in advance!
Roger Allué i Vall

Ok! This is the maximum i could obtain:
Fri Dec 11 15:28:12 2009 [pid 15206] FTP response: Client "10.58.42.108", "220 Restricted Access. All Actions are monitored."
Fri Dec 11 15:28:12 2009 [pid 15206] FTP command: Client "10.58.42.108", "AUTH TLS"
Fri Dec 11 15:28:12 2009 [pid 15206] FTP response: Client "10.58.42.108", "234 Proceed with negotiation."
Fri Dec 11 15:28:12 2009 [pid 15206] FTP command: Client "10.58.42.108", "USER iubsint"
Fri Dec 11 15:28:12 2009 [pid 15206] [iubsint] FTP response: Client "10.58.42.108", "331 Please specify the password."
Fri Dec 11 15:28:12 2009 [pid 15206] [iubsint] FTP command: Client "10.58.42.108", "PASS <password>"
Fri Dec 11 15:28:12 2009 [pid 15205] [iubsint] OK LOGIN: Client "10.58.42.108"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "230 Login successful."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PBSZ 0"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 PBSZ set to 0."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PROT P"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 PROT now Private."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "SYST"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "215 UNIX Type: L8"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "TYPE I"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "200 Switching to Binary mode."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "CWD /interfaces"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "250 Directory successfully changed."
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,45,108,159,112"
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP response: Client "10.58.42.108", "500 Illegal PORT command."
I think we found the problem though. FTP Administrator says this is wrong:
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,45,108,159,112"
it should be
Fri Dec 11 15:28:12 2009 [pid 15207] [iubsint] FTP command: Client "10.58.42.108", "PORT 10,58,42,108,159,112"
Something is making SAP PI to take a wrong ip address (This server has two).
I'll let you know if we solve it!!
Thank you!!!

FTP Server in FXP mode : PASV / Illegal PORT Command

Hello,
In our workflow, we transfer the media files with the FTP protocol in mode FXP (server to server), the commands are initiated by an automation system.
This system work with the plateforms windows (serv-u), linux (vsftpd), osx (tnftpd) but it's impossible on a osx server (xftpd). The aim is to write file on our Xsan.
The error is an illegal PORT command, when the automation system sent the IP adress of the other server.
For test, If the IP adress of the destination server is the same that the automation server, the transfers are good, the PORT command is accepted.
But in our case, the ip adress, is a other server...
We can't to run the ftp server in FXP mode, and I do not want to install a Pureftp for to replace the tools included with osx server (and server admin).
I think that's is possible, because this workflow works on a osx after we have modify the ftpd.conf (checkportcmd off).
We not found in the file ftp access and nothing on the Internet, that's why I write on this board.
I need your help, anyone have a solution, it's really important ?
Thank you very much.
Franck

Hello Franck,
I'm attempting the same thing. Did you find a solution to your problem?

Wism Controller 2 doesn't get service port IP but Controller 1 does

I followed the documentation for setting up the WiSM. Controller 1 is up and fine. I see in dhcp bindings, that Controller 2 is getting a DHCP address and when I "session slot 9 pro 2" it tries to connect to that dhcp address, but on a "show wism status" the service-port of controller 2 is 0.0.0.0
Has anyone encountered this problem?
Thanks

Hi..
What about the connectivity?? do we still have the access to the WLC 2?? either from telnet or the GUI?? or will the session to the WLC work?
Regards
Surendra

Can't create services port in Win2K

Hello guys:
    I was trying to install IDES on my laptop. The OS is Win2K Advanced Server with sp4. But there was a error when I installed the central instance of iDES.
   It said:'opying c:/winnt/system32/drivers/etc/services to c:/winnt/system32/drivers/etc/services.saptmp
Internal error:a call to syslib failed. system error message:no error'. And i thought it should be something wrong when IDES was trying to create service ports. So I opened the 'service' file in the directory which said in the error message, and found that IDES added one line 'sapmszzz 3600/tcp   #sapsystem message port', it should be more than one line, right?
     I don't know what happened during the installation, and ask for your help to solve this. Anyone will be appreciated!
Best Regards!
Zippo

Andreas, it's not quite correct:
The lines look like this:
sapdb<nn> 32<nn>/tcp
sapgw<nn> 33<nn>/tcp
sapms<SID> 36<nn>/tcp
where <nn> should be 00 in this case...
But the service number has to be unique.
If your services contains for example an entry:
sapmsAAB 3600/tcp
you will fail to add
sapmsAAX 3600/tcp
Therefore you typically have to modify the sapms<SID> entry if you install more than one system with the Number 00 to different values.
sapms<XXX> entries have to be identical on all SAP Systems which should talk to another.
regards
Peter

CSS & Service Port Command

Similar Messages

Maybe you are looking for