E4200v2 - Guest Network Name: STRANGE behavior!
on a E4200v2, the Guest Network Name is not behaving rationally!
I have 2 E4200v2's, running 2.0.37, bought at same time and configured identically, including both in BRIDGE mode (access points only) and both with the 2.4ghz network name is "acme".
On one device the Guest Network Name is correct "acme-guest" but on the other device it is "cisco08996-guest".
(Also, the even wierder thing is that 08996 is not the correct serial number for this device, it's really 08273, so you'd expect it to default back to "cisco08273" but it never does)
I have tried many things to try to get it to revert to "acme-guest" but it just won't budge. It seems like some sort of deep-seated bug in the configuration settings.
I've tried:
* reboot the device
* disable Guest Access then reboot then re-enable
* disable 2.4Ghz WiFi & Guest Access, then reboot, then re-enable both
Nothing works!
I don't really have time to reset & redo this devices config from scratch, and it's a very busy device anyway. So I'd much rather there was a way to fix this problem without downtime to the users.
Anyone faced this same problem? Any solutions or tricks??
Thanks in advance!
earthmyrll120288 wrote:
If the router is set to Bridge Mode, Guest Access is not going to work. Wireless devices would see the network broadcasting but it is not going to work.
Not true actually. I find it has worked great. And another user on these boards (Counsil?) has said likewise.
The article/point you refer to is talking about cascading routers, which we're NOT doing. And it also talks about LAN-to-LAN access, which we're NOT doing.
We are just using Guest Network to share the Internet securely which it seems to do fine.
So I'm back to my original question about the Guest Network Name... anybody have any experience with the behavior I reported in my opening post?
Similar Messages
-
E4200 Change Guest Network Name
Is it possible to change the Guest Network Name on the E4200? And if so, is it possible to do so without having to do a complete reset of the router and without using the Cisco Connect software?
Yes you need to download and install the Cisco connect Software. That is the only way to manage the Guest account for the router (unless things have changed). Be aware the new SSID will still have the -guest tagged to it.
Linksys is the only vendor that does this. Also the Guest account in NOT encrypted for security. I would not use it in a public place at all. This is for home use only. All other manufacturers except Linksys, can use full WA2-AES for encrypted information on their Guest Networks. You can also name your Guest SSID to anything you want. Something to think about. -
How to setup Guest Network Name in Cisco Router
Hello everyone!
The first. Sorry my english =)
I want tald you how to change guest network name in cisco (what have different name)
What we need.
1. Cisco Connect for Mac OSX (i use snow leopard and Cisco Connect for E3000)
2. Terminal
Okay. Let's go.
1. Install Cisco Connect for OSX
2. After setup - slighty setup your cisco router (give something name and password), then, when cisco connect say you "You now connected the internet" and going to main screen - exit from cisco connect
3. Open Terminal (Or you can use Finder (go to Application, show package content Cisco Connect))
4. Go to /Application/Cisco Connect.app/Contents/Resources/lcid/<your setup language, for english - go 1033>/
5. Edit resource_strings.pus (vi resource_strings.pus)
6. Change "-guest" in string <LocalizableString RcFileId='10019' BaseTextHash='0xA65E286D' BaseText='-guest'/> for something what you want. For example, i changed for ' Guest Network'
7. Save
8. Open Cisco Setup
9. Go to router configuration and change desired name. I changed to 'Grizlly Bear'
10. After setup name - go to Guest Setting and Enable. As you can si, your guest network name set as 'Grizlly Bear Guest Network'
11.Exit Cisco Setup
12. Go to web interface setup
13. Setup Wifi manual and change SSID for diferent names. I change 5Gh to 'Grizlly Bear Hi-Speed Network' and 2.4GHz to 'Grizlly Bear Main Network'
14. Setup your hostname for all services (fileserver, media server, etc)
Woala!
We have three diferent names network!
Questions?In order to enable Guest networking, the AirPort Extreme must be configured as your "main" Internet router. In this configuration, Connection Sharing = Share a Public IP address. The Extreme would be connected directly to the Internet modem and NOT downstream of another router with NAT enabled.
In this configuration, the Guest network would provide access ONLY to the Internet and NOT to your LAN. -
E3000 Changing guest network name
When I first configured the E3000 I called the device CiscoRouter, and I had:
a) CiscoRouter
b) CiscoRouter-guest
I then decided to change the name of the device to: Alberto-Network, and now I have:
a) Alberto Network
b) CiscoRouter-guest
I have not foud a way to change the name of the guest conexion.
Cisco COnnect lets me change the password for the guest netwok, but not the name.
How do I change the name of the guest conexion??????
Alberto Odor, MD
Solved!
Go to Solution.Like dalime said you have to set the Router name and then the guest account is generated based on that. But it's a bit dumb. If you've configured your router name from the web panel or after you setup your guest account it will generate a generic Cisco name.
Solution:
1) Turn off Guest
2) Change the router name (Like dalime showed)
3) (cancel) the silly usb key interchange request
4) Change the router name back to what it should be
5) (cancel) the silly usb key interchange request
6) Turn on Guest and now it will recognize the correct router name to add "-guest" in the end of -
Airport Extreme off a Router which provides DNS - Guest Networks
I am sure that I am not alone here.
I have a BTBroadband wireless ADSLModem/Router which provides DNS for the network.
Off tyhe router is a Netgear switch which has connected to it an Airport Extreme. Also off this switch I have many other peripherals - such as Time Capsule, iMac etc.
So the arrangement is simple in logical terms:
BT Modem------->Wireless Router (which allocates DNS)---------->Switch----------->Airport Extreme etc.
IP Settings as follows
192.168.0.1 for Wireless Router - which allocates DNS in range 192.168.0.2 to 0.150.
I have allocated a fixed IP on the Airport Extreme of 192.168.0.151
The devices thart run off this are all having DNS allocated by the router - not the Airport Extreme.
So - how do I set up (or can I set up) the Guest Wireless Network?
Let's assume Router Wireless Network is call MainWireless with a Password MainWord, The Airport Extreme is acting in Bridge Mode and has the exact same 'Create a wireless network' called MainWIreless and Password MainWord (as per best practices in using these to provide the best 'network hopping' capabilities for devices (I actually have 2 other wireless devices from TimeCapsules that operate the wireless in the same way).
All of this works fine.
However when I set up the Guest Network on the Airport Extreme - simply by enabling it - I provide a new Guest Network name of GuestWireless with a password GuetsPassword. In theory it should all work fine, however the devices connecting to the Guest Network cannot get to the internet (effectively I don't think that the 'iPhone for example' is being allocated a correct IP Address - in fact I know that it isn't as its a 169 range and a different subnet).
So - the only way I can think of doing this is to go into the Network Settings on the Airport Extreme, Change Bridge Mode Wireless to DHCP and NAT and then go into Network Options. Here I am a bit lost and need help.
To summarise - Main Router Address 192.168.0.1 allocates range 192.168.0.2 to 150, Airport Extreme Address (static) address 192.168.0.151.
Airport Extreme DHCP and NAT Network Options has:
IPv4 DHCP Range - I have set to 192.168.0.152 to 255
Guest IPv4 DHCP Range 10.0.0 152 to 255
NAT Port Mapping Protocol is switched Off
- This won't even save.
Should be simple I would have thought. Think again...
Please help - mwhat should I / can I do to enable a guest wireless network?Thanks for all that - I suspected as much (and I did mean DHCP not DNS).
So - if I disable DHCP on the HomeHub3 IP 192.168.0.1, and set the Airport Extreme IP Address at 192.168.0.2, what do I do with DHCP and NAT settings to have a Main and Guest Wireless Network?
I can easily change the order of things if necessary to be :
BT Modem (192.168.0.1 with DHCP disabled)--->Airport Extreme (192.168.0.2 (set to get DNS from 192.168.0.1) )--->Switch---->Various wired and wireless devices. -
I have been experiencing a lot of strange behavior on my home network ever since a disgruntled employee was let go. He was a server admin and had root access to my home network - where I run my business. I am getting a ton of span now, my websites were all infected with xss hacks, and many of my accounts are blacklisted. I did a clean install and DoD erase pass on my hardware, but I still see a lot of errors and my hosts file and VMs look very odd. not to mention the extremely odd loops in my ifconfig... Any help?
Here is an output of 'ifconfig'
(FYI, I am a software dev, so feel free to speak the jargon and ask for specific things)
(I hid any identifying info with either xx or my:ma:ca:dd:re:ss or something like that)
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
ether th:is:ad:dr:es:s1
inet6 fxxx::xx2a:xxff:fxxx:fxxx%en0 prefixlen 64 scopeid 0x4
inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
nd6 options=1<PERFORMNUD>
media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
status: active
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether th:is:ad:dr:es:n1
inet6 fe80::e2f8:47ff:fe29:6ec2%en1 prefixlen 64 scopeid 0x5
inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.xx.xx.xxx
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
lladdr 70:cd:xx:ff:fe:xx:xx:xx
nd6 options=1<PERFORMNUD>
media: autoselect <full-duplex>
status: inactive
en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether my:wi:fi:ma:ca:dd
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether th:is:ad:dr:es:mtu
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
nd6 options=1<PERFORMNUD>
media: <unknown type>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether th:is:ad:dr:es:p2p0
media: autoselect
status: inactive
vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 00:50:56:c0:00:01
inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 00:50:56:c0:00:08
inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1396
inet my.ded.vpn.xx --> 192.xxx.xxx.xxx netmask 0xffffff00
nooooooo:~ cearnhart$ ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
ether th:is:ad:dr:es:s1
inet6 xxx::xxxx:xxff:xxxx:fxx2%en0 prefixlen 64 scopeid 0x4
inet 10.xx.xx.x netmask 0xffffff00 broadcast 10.x.x.xxx
nd6 options=1<PERFORMNUD>
media: autoselect (1000baseT <full-duplex,flow-control,energy-efficient-ethernet>)
status: active
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether th:is:ad:dr:es:n1
inet6 fxxx::xxf8:47ff:fxx:6xx%en1 prefixlen 64 scopeid 0x5
inet 10.x.x.x netmask 0xffffff00 broadcast 10.x.x.xxx
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
lladdr xx:xx:xx:ff:fe:xx:5f:xx
nd6 options=1<PERFORMNUD>
media: autoselect <full-duplex>
status: inactive
en2: flags=8922<BROADCAST,SMART,PROMISC,SIMPLEX,MULTICAST> mtu 1500
options=60<TSO4,TSO6>
ether xx:00:1e:xx:xx:xx
media: autoselect <full-duplex>
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether th:is:ad:dr:es:mtu
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
nd6 options=1<PERFORMNUD>
media: <unknown type>
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether th:is:ad:dr:es:p2p0
media: autoselect
status: inactive
vmnet1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 00:50:56:c0:00:01
inet 192.168.48.1 netmask 0xffffff00 broadcast 192.168.48.255
vmnet8: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 00:50:56:c0:00:08
inet 192.168.219.1 netmask 0xffffff00 broadcast 192.168.219.255If you know or suspect that a hostile intruder has either had physical access to it, or has been able to log in remotely, then there are some steps you should take to make sure that the computer is safe to use.
First, depending on the circumstances, computer tampering may be a crime, a civil wrong, or both. If there's any chance that the matter will be the subject of legal action, then you should do nothing at all without consulting a lawyer or the police. The computer would be the principal evidence in such a case, and you don't want to contaminate that evidence.
Running any kind of "anti-virus" software is pointless. If I broke into a system and wanted to leave a back door, I could do it in a way that would be undetectable by those means—and I don't pretend to any special skill as a hacker. You have to assume that any intruder can do the same. Commercial keylogging software—which has legitimate as well as illegitimate uses—won't be recognized as malware, because it's not malware.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated.
Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this after the system has been secured, not before. -
How can I delete the guest network from my airport. It was not showing up until I recently upgraded the airport. It now says my name's guest network and I don't like my name showing on the available network list! I am using a Verizon wireless modem with the wireless feature off.
Open AirPort Utility, go to the Wireless tab and remove the check from the guest network check box.
-
Anyone seen strange behavior with wired guest access on WLAN Controller?
Cisco Doc ID 99470 spells out how to deploy wired guest access over wireless LAN Controllers.
That said, everything has been up and working for almost a year. Guest wireless uses anchor controller in DMZ - no issues.
Recently configured two wired ports for wired guest networking. The desktops get the correct IP address via DHCP. A wireless client (on the table right next to the wired clients) on the guest wireless gets an IP address as expected as well.
Open a continuous ping to the gateway 172.16.16.1 on all three machines.
The two desktops will ping for a few minutes and then stop for 30 seconds or longer. Wireless client will keep its connection. (you might think it would be the other way around)
I understand there is a 65,535 second inactivity timeout, but I am only sitting here for minutes, not 18 hours when this happens.
On the wired desktops, you have to bring up a browser and log back in just as you do on a wireless client ever few minutes. After debugging the client, I found a "failed to find scb" message in the output.
The other trick here is that the wired clients are miles away from where I can actually get on the CLI of the controller. This makes it difficult to run a debug and bring up a browser since I am not local to the machines when running debugs.
Has anyone ever see this behavior? Has anyone see the "failed to find scb" message?
Thanks in advance!
Succ
essfully plumbed mobile rule (ACL ID 255)
*pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef 0.0.0.0 tokenID = 5
*pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef Set bi-dir guest tunn
el for 00:25:b3:ce:cb:ef as in Export Foreign role
*pemReceiveTask: Dec 30 11:33:15.735: 00:25:b3:ce:cb:ef 0.0.0.0 Added NPU ent
ry of type 1, dtlFlags 0x4
*spamReceiveTask: Dec 30 11:34:54.569: CCKM: Send CCKM cache entry
FP08:(33207772)[cmdSendNodeInfo:3787]failed to find scb 0023.2422.c6eb
*mmListen: Dec 30 11:35:58.539: 00:25:b3:ce:cb:ef Scheduling deletion of Mobi
le Station: (callerId: 73) in 1 seconds
*mmListen: Dec 30 11:35:59.471: 00:25:b3:ce:cb:ef Scheduling deletion of MobiI found it in the document
B.1 How Logout Works
The WebGate logs a user out when it receives a URL containing "logout." (including the "."), with the exceptions of logout.gif and logout.jpg, for example, logout.html or logout.pl. When the WebGate receives a URL with this string, the value of the ObSSOCookie is set to "logout."
The Access System sets an obSSOCookie for each user or application that accesses a resource protected by a WebGate. The obSSOCookie enables users to access resources that are protected by the Access System that have the same or a lower authentication level. Removing the ObSSOcookie causes the WebGate to log the user out and requires the user to re-authenticate the next time he or she requests a resource that is protected by the Access System.
Well, I havn't got that far in the document:)
Thanks a lot for your help.
-Wei -
WRT1900AC - WPA2 on Guest Network and Setting Domain Name
I'm configuring a new WRT1900AC (version 1) and have a couple of questions. The first should be easy, on the Connectivity -> Internet Settings page on the right side under the heading Optional the Domain Name (provided via the DHCP server, Comcast in this case) is displayed, but I cannot change it. How do I set the Domain Name to reflect my local domain? The second question is a bit more daunting. I have two main wifi segments (one each on 2.4Ghz and 5Ghz) that are each secured by WPA2. They work great so far. I also have two Guest wifi segments (one each on 2.4Ghz and 5Ghz), I cannot figure out how to secure these with WPA2. You can set a passwword for each of the Guest wifi segments, and instruct users to open a web browser after connecting and enter this password, but that's not a secure connection. Please tell me there is a way to secure the Guest network via WPA2, nobody wants to use an insecure internet connection in this day and age...... -MC
That's exactly why you want the connection encrypted, so EVERYTHING you send is encrypted and not sniffable. The intended use of this Guest network is for renters at a condo resort, who will likely be doing banking and the like while on vacation. If we only provide an open/unencrypted network for them they can't (or at least shouldn't) use it. I have a Netgear R7500 in place right now, it doesn't have any of these problems (e.g. you can specify the domain name even on with a dynamic WAN IP, and all 4 network segments are WPA2 encrypted). Unfortunately, it's totally unreliable - the 4 network segments randomely disappear and stop working all the time, and the signal range is poor. I "downgraded" to this 1900AC because this router has a better reputation for stability and range (and indeed, I've been testing it for several days now and stability and range seem to be its strong points, not a single problem so far), but these firmware decisions by Linksys are forcing me to reconsider this router. -MC
-
Hi guys,
I am having a strange behavior in my environment. We are running Exchange 2010 with Outlook 2007 for client access. Some of these clients needs to access some pop3 accounts from diferent vendors.
About 2 weeks ago, we start getting error Ox800CCC13 (as described above) when users try to send email through their pop3 accounts in Outlook. This only happens to about 5 out of 100 users. I have removed the pop3 account and readded it. I was able to send
just one email out then issue was back.
Next, I tried sending out simple text message with no attachment. No luck. However, I noticed when I remove the signature (10 kb gif image) I was able to send out a few emails. However, issue is back with or without signature.
For more testing, I added Mozilla Thunderbird client for the pop3 account with no exchange account and so far no error. Emails are sending out fine. I would appreciate any insight please.Hi,
This problem may occur if the Outlook 2007 client computer does not have a default gateway configured.
For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.To
add this DWORD value yourself, follow these steps.
Outlook 2007
1.
Click Start, click Run, type regedit in the Open box, and then click OK.
2.
Locate and then click the following subkey:
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\RPC
3.
On the Edit menu, point to New, and then click DWORD Value.
4.
Type DefConnectOpts, and then press ENTER.
5.
Right-click DefConnectOpts, and then click Modify.
6.
In the Value data box, type 0, and then click OK.
7.
Exit Registry Editor.
Sincerely
Harry -
Guest network and multiple VLANs
Hello all,
I have installed a pair of 5508 controllers in our network. One controller sits inside the network and APs are configured to associate with that controller. The second controller sits on a DMZ interface off the ASA. I have a guest network configured and it works great. I would like to configure additional guest networks at remote locations. Each guest WLAN will have it's own SSID. Is it possible to map all of these to the same VLAN? Or do I need a seperate VLAN and subnet for each SSID.
ThanksScott,
Thanks for the reply. I have created different SSIDs and mapped them to the same VLAN. Everything looks good but I'm getting some strange behaviors on the new SSIDs. It appears that users don't authenticate but I've verified the credentials quite a few times. I wanted to make sure that you could map multiple SSIDs to the same VLAN before I continued troubleshooting. -
Report FP_TEST_00 - Strange behavior
Hello Gurus,
A strange behavior with report FP_TEST_00 occurs:
SA38 --> FP_TEST_00 --> select a device --> execute --> print preview then and error or popup is show:
Adobe Reader
Error initializing the font server module
Then the SAP GUI is closed, I check the ST22 and no dump is generated and in transaction SM21 only appear:
DP Q0 4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
DP Q0 I Operating system call recv failed (error no. 232 )
The #1 log entry: *
Details Page 2 Line 28 System Log: Local Analysis of sapdev 1
Time Type Nr Clt User TCode Grp N Text
11:37:20 DP Q0 4 Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
Connection to user 551 (ADMIN ), terminal 86 (HUSVP-SAP-BA) lost
Details
Recording at local and central time........................ 25.02.2010 11:37:20
Task...... Process User...... Terminal Session TCode Program Cl Problem cl Package
11092 Dispatcher K SAP Web AS Problem STSK
Further details for this message type
Module nam Line Error text.......... Caller.... Reason/cal
dpxxdisp 1223 551 ADMIN 86 HUSVP-SAP-BA DpRTmPr NiBufRe
Documentation for system log message Q0 4 :
The SAP Dispatcher (part of the application server) has lost the
connection to a terminal process. For example, this happens when the
terminal program (GUI) terminates without correctly logging off the
application server. More detailed information about the error
context is not available here.
Technical details
File Offset RecFm System log type Grp N variable message data
21 254340 m Error (Function,Module,Row) Q0 4 551 ADMIN 86 HUSVP-SAP-BA DpRTmPrNiBufRedpxxdisp1223
The #2 Log show: *
Details Page 2 Line 29 System Log: Local Analysis of sapdev 1
Time Type Nr Clt User TCode Grp N Text
11:37:20 DP Q0 I Operating system call recv failed (error no. 232 )
Operating system call recv failed (error no. 232 )
Details
Recording at local and central time........................ 25.02.2010 11:37:20
Task...... Process User...... Terminal Session TCode Program Cl Problem cl Package
11092 Dispatcher K SAP Web AS Problem STSK
Further details for this message type
Module nam Line Error text Caller.... Reason/cal
nixxi.cp 4435 recv232 NiIRead recv
Documentation for system log message Q0 I :
The specified operating system call was returned with an error.
For communication calls (receive, send, etc) often the cause of errors
are network problems.
It could also be a configuration problem at operating system level.
(file cannot be opened, no space in the file system etc.).
Additional specifications for error number 232
Name for errno number ECONNRESET
No documentation available for error ECONNRESET
Technical details
File Offset RecFm System log type Grp N variable message data
21 254520 m Error (Function,Module,Row) Q0 I recv232 NiIReadrecv nixxi.cp4435
Edited by: Hernando Polania Cadena on Feb 25, 2010 8:36 PMHello All,
I applied the solution in page
http://wiki.sdn.sap.com/wiki/display/PLM/Adobe%209%20-%20SAPGUI%20crash
Works OK
Thanks
Hernando -
Multiple guest users plus wierd behavior
Hello,
I'm having strange behavior in my afp logins - home folder house icon disappears, some users launch a file - it bounces and then it never launches, some share-points come up without mounting (only alias shows), sometimes a user takes 10 minutes to log-in, very long beachballs when opening a folder, etc. These behaviors are intermittent...
I see that in my AFP connections the following:
Name Status Address Connected Idle For
<Guest> Normal machine.name.private 04:57 00:15
<Guest> Normal machine.name.private 03:21 00:15
username Normal machine.name.private 00:15 00.00
The number of <Guest> users from the same machine varies. when I log out of the machine, the <Guest> users are still in the AFP list on the server as being logged in from that machine.
I don't know whether the behavior is related to the <Guest> issue or not, so I have the following questions: is the above status for APF normal? If not, how do I correct? If not, what else may be causing my unreliable behavior?
The server is 10.4.7 and the database is fully kerberized. Services running include: AFP DHCP, DNS, FTP, NFS, Open Directory, and Web.
Thanks,
DaveI just noticed the same behavior on a client's new dual 2ghz G5 Xserve.
The AFP process spikes the CPU near 80% or so from time to time, though the server's not swapping out too much at all. It has 2 gb of RAM.
AFP looks like it hangs out at a reasonable load most of the time, but it does show a high number of threads in use. I tried setting the maxThreads key from 200 to 300 in /Library/Preferences/com.apple.AppleFileServer.plist. My client is going to restart AFP to see if that helps at all.
Regardless, what might cause the multiple authenticated/guest logins per IP? Has anyone else seen this?
Thanks for any tips you may have. -
Strange behavior of system with enabled FileVault2, Roaming profile
Hello,
I have encountered strange behavor of my Macbook Air after some testing.
Macbook Air 2012 was newly installed with 10.8.4 and joined network account server on 10.8.4 server with Roaming profile (synced with server home directory). After installing some basic apps like iWork I turned on FileVault.
Then I start to have the strange behavior - iWorks are not displaying content of document - it seams blank - just white screen without any borders where should be at least lines in numbers or empty cells.
Another display problem is in Safari. On same pages (even default Top SItes) it`s flashing and especially when scrolling.
Did you encountered something similar? I`m not able to get rid of it.
Computers was used for some time before turining on FIle Vault and problem started to occur after this action. Disabling of FileVault didn`t helped (properly restarted between steps).
I didn`t found anything strange in Console or elsewhere..Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2. -
Remote Access VPN strange behavior
Hello all,
I have a problem with remote access VPN on a ASA5505 (8.2).
I can establish a VPN connection and can ping the ASA, but nothing else on the network! Not only ping isn't working, I've also tried RDP, HTTP, and file access.
Additionally there is a site-to-site VPN to this ASA, which is working perfectly.
I have another ASA5505 which is almost configured the same and there it's working, so I really don't know where the problem is.
I hope you guys can help me!
Many thanks in advance!
Here's my config:
Result of the command: "show running-config"
: Saved
ASA Version 8.2(1)
hostname Shanghai
domain-name *******.local
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
name 172.20.18.0 network-vpnclient
name 172.20.16.8 SHDC01
interface Vlan1
nameif inside
security-level 100
ip address 172.20.16.1 255.255.248.0
interface Vlan2
nameif outside
security-level 0
ip address ***.***.***.62 255.255.255.252
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
ftp mode passive
clock timezone SGT 8
dns domain-lookup inside
dns server-group DefaultDNS
name-server 172.20.16.1
domain-name *****.local
same-security-traffic permit inter-interface
access-list nonat extended permit ip 172.20.16.0 255.255.248.0 network-vpnclient 255.255.255.0
access-list nonat extended permit ip 172.20.16.0 255.255.248.0 172.20.0.0 255.255.248.0
access-list split_tunnel standard permit 172.20.16.0 255.255.248.0
access-list acl-in extended permit icmp any any
access-list acl-in extended permit tcp any host ***.***.***.190 eq h323
access-list VPN_acl extended permit ip 172.20.16.0 255.255.248.0 network-vpnclient 255.255.255.0
access-list outside_cryptomap extended permit ip 172.20.16.0 255.255.248.0 172.20.0.0 255.255.248.0
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
ip local pool client-vpn 172.20.18.1-172.20.18.254 mask 255.255.248.0
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 172.20.16.0 255.255.248.0
static (inside,outside) tcp interface h323 192.168.0.250 h323 netmask 255.255.255.255
access-group acl-in in interface outside
route outside 0.0.0.0 0.0.0.0 ***.***.***.61 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server ActiveDirectory protocol ldap
aaa-server ActiveDirectory (inside) host SHDC01
server-port 3268
ldap-base-dn DC=*****,DC=local
ldap-scope subtree
ldap-login-password *
ldap-login-dn CN=Administrator,CN=Users,DC=lap-laser,DC=local
server-type microsoft
aaa authentication enable console LOCAL
aaa authentication ssh console LOCAL
aaa authentication http console LOCAL
http server enable
http 172.20.0.0 255.255.248.0 inside
http 172.20.16.0 255.255.248.0 inside
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
sysopt noproxyarp inside
crypto ipsec transform-set laplaserset esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map dynmap 20 set transform-set laplaserset
crypto map laplasermap 1 match address outside_cryptomap
crypto map laplasermap 1 set pfs group5
crypto map laplasermap 1 set peer **.***.***.51
crypto map laplasermap 1 set transform-set ESP-AES-256-SHA
crypto map laplasermap 65535 ipsec-isakmp dynamic dynmap
crypto map laplasermap interface outside
crypto isakmp identity address
crypto isakmp enable outside
crypto isakmp policy 5
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
crypto isakmp policy 11
authentication pre-share
encryption aes-256
hash sha
group 5
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh timeout 5
console timeout 0
management-access inside
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd address 172.20.16.50-172.20.17.1 inside
dhcpd dns SHDC01 interface inside
dhcpd option 3 ip 172.20.16.1 interface inside
dhcpd enable inside
vpnclient vpngroup lapserver password ********
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy DfltGrpPolicy attributes
group-policy user-vpn internal
group-policy user-vpn attributes
wins-server value 172.20.16.8
dns-server value 172.20.16.8
vpn-tunnel-protocol IPSec webvpn
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split_tunnel
default-domain value *****.local
username admin password VQiqjZZuUSQOWz6. encrypted
username adminlogin password qZwgnR/XebVbOZxI encrypted
tunnel-group connection2 type ipsec-l2l
tunnel-group connection2 ipsec-attributes
pre-shared-key *
tunnel-group **.***.***.51 type ipsec-l2l
tunnel-group **.***.***.51 ipsec-attributes
pre-shared-key *
tunnel-group user-vpn type remote-access
tunnel-group user-vpn general-attributes
address-pool client-vpn
authentication-server-group ActiveDirectory
default-group-policy user-vpn
dhcp-server 172.20.16.1
tunnel-group user-vpn ipsec-attributes
pre-shared-key *
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect dns preset_dns_map
inspect http
service-policy global_policy global
prompt hostname context
Cryptochecksum:bc5e7b4ca01a2227885487ab3520ea9c
: endI note in your config that the pool of addresses for remote access VPN is a group of addresses included within the range of addresses on the inside interface. I have seen situations where this caused problems and so have a couple of suggestions:
- do the devices connected on the inside network have routes to the vpn pool of addresses?
- if you change the vpn address pool to use addresses that do not overlap with your inside network, does the behavior change?
HTH
Rick
Maybe you are looking for
-
The meaning of 'User by Activity' in t-code st03n
Hi Experts, I've searched the resources mentioned at the end of my message, and still haven't got my answer, so allow me to ask. In the below screen st03n --> Expert Mode --> Workload --> Total --> Day --> <some day> --> User tab There is certain num
-
Its urgent regarding Blob field
I have a stored proc trying to retrieve blob field(a binary file) from a View(in schema1) in oracle10g. After retrieving I am sending it to another databsase(schema2) through a dblink which is in oracle9i. I am using TOAD for this. My code is Insert
-
hello. I'm a newbie for developping iPhone app. Following is my question: When I push "direction" button which is located at the bottom of "Maps" app, a navigation bar is shown (this bar has 2 textFields). How can I custom navigationBar like this ? p
-
How to understand Workforce planning
Hi, I'm going to implement Hyperion Workforce planning 11.1.2 (out of the box). Is there any document explains workforce planning account members in a simple way. Thanks in advance.
-
Just tell us how to get rid of Firefox and return to IE
I want to un-install Firefox and return to IE. DO NOT LIKE FIREFOX! DON"T WANT TO FIX IT! I just want to get rid of it and be done with it! Do not want to have to re-format and re-install everything but if that's what it takes I will do it!