Error on sessioning into ACE module

Hi,
I am getting the below error on sessioning into ACE module in CAT 6500.
6509A#session sl 2 pr 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.21 ...
% Connection timed out; remote host not responding
Slot 2 is the ACE module. Please assist.

Ok. It is working now. The processor should be '0'. Could anyone please explain the significance of the processor # in session slot command.
Regards.

Similar Messages

Wr mem gives error on ACE module

Hi,
I am not able to save the configuration on the ACE module.
Admin# wr mem
Generating configuration....
Error in generating running config..copy aborted
"Write memory failed for context Admin"
Any help would be appriated.
Thanks
Neha

Hi Neha,
Kindly check the current system resource usage for each context by entering the #show resource usage
command .
If the resource usage percentage is high, the ACE is overloaded .
Use the copy running-config startup-config command instead of the write memory command. May be it can solve your issue for now.
Write back if it does not sovle your issue.
Sachin Garg

Ssh access into virtual context on the ACE module A(2.2)

Hello,
I tried to configure:
Admin(conf)#context test
Admin(conf-context)#ssh key rsa1 1024
but this command ssh is not supported int this newest version. How can I configure the ssh access directly into virtual context on the ACE module??
Thank you

Here's a link on how to configure it.
https://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/admin/guide/access.html#wp1049450
Hope that helps.

ACE module - end-to-end SSL

Hello,
I'm in the process of setting up an end to end SSL configuration but it doesn't work and I'm getting a bit confused at this stage.I imported a cert using the terminal (copy/paste) then I imported a key using the same method and the tftp. The TFTP failed and the terminal was displaying a message telling me there was topo many lines.
I checked with the crypto verify command and it failed telling me "Error: invalid or unsupported key".
Is there any clear documentation on how to configure an end to end SSL ?
I used the ACE ssl guide, but it is not really accurate and looks more like a reminder to me rather than a guide.
I attached the existing config to this post although it does not show the cert and key I imported to the ACE module, it gives a better understanding of what the idea is.
Did anybody came across the same issues on the first time configuring end-to-end ssl with ACE?

just don't know where to start.
I feel like you do not have the right key/cert.
This would be the very first thing to verify.
Where did you get your key and cert ?
What certificate authority signed your certificate ?
The creation of the session key requires the use of an RSA key pair (private/public).
Every server must have a public and a private key associated with a certificate signed by a certificate authority.
If you're not familiar with those concepts, configuring an SSL offloaded like ACE won't be easy.
Maybe you should start be reading on the subject from various article available on the WEB.
openssl is a great tool to generate keys and certficates.
I would suggest maybe to get this free tool and start by creating your own RSA key pair and a self signed certificate.
Then import everything into ACE.
Once you have valid key/cert we can continue with the configuration.
Gilles

Cisco ACE Module with Bluecoat Cache Proxy, Transparent and spoofing client IP

Hello Dears,
I'm trying to implement Cache loadbalancing through Cisco ACE Module.
I have 2 Bluecoat cache proxies, when i do configure transparent proxy without spoofing client IP, everything work properly, but when I enable spoofing client IP (reflect client IP address), clients are not able to access internet, although they are going to cache servers, I can see their sessions.
I'm afraid that I have a problem in the returned traffic PBR.
can anyone help please.
Thanks

Hi Ibrahim
I ahve reviewed the config. The ACE config is all god but I do see some issue with the switch side. If you are doing ip spoofing, then "match ip address" in pbr should be the client ip address. However, what you did is ip address between the ACE and MSFC. Try to configure the test client ip address into the below access-list.
msfc---vlan 265---ACE--vlan 264----CE farm
interface vlan 265
description Interface_With_MSFC_SUBS_2_INTERNET
ip address 168.168.1.52 255.255.255.248
access-group input PERMIT_ALL
service-policy input L3L4_PM
no shutdown
ip route 0.0.0.0 0.0.0.0 168.168.1.50
ip access-list extended HSDPA_2_CACHE
permit tcp 168.168.0.0 0.0.255.255 any eq www <<<-- wrong
ip access-list extended Internet_2_CACHE
permit tcp any eq www 168.168.0.0 0.0.255.255 <<<---wrong
interface Vlan 265
description Interface_With_ACE
ip address 168.168.1.50 255.255.255.248
route-map INTERNET_2_HSDPA permit 10
description "PBR for Response HTTP Traffic"
match ip address Internet_2_CACHE
set ip next-hop 168.168.1.52
route-map HSDPA_2_INTERNET permit 10
match ip address HSDPA_2_CACHE
set ip next-hop 168.168.1.52
regards
Andrew

ACE Module throughput

Hi
In the Datashhet of the ACE-Module (ACE20-MOD-K9) there is the following promise:
Throughput
16 Gbps*, 8 Gbps*, and 4 Gbps
We have a base license, so I assume we have a throughput of 4Gbps (gigabits per second).
Are these 4Gbps bidirectional or unidirectional?
Is it 2Gbps in one direction and 2Gbps in the other direction?
Imagine we have just 1 host (A) before the ACE module and just 1 host (B) behind the ACE module. Can I transfer data from A to B (unidirectional) with 4Gbps? Assume the hosts are connected with 10Gbps to the network and use multiple flows!
How can I measure the effective used bandwith on the ACE module?
What hapens, if host A tries to send data faster than 4Gbps? Does it deny single packets? Base on what? Does it deny additional sessions?
How do I know that the ACE runs at it's bandwith limitation?
Any Ideas?
Thanks
Patrik

Hi Patrik,
See my answers inline:
We have a base license, so I assume we have a throughput of 4Gbps (gigabits per second).Are these 4Gbps bidirectional or unidirectional?Is it 2Gbps in one direction and 2Gbps in the other direction?
It measures the total throughput going through the box. It includes both directions. Also take into account that, for any traffic through the ACE, the packets are seen twice (client to ACE and ACE to server), so the effective throughput is half of the licensed one.
Imagine we have just 1 host (A) before the ACE module and just 1 host (B) behind the ACE module. Can I transfer data from A to B (unidirectional) with 4Gbps? Assume the hosts are connected with 10Gbps to the network and use multiple flows!
You could get up to 2Gbps unidirectional. This traffic will go through the ACE twice, adding to the 4Gbps license
How can I measure the effective used bandwith on the ACE module?
With the "show resource usage" command
What hapens, if host A tries to send data faster than 4Gbps? Does it deny single packets? Base on what? Does it deny additional sessions?
It will drop packets that go over the bandwidth without taking into account to which connection they belong
How do I know that the ACE runs at it's bandwith limitation?
Again, "show resource usage"
Regards
Daniel

Want to know about ACE module in 6509 : load-balancing concept

Hi,
I am quite new in this field , where i need to configure and understand the concept of load-balancing through ACE.
In my existing network set-up , i have some application servers as well as some other servers where i am looking for load-balancing.
I have gone through some of the site and cisco site as well and i came across ACE module which can be installed in 6509 switch.
I have 6509 switch as well but before going for installing the ACE module I am keen to understand below things:
1) what is difference between CSM or any other product load-balancer and ACE module :
Gone through site as well , but not getting proper answer or comparison.
1) I have some of the server configured with clustering and getting one virtual IP, In this case , will ACE work ?
2) If suppose i go for configuring different IP address with all server IP :
How do i achieve it ?
3) what is Virtual IP concept in ACE because i do not have and other ACE module then why do i need virtual IP ?
4) will the load-balancing happens based on destination based or session based ?
Please share the knowledge. It would be great help for me to go ahead with ACE and configure it and understand all the application ?

Hello,
1) what is difference between CSM or any other product load-balancer and ACE module :
There are several differences but to say simply, you get higher performance and more features with ACE module/appliance comparing others.
One big difference is that with ACE seriese, you can configure multiple contexts on one box (virtual load-balancers on one box) that makes us possible to provide a virtual load-balancer to a customer. In that way, the customer can access and makes changes on only the virtual box. You can split management domain for each customers. Also using contexts, you can assign certain resources available on the hardware for each contexts according to their service contract.
ACE serise has specific hardware chip for supporting SSL termination but some others do not.
For instance, you need a CSM-S, or a CSM and a SSL module to terminate SSL.
The other thing I should mention is that our most recent product is ACE serise that means it has longer product roadmap.
Let me try clarifying your other questions.
3) what is Virtual IP concept in ACE because i do not have and other ACE module then why do i need virtual IP ?
4) will the load-balancing happens based on destination based or session based ?
I think I'd better to put 3) and 4) first.
Virtual ip address (VIP) is the address to which client accesses.
VIP is tied with a serverfarm or serverfarms, in a serverfarm one or multiple rservers can be configured.
"serverfarm" is a group of "rservers".
"rserver" means real-server that has an ip address and processes transactions.
When a client accesses to the VIP, ACE picks up a rserver according to algorithm.
If you configure a VIP that is tied with a serverfarm where only one rsever is configured, client accesses to the virtual ip address are
all forwarded to the rserver.
If you configure a VIP that is tied with a serverfarm where multiple rsevers are configured, client accesses to the virtual ip address are
balanced among those rservers.
If you configure multiple VIPs, client accesses to those VIPs are forwareded to corresponding rservers according to configuration.
1) I have some of the server configured with clustering and getting one virtual IP, In this case , will ACE work ?
ACE load-balances connections to configured rservers.
If the clustered servers are sharing one virtual ip address and you configure the virtual ip address as a rserver, all connections are
sent to the virtual ip address. That is not "load-balancing" on ACE... You need multiple rservers to which ACE load-balances connections.
2) If suppose i go for configuring different IP address with all server IP :
How do i achieve it ?
You can configure those ip addresses as rserver ip address.
Multiple rservers are tied into a group, "serverfarm".
I'm not certain about your culstered servers but I guess you can configure each ip addresses in the culster as rservers.
Then put those rservers in a serverfarm.Client accesses to a virtual ip address configured on ACE for the serverfarm.
This way connections are load-balanced among those rservers depending on load-balancing algorithm you choose.
Above is just an overveiw. ACE gives you granular control not mentioned above.
I can provide more specific information if you tell me details of what you are trying to archive with ACE.
Regards,
Kimihito.

A problem with ACL in the class-map on the ACE module

Hi all,
I configured the following on the ACE module:
object-group network test
host 192.168.1.21
host 192.168.1.22
host 192.168.1.23
object-group service port
tcp eq www
tcp eq 8080
access-list T line 8 extended permit object-group port object-group test any
I tried to configure a class-map for matching this ACL:
ACE-4710-2/Lab-OPT-11(config)# class-map match-any TEST_C
ACE-4710-2/Lab-OPT-11(config-cmap)# match access-list T
Error: Cannot associate acl having object-group ACEs in class-map.
So couldn't I configure the class-map by using ACL with object-groups involved? Is it the bug or the normal behaviour? Because the customer uses object-groups in ACLs and he has to configure ACL without object-groups for the traffic classification. It is horrible.
Thank you
Roman

Hi Roman,
I'm afraid it's the expected behavior. You cannot use an ACL with object-groups inside a class-map.
Regards
Daniel

Error while logging into server

Hi all,
     We are getting the following error while logging into portal server.
<b>Portal Runtime Error
An exception occurred while processing a request for :
iView : N/A
Component Name : N/A
com/sapportals/htmlb/AbstractCompositeComponent.
Exception id: 05:24_21/03/06_0306_7632250
See the details for the exception ID in the log file</b>
      The log file says:
The error occurred while trying to load "com.sapportals.wcm.app.controller.ControllerComposite".
            at com.sap.engine.frame.core.load.ReferencedLoader.loadClass(ReferencedLoader.java:389)
            at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:302)
            at com.sapportals.wcm.portal.component.base.ControllerComponent.getPage(ControllerComponent.java:90)
            at com.sapportals.portal.htmlb.page.PageProcessorComponent.getPage(PageProcessorComponent.java:193)
            at com.sapportals.wcm.portal.component.base.ControllerComponent.getPage(ControllerComponent.java:101)
            at com.sapportals.portal.htmlb.page.PageProcessorComponent.doOnNodeReady(PageProcessorComponent.java:62)
            at com.sapportals.portal.prt.component.AbstractPortalComponent.handleEvent(AbstractPortalComponent.java:388)
            at com.sapportals.portal.prt.pom.ComponentNode.handleEvent(ComponentNode.java:252)
            at com.sapportals.portal.prt.pom.PortalNode.fireEventOnNode(PortalNode.java:369)
            at com.sapportals.portal.prt.pom.AbstractNode.addChildNode(AbstractNode.java:340)
            at com.sapportals.portal.pb.PageBuilder.createAndAddEmbeddediView(PageBuilder.java:178)
            at com.sapportals.portal.pb.PageBuilder.createiView(PageBuilder.java:391)
            at com.sapportals.portal.pb.PageBuilder.createAndAddiViews(PageBuilder.java:234)
            at com.sapportals.portal.pb.PageBuilder.doOnNodeReady(PageBuilder.java:576)
            at com.sapportals.portal.prt.component.AbstractPortalComponent.handleEvent(AbstractPortalComponent.java:388)
            at com.sapportals.portal.pb.PageBuilder.handleEvent(PageBuilder.java:725)
            at com.sapportals.portal.prt.component.CachablePortalComponent.handleEvent(CachablePortalComponent.java:685)
            at com.sapportals.portal.prt.pom.ComponentNode.handleEvent(ComponentNode.java:252)
            at com.sapportals.portal.prt.pom.PortalNode.fireEventOnNode(PortalNode.java:369)
            at com.sapportals.portal.prt.pom.AbstractNode.addChildNode(AbstractNode.java:340)
            at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:642)
            ... 21 more
#1.5#00096BDA49250056000000230000194C00040F7F0C37AE90#1142938246828#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#Administrator#36976##PCIIB03901.cts.com_J2E_7632250#Administrator#85981ec0b8c811daa57e00096bda4925#SAPEngine_Application_Thread[impl:3]_22##0#0#Error#1#/System/Server#Java###Exception ID:04:20_21/03/06_0302_7632250
[EXCEPTION]
#1#com.sapportals.portal.prt.runtime.PortalRuntimeException: PortalRuntimeException
            at com.sapportals.portal.prt.core.PortalRequestManager.handleRequestException(PortalRequestManager.java:921)
            at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:803)
            at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
            at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)
            at java.security.AccessController.doPrivileged(Native Method)
            at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
            at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
            at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
            at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
            at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
            at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
            at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
            at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
            at java.security.AccessController.doPrivileged(Native Method)
            at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:95)
            at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:160)
Caused by: java.lang.NoClassDefFoundError: com/sapportals/htmlb/AbstractCompositeComponent
Loader Info -
ClassLoader name: [com.sapportals.portal.prt.util.ApplicationClassLoader@13cf82b]
Parent loader name: [com.sapportals.portal.prt.util.AutoClassLoader@1052dc3]
References:
   not registered!
Resources:
   D:
usr
sap
J2E
JC00
j2ee
cluster
server0
apps
sap.com
irj
servlet_jsp
irj
root
WEB-INF
portal
portalapps
com.sap.km.cm.main
lib
km.appl.controller.controller_api.jar
   D:
usr
sap
J2E
JC00
j2ee
cluster
server0
apps
sap.com
irj
servlet_jsp
irj
root
WEB-INF
portal
portalapps
com.sap.km.cm.main
lib
km.appl.docapplet.docapplet_api.jar
   D:
usr
sap
J2E
JC00
j2ee
cluster
server0
apps
sap.com
irj
servlet_jsp
irj
root
WEB-INF
portal
portalapps
com.sap.km.cm.main
lib
km.appl.servlet.base_api.jar
   D:
usr
sap
J2E
JC00
j2ee
cluster
server0
apps
sap.com
irj
servlet_jsp
irj
root
WEB-INF
portal
portalapps
com.sap.km.cm.main
lib
km.appl.servlet.webdav_api.jar
The error occurred while trying to load "com.sapportals.wdf.WdfCompositeController".
Loader Info -
ClassLoader name: [com.sapportals.portal.prt.util.ApplicationClassLoader@13cf82b]
Parent loader name: [com.sapportals.portal.prt.util.AutoClassLoader@1052dc3]
References:
   not registered!
I checked the following thread:
/thread/25951 [original link is broken]
The htmlb jar file is available in the location where it has to be.
We have been getting this error 2 or 3 times; each time we had to install the server again!!Couldn't find any other alternative.
Can someone help me in resolving this issue?
Thanks in advance.
Any help towards solving the problem will be definitely rewarded.
Regards,
M.Subathra

Hi James,
        Am not able to get u.
The jar file is already there in the path.
Now,should I rename com.sap.portal.htmlb.par.bak to com.sap.portal.htmlb.par? Please clarify.
Thanks & Regards,
M.Subathra

Error while loggin into EPMA after schema migration - 9.3.1.3 to11.1.1.3.02

Hello Everyone,
We are migrating 9.3.1.3 EPMA DB schema (having planning/hfm applications) to 11.1.1.3 EPMA. Applied the required patch - "p9535372" to target server "11.1.1.3" so now target server is 11.1.1.3.02. After patch apply, we migrate the EPMA DB Schema and execute the upgrade through Configurater. Everything goes fine and able to login into shared services and workspace but system throws an error while loging into EPMA.
Error Message -
1) loading the module 'awb.appcontainer" failed
2) Object reference not set to an instance of an object.
Raised the SR - 3-4112905501 and BUG16- Bug 12808646 with oracle support/product team, meanwhile any suggestion/advice will be of Gr8 help
We have followed the other meta-link docs in reference to this issue, but not able to resolve the issue
1071537.1
763095.1
754408.1
Thanks in Advance
Amit

Hi John,
Thanks for you reply. Do you mean the process should be as follows (i add step 4 and remove step 7)? What about migrating business rules and calcmanager, how can i migrate this?
Kind Regards
1. Backup the relational tables of the application in 9.3.1
2. Backup essbase objects (rul, otl ,csc, rep)
3. Install EPMA 11.1.2.2 in a new server, including a new sql server instance.
4. Shared Services provisioning use CSSImportExport utility to export from the 9.3.1 env and then transform to LCM format to import, or you can look at the HSSMigrate utility which is available with 11.1.2.2 (JohnGoodwin)
5. Create a new application same name of database and connection and apply a “create” --->“Create a fresh planning application on version 11 make sure the admin is the same name as your old 9.3 planning app: “If the admin of your 9.3 planning application a native user and not the default hyperion system admin (account=admin) then; Go into the database tables for the planning app and look at table HSP_USERS, store the SID value against user 50001" JohnGoodwin:
https://forums.oracle.com/forums/message.jspa?messageID=3897312
6. Stop application, shutdown services.
7. Restore all relational tables of the 9.3.1 application (step 1) in to the ne application (step 5.)
8. Start services, apply a create in the application.
9. Copy objects (step 2) except otl.
10. Export data from 9.3.1 and import data to 11.1.2.2 application.
Edited by: Pavel Moreno on Mar 4, 2013 7:08 AM
Edited by: Pavel Moreno on Mar 4, 2013 7:09 AM

Reuse of context in ACE module

Hi all, just have a question about som reuse of resources in a ACE module context. I don't want to make a new context, and can reuse most of the existing configuration in one of my context. The config is not complex and difficult, but I'm not sure if I can do this.
The primary goal is to loadbalance 2 webservers with a new vip, new serverfarm, stickygroup, policy-map and different nat-pool.
Since I haven't decided the ip addresses to be used, they are just xx in the config below.
The changes I want to implement are in bold. Will this work for me?
probe http WEBGUI_D2
description Probe for http mot webgui
interval 10
passdetect interval 10
passdetect count 1
request method get url /D2/auth/login.aspx
expect status 200 302
header User-Agent header-value "IDENTITY"
rserver host cwi003
description content server logon
ip address 10.163.22.27
inservice
rserver host cwi004
description content server logon
ip address 10.163.22.28
inservice
rserver host cwi503
description content server logon 2
ip address 10.163.22.23
inservice
rserver host cwi504
description content server logon 2
ip address 10.163.22.24
inservice
serverfarm host SF_LOGON_D2
probe WEBGUI_D2
rserver cwi003 80
   inservice
rserver cwi004 80
   inservice
serverfarm host SF_LOGON2_D2
probe WEBGUI_D2
rserver cwi503 80
   inservice
rserver cwi504 80
   inservice
sticky ip-netmask 255.255.255.255 address source STICKYGROUP1
timeout 20
replicate sticky
serverfarm SF_LOGON_D2
serverfarm SF_LOGON2_D2
class-map match-all VS_LOGON_D2
3 match virtual-address 10.163.22.13 any
class-map match-all VS_LOGON2_D2
3 match virtual-address 10.163.22.xx any
policy-map type loadbalance first-match PM_ONE_ARM_LB
class class-default
   sticky-serverfarm STICKYGROUP1
policy-map multi-match PM_ONE_ARM_MULTI_MATCH
class VS_LOGON_D2
   loadbalance vip inservice
   loadbalance policy PM_ONE_ARM_LB
   nat dynamic 5 vlan 1240
class VS_LOGON2_D2
   loadbalance vip inservice
   loadbalance policy PM_ONE_ARM_LB
   nat dynamic 6 vlan 1240
interface vlan 1240
description Client_server
ip address 10.163.22.11 255.255.255.0
peer ip address 10.163.22.12 255.255.255.0
access-group input INBOUND
nat-pool 5 10.163.22.14 10.163.22.17 netmask 255.255.255.192 pat
nat-pool 6 10.163.22.xx 10.163.22.xx netmask 255.255.255.192 pat
service-policy input PM_ONE_ARM_MULTI_MATCH
no shutdown
ip route 0.0.0.0 0.0.0.0 10.163.22.1
BR
Geir

Thanks for your reply.
Hope I understand you correct. This sould be the config I need to paste into the existing context.
rserver host cwi503
description content server logon 2
ip address 10.163.22.23
inservice
rserver host cwi504
description content server logon 2
ip address 10.163.22.24
inservice
serverfarm host SF_LOGON2_D2
probe WEBGUI_D2
rserver cwi503 80
    inservice
rserver cwi504 80
    inservice
sticky ip-netmask 255.255.255.255 address source STICKYGROUP2
   timeout 20
   replicate sticky
   serverfarm SF_LOGON2_D2
class-map match-all VS_LOGON2_D2
   3 match virtual-address 10.163.22.xx any
policy-map type loadbalance first-match PM_ONE_ARM_LB2
class class-default
    sticky-serverfarm STICKYGROUP2
policy-map multi-match PM_ONE_ARM_MULTI_MATCH
class VS_LOGON2_D2
    loadbalance vip inservice
    loadbalance policy PM_ONE_ARM_LB2
    nat dynamic 6 vlan 1240
interface vlan 1240
nat-pool 6 10.163.22.xx 10.163.22.xx netmask 255.255.255.192 pat
Br
Geir

Error: Your session has ended or timed out. Please login again. FDM error on "Export"

On logging into FDM URL, with a specific user on clicking "Export Fish" FDM Processes gives the options for load but on the other hand when we click on "Export" from the left panel(navigation). "It throws Your session has ended or timed out. Please login again." Quite anomalous behaviour ,when I try with admin this issue does not exist. In shared service this user has the access for that group with WRITE permissions.
Other relevant info:
Version: 11.1.2.3
DB: SQL Server
Project: Upgraded
User type: Intermediate
Target: HFM
Tried creating a new native user with all admin priv on the FDMApp,HFM app but the issue did not get resolved.
It is peculiar and unable to gain any pointers.
Extra Info:
On clicking the Export option on left panel. It shows Processing,please wait and logs out with error as session timeout.
Please help.
Admin Error logs. Tools -> View Error as admin user
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:44] **
ERROR:
Code............................................. 3709
Description...................................... The connection cannot be used to perform this operation. It is either closed or invalid in this context.
SELECT tPOVPartition.* From tPOVPartition Where ((PartName) = '')
Procedure........................................ clsDataAccess.farsSnap
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:44] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsSQLMgr.fPartition
Component........................................ upsWObjectsDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:44] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsPOVMgr.fCheckLocProf
Component........................................ upsWObjectsDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:44] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsSQLMgr.fMapItems
Component........................................ upsWObjectsDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:44] **
ERROR:
Code............................................. 3709
Description...................................... The connection cannot be used to perform this operation. It is either closed or invalid in this context.
SELECT tSecObjectItems.AppType, tSecObjectItems.AppObject, tSecObject_Locale.AppObjectCaption, tSecObject.AppObjectSeq, tSecObjectItems.AppObjItem, tSecObjectItems.AppObjControl, tSecObjectItems.AppObjControlType, tSecObjectItems_Locale.AppObjControlCaption, tSecObjectItems_Locale.AppObjControlToolText, tSecObjectItems.AppObjControlLevel, tSecObjectItems.AppObjControlIndex, tSecObjectItems_Locale.LangKey FROM tSecObject INNER JOIN tSecObjectItems ON tSecObject.AppObject = tSecObjectItems.AppObject AND tSecObject.AppType = tSecObjectItems.AppType INNER JOIN tSecObject_Locale ON tSecObject.AppType = tSecObject_Locale.AppType AND tSecObject.AppObject = tSecObject_Locale.AppObject INNER JOIN tSecObjectItems_Locale ON tSecObjectItems.AppType = tSecObjectItems_Locale.AppType AND tSecObjectItems.AppObject = tSecObjectItems_Locale.AppObject And tSecObjectItems.AppObjItem = tSecObjectItems_Locale.AppObjItem WHERE (((tSecObjectItems.AppType)=N'WebClient') AND ((tSecObjectItems.AppObject)=N'Maps Form') AND ((tSecObjectItems_Locale.AppObjControlCaption)<>N'-') AND ((tSecObject_Locale.LangKey)=1033) AND ((tSecObjectItems_Locale.LangKey)=1033)) ORDER BY tSecObject.AppObjectSeq, tSecObjectItems.AppObjItem
Procedure........................................ clsDataAccess.farsSnap
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:45] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsSQL.fSecItemsForObject
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:45] **
ERROR:
Code............................................. 3709
Description...................................... The connection cannot be used to perform this operation. It is either closed or invalid in this context.
SELECT tCtrlOption.* From tCtrlOption Where (((tCtrlOption.OptionKey) = N'Period')) ORDER BY tCtrlOption.OptionOrder
Procedure........................................ clsDataAccess.farsSnap
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:45] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsSQL.fOptionListForKey
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:45] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsDBTools.fGlobalOptionGet
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:26:45] **
ERROR:
Code............................................. 3709
Description...................................... Data access error.
Procedure........................................ clsDBTools.fGlobalOptionGetVA
Component........................................ upsWDataWindowDM
Version.......................................... 1112
Thread........................................... 11708
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 0
Location Seg..................................... 0
Category.........................................
Category ID...................................... 0
Period...........................................
Period ID........................................ 12:00:00 AM
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:34:01] **
ERROR:
Code............................................. 3098
Description...................................... CONNECT Action Adapter Script failed to load!
Procedure........................................ clsBlockProcessor.ActConnect
Component........................................ upsWBlockProcessorDM
Version.......................................... 1112
Thread........................................... 13632
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 770
Location Seg..................................... 41
Category......................................... Source Actual
Category ID...................................... 12
Period........................................... Oct - 2013
Period ID........................................ 10/31/2013
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False
** Begin FDM Runtime Error Log Entry [2013-11-15 10:34:01] **
ERROR:
Code............................................. 3098
Description...................................... CONNECT Action Adapter Script failed to load!
Procedure........................................ clsBlockProcessor.ActExport
Component........................................ upsWBlockProcessorDM
Version.......................................... 1112
Thread........................................... 13632
IDENTIFICATION:
User............................................. hypadmpr
Computer Name.................................... mycomputerName
App Name......................................... FDMAPP
Client App....................................... WebClient
CONNECTION:
Provider......................................... SQLOLEDB
Data Server...................................... devsql1
Database Name.................................... HYP_FDMAPP
Trusted Connect.................................. False
Connect Status.. Connection Open
GLOBALS:
Location......................................... HOME~FURNISHING-TB
Location ID...................................... 770
Location Seg..................................... 41
Category......................................... Source Actual
Category ID...................................... 12
Period........................................... Oct - 2013
Period ID........................................ 10/31/2013
POV Local........................................ False
Language......................................... 1033
User Level....................................... 1
All Partitions................................... True
Is Auditor....................................... False

Can you check the Object Security for the Analysis Menu and Export button and see if it is restricted?
Also, is this a Oracle DB? IF so, has the following 32 bit Oracle Client components been isntalled:
Oracle Objects for OLE
Oracle Data Provider for .NET
Oracle Providers for ASP.NET

[UDP fast age support for ACE Module]

Hello,
I'm testing 2 ACE modules running A3.0.0 for DNS load balancing (UDP). We're testing this by using a DNS query generator that (always) seems to use the same UDP source port when originating these queries. At the moment, the ACE module is hardly doing any load-balancing.
It looks to me like, that because of this, the ACE believes it's the same session (connection) and doesn't really load-balance, so I started looking for a solution and found the fast-age udp feature. But, it seems this is not supported on my ACE modules. Can any one offer another solution and/or look at my config and see if there is another way to achieve load balancing in a testing environment when using a tool like the one I described?
(I put it that way because i believe in real life since queries come from different IP addresses and randomized udp ports, the ACE module will be just fine).
Thanks in advance!
c.

Hi Carlos,
Correct. The 3.0(0) is really misleading. You need to start with the "A" - so you really have 1.6.3a installed.
The "show version" for V2 is slightly better -
system: Version A2(1.2) [build 3.0(0)A2(1.2)
Cathy

Ace module in bridged mode with client nat

Could someone confirm whatever a NAT is supported for ACE-20 module, please?
Let me to explain technical details.
I do need to convert working CSM(SLB) config to ACE configuration and I am not quite sure
if the configuration below is correct. ACE module should be configured in bridge mode with two
vlans - vlan 36 (client) and vlan 436 (server) - bridged with interface bvi 36.
NAT on ACE configurad as "nat dynamic 1025 vlan 436" into corresponding
"policy-map type loadbalance"
Could you check two parts of configs and advise me if the ACE config is
properly converted from CSM and will be working in the same way (especialy for NAT).
Thank you in advance.
CSM config
=======
vlan 36 client
ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0
gateway 10.36.3.1
vlan 436 server
ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0
natpool WEB-MAIL 10.36.3.100 10.36.3.100 netmask 255.255.255.0
sticky 30 netmask 255.255.255.255 address source timeout 60
probe SHAREPOINT tcp
interval 30
failed 120
open 3
port 80
probe WEBMAIL-443 tcp
interval 5
failed 60
open 2
port 443
serverfarm WEBMAIL-443
nat server
nat client WEB-MAIL
predictor leastconns
real 10.36.3.101 443
   inservice
real 10.36.3.102 443
   inservice
probe WEBMAIL-443
serverfarm WEBMAIL-80
nat server
nat client WEB-MAIL
predictor leastconns
real 10.36.3.101 80
   inservice
real 10.36.3.102 80
   inservice
probe SHAREPOINT
vserver WEBMAIL-443
virtual 10.36.3.100 tcp https
serverfarm WEBMAIL-443
sticky 60 group 30
replicate csrp sticky
replicate csrp connection
persistent rebalance
inservice
vserver WEBMAIL-80
virtual 10.36.3.100 tcp www
serverfarm WEBMAIL-80
replicate csrp connection
persistent rebalance
inservice
ACE config
=======
probe tcp WEBMAIL-443
interval 5
open 2
passdetect interval 60
port 443
probe tcp SHAREPOINT
interval 30
open 3
passdetect interval 120
port 80
serverfarm host WEBMAIL-443
predictor leastconns
probe WEBMAIL-443
rserver 10-36-3-101 443
    inservice
rserver 10-36-3-102 443
    inservice
serverfarm host WEBMAIL-80
predictor leastconns
probe SHAREPOINT
rserver 10-36-3-101 80
    inservice
rserver 10-36-3-102 80
    inservice
class-map match-all WEBMAIL-80
match virtual-address 10.36.3.100 tcp eq www
class-map match-all WEBMAIL-443
match virtual-address 10.36.3.100 tcp eq https
sticky ip-netmask 255.255.255.255 address source 30
serverfarm WEBMAIL-443
replicate sticky
timeout 60
policy-map type loadbalance first-match WEBMAIL-80
class class-default
    serverfarm WEBMAIL-80
    nat dynamic 1025 vlan 436 serverfarm primary
policy-map type loadbalance first-match WEBMAIL-443
class class-default
    sticky-serverfarm 30
    nat dynamic 1025 vlan 436 serverfarm primary
parameter-map type http HTTP_ADV_OPT
persistence-rebalance
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
interface vlan 36
bridge-group 36
service-policy input IFVLAN36-POLICY
mac-sticky enable
no shutdown
interface vlan 436
bridge-group 36
nat-pool 1025 10.36.3.100 10.36.3.100 netmask 255.255.255.0
no shutdown
interface bvi 36
ip address 10.36.3.3 255.255.255.0
peer ip address 10.36.3.4 255.255.255.0
no shutdown

Hello F.Makarenko-
You will want to use PAT while you do nat, so change the natpool configuration to this:
   nat-pool 1025 10.36.3.100 10.36.3.100 netmask 255.255.255.0 pat
You also need to apply the nat like this:
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
    nat dynamic 1025 vlan 436
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
    nat dynamic 1025 vlan 436
If you are going to build out a lot of classes, you can instead do source nat like this:
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class class-default
    nat dynamic 1025 vlan 436
Regards,
Chris Higgins

Configuring FT on ACE Modules

Hi,
I am trying to configure FT on ACE modules, with the following commands
ft interface vlan 20
ip address 172.16.20.1 255.255.255.252
peer ip address 172.16.20.2 255.255.255.252
no shutdown
ft peer 1
heartbeat interval 300
heartbeat count 10
ft-interface vlan 20
ft group 1
peer 1
priority 150
associate-context Admin
inservice
The moment I enter the command 'ft interface vlan 20', it gives a prompt that 'interface vlan20 is not associated with ft', how do I resolve this ? Do I need to enable something ?

Hi have the following config which seems to be working fine for me... check your vlan20 interface is up
ft interface vlan 212
ip address 172.31.1.221 255.255.255.252
peer ip address 172.31.1.222 255.255.255.252
no shutdown
ft peer 1
heartbeat interval 300
heartbeat count 20
ft-interface vlan 212
ft group 2
peer 1
priority 50
peer priority 150
associate-context Admin
inservice
HQ-ACE1/Admin# sh int
vlan212 is up, administratively up
Hardware type is VLAN
MAC address is 00:23:5e:25:72:f1
Mode : routed
IP address is 172.31.1.221 netmask is 255.255.255.252
FT status is standby
Description:not set
MTU: 1500 bytes
Last cleared: never
Last Changed: Tue Sep 6 12:46:06 2011
No of transitions: 1
Alias IP address not set
Peer IP address is 172.31.1.222 Peer IP netmask is 255.255.255.252
Assigned from the Supervisor, up on Supervisor
     8654909 unicast packets input, 735611030 bytes
     1151150 multicast, 161 broadcast
     0 input errors, 0 unknown, 0 ignored, 0 unicast RPF drops
     13020418 unicast packets output, 1672055521 bytes
     0 multicast, 163 broadcast
     0 output errors, 0 ignored

Error on sessioning into ACE module

Similar Messages

Maybe you are looking for