How do I use Cisco MARS to monitor two FWSMs in two Cat6500 in failover ?

Hello,
I understad that I can add both Catalysts to MARS and that I can add primary FWSM as a module to primary catalyst as well. But how can I add secondary FWSM.
Any ideas appreciated
Thanks

If you have already configured the primary, you don't have to configure the secondary. No need to configure the secondary as it is not recommended to do so, In case of a failover the secondary firewall will automatically take over the active configuration( EX: IP address) of the primary so the source of the syslogs will remain the same

Similar Messages

How do I use Cisco MARS to monitor two ASA (active/stby) with IPS modules?

Hi
The two ASA with IPS modules are in active/standby mode. When I try to add both the two IP (active/standby) into the MARS, the MARS will complain duplicated hostnames.
How to setup MARS to monitor ASA with IPS with active standby topology?
Thanks!

Hi,
The fundamental problem with this scenario is that you have non-failover capable modules in a failover chassis - think of the ASA failover pair as one device and the IPS modules as two completely separate devices.
Then, as already mentioned, add only the primary ASA. (The secondary will never be passing traffic in standby mode so it's not actually needed in MARS) Then, with the first IPS module you can add it as a module of the ASA or as a standalone device (MARS doesn't care). With the second IPS module the only option is to add it as a separate device anyway.
In a failover scenario the ASA's swap IP's but the IPS's don't so whereas you'll only ever get messages from the active ASA you'll get messages from both IPS IP's depending on which one happens to be in the active ASA at the time.
Don't forget that you have to manually replicate all IPS configuration every time you make a change.
HTH
Andrew.

HT201317 How do I use ICloud Photo stream on one computer with two differenet Apple Id's. My husband and I each have seperate ID's but one computer.

How do I use ICloud Photo stream on one computer with two differenet Apple Id's. My husband and I each have seperate ID's but one computer.

You have to have an iOS device (iPhone, iPad, iPod Touch) or Mac to create an iCloud account. However, if you tell your friend to create a shared photo stream and turn on Public Website, he/she will then be able to send you a link that will allow you to view the photos on the internet using your web browser. You would not be able to comment on the photos as this requires an iCloud account, but you would be able to view them.
You can refer your friend to this link for assistance with this: http://help.apple.com/icloud/#mmc0cd7e99.

How do I use Cisco Registered Email Service with 10.7?

I received a email via someone using Cisco Registered Email/Envelope Service. The authentication process required the latest version of JAVA for 10.7, which I downloaded and installed. When I try to logon, the screen hangs with the message "Loading Envelope Tools." If I press "open" again it states "Inactive tools." The alternate method is to open the mail via a secure Web site, which I can open, but I am unable to download attachments. To download attachments, I am directed to a page that begins with "x-msg:" and I get a message that says: "Safari can't open the address .. . because MAC OX doesn't recognize Internet Addresses starting with "x-msg:"

Thanks for the info Roger, this is indeed did work for me (at least the part about signing in on apple.com, haven't tried the rest). Since Apple does not allow for the merging of Apple IDs, my plan is to use the old me.com address (from the free trial) with iCloud but then forward all the messages from the old me.com to my current Apple ID. Problem is all my devices are already associated with iCloud. So... if I want to activate iCloud using the old me.com, how do I do it?
I have two ideas: 1) as you suggest, signing out and signing back in through the iCloud preference pane (either on Mac OS or iOS); but I'm worried this will have consequence - will I be able to sign back in to my main Apple ID account after doing this?
2) create a new user on my Mac and then sign in to iCloud with the old me.com address there, then delete the account.
Thanks for any help with this.

How to make use of AM Pool Monitor

Hi,
I get Java.lang.OutOfMemory when i run my OA application depoyed in the server.
(It works fine for 5 to 6 rounds of testing.next time when i access the page I get the error)
Oracle FAQ answer suggests to make use of AM pool Monitor.
What is this AM Pool Monitor.
How can I use it?
Thanks,
Gowtam.

Enabling AM Pool allows re-use of AM objects thus saving creation of new AMs and consuming less JVM memory.
To enable AM pooling you need to set the profile FND: Application Module Pool Enabled value to "Yes".

NPAS: How do I use Cisco ASA RADIUS attribute 146?

We have a Cisco ASA 5520 running firmware 8.4.5 and are using it for AnyConnect SSL VPN. We are using Microsoft Network Policy and Access Services (NPAS) as a RADIUS server to handle authentication requests coming from the ASA.
We have three tunnel groups configured on the ASA, and have three Active Directory security groups that correspond with each one. At this time, we are using Cisco's vendor-specific RADIUS attribute 85 (tunnel-group-lock) to send back to the ASA a string
that corresponds to a policy rule in NPAS based on the matched group membership. This works in the sense that each user can only be a member of one of the three AD security groups used for VPN, and if they pick a tunnel group in the AnyConnect client
that doesn't correspond to them, the ASA doesn't set up the session for them.
Well, Cisco added vendor-specific RADIUS attribute 146 (tunnel-group-name) in firmware 8.4.3. This is an *upstream* attribute, and is one that is sent by the ASA to the RADIUS server. We would like to use this attribute in our policies in NPAS
to help with policy matching. By doing this, we could allow people to be in more than one VPN group and select more than one of the tunnel groups in the AnyConnect client, each of which may provide different network access.
The question becomes, how can I use this upstream RADIUS attribute in my policy conditions? I tried putting it in the policy in the Vendor-Specific section under Policies (the same place where we had attribute 85 defined), but this doesn't work.
These are just downstream attributes that the NPAS server sends back to the RADIUS client (the ASA). The ASA seems to ignore attribute 146 if it is sent back in this manner and the result is that the first rule that contains a group the user is a member
of is matched and authentication is successful. This is undesirable, because it means the person could potentially select a tunnel group and successfully authenticate even though that isn't what we desire.
Here is Cisco's documentation that describes these attributes: http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/ref_extserver.html

Philippe:
Thank you for the response, but I am already aware how to use Cisco's group-lock or tunnel-group-lock with RADIUS and, in fact, we are already using tunnel-group-lock (attribute 85).
Using tunnel-group-lock works in the sense that you have three RADIUS policies and three AD security groups (one per tunnel group configured on the ASA). Each AD group basically is designed to map to a specific tunnel group. Each RADIUS policy
contains vendor-specific attribute 85 with the name of the tunnel group. So when you connect and attempt authentication through NPAS, it goes down the RADIUS policies until the conditions match (in this case the conditions are the source RADIUS client
- the ASA - and membership in a particular AD security group), it determines if your authentication attempt is successful, and if so it sends the tunnel group name back to the ASA. If the tunnel group name matches the one associated to the user group
you selected from the list in the AnyConnect client, a VPN tunnel is established. Otherwise, the ASA rejects the connection attempt.
Frankly, tunnel-group-lock works fine so long as it is only necessary for a given individual to need to connect to only a single tunnel group. If there is a need for an individual to be able to use two out of the three or all three tunnel groups in
order to gain different access, using tunnel-group-lock or group-lock won't work. This is because the behavior will be when the RADIUS server processes the policies, the first one in the list that has the AD security group that the user is a member of
will be matched and the tunnel group name associated with that policy will be sent back to the ASA every time. If that name doesn't match the one they picked, the tunnel will not be established. This will happen every time if the tunnel group is
associated with the second or third AD group they are a member of in terms of order in the NPAS policy list.
Group-lock (attribute 25) works similarly. In such a case, the result won't be a failure to connect if the user group chosen is associated with the second or third AD group in the policy list; rather, it will just always send the ASA the first group
name and the ASA will establish the session but always apply the same policy to the client rather than the desired one.
We upgraded to firmware 8.4.5 on our ASA 5520 specifically so that we could make use of attribute 146 (tunnel-group-name). Since this is an upstream attribute sent by the ASA to the RADIUS server (rather than something send by the RADIUS server
to the ASA as part of the authentication response), we were hoping to be able to use it as an additional condition in the NPAS policies. In this way, people could be members of more than one of the AD security groups related to VPN at a time. The
problem is, I just do not know how to leverage it in the NPAS policy conditions or if it is even possible.

How do I use the move tool in CS5 to put two images on to an A4 sheet?

Have recently upgraded from CS3 to CS5.
I often print out two images on A4 paper. Under CS3 I would simply adjust and crop 2 images to say 7 ins x 5 ins, after that bring up a new A4 sized sheet (file, new), then using the move tool I'd move the two separate images on to the A4 sheet and print. Fine!
Now under CS5, once I've adjusted my first image then try to bring up a second image to adjust that one I seem to lose the first one from the screen. But on going back via Bridge and clicking on the image it re-appears - problem is, I lose the second image.
When I bring up a new A4 sheet neither of the images stay on the screen and there is nothing to move.
Have been into Preferences to see if there is anything there to help but can't see anything.
Does anyone know what is happening here and what I'm doing wrong i.e. how do I get 2 separate images on to an A4 sheet?
Thanks,
Bob Eveleigh.

There have been changes since cs3, mainly that cs5 uses tabs.
Tabs can be confusing if your coming from cs3.
If your in the tabbed mode, try going to Window>Arrange>Tile.
All your open documents should be visible on the screen.
If this is the cause of your frustrations, you can read more here:
http://help.adobe.com/en_US/photoshop/cs/using/WS8599BC5C-3E44-406c-9288-C3B3BBEB5E88.html #WS6389D09B-91D5-4474-9AED-C52AE33356EB
MTSTUNER

Hi I am hoping to add my 2 TB time capsule to my existing wireless network using cisco dpq 3925 modem. I have two mbp one running Yosemite and the other os 10.7.5

I have a time capsule 2TB model 1409. I would like to connect it to my existing wireless network (using a cisco DPQ 3925 modem). I have two mac book pro one running Yosemite and the other OS 10.7.5. The best I can do is to connect the TC to the Modem via ethernet. Have one of my MBP connect to the time capsule using a ethernet cable and have the TB set to bridge mode. In this configuration, both mbp and the iPad can detect the TC but when I try to connect it to the wireless network, using the same network name and password, the light flashes amber and I cannot detect the time capsule again.

Correct..
The best I can do is to connect the TC to the Modem via ethernet.
The TC does not connect to non-apple routers by wireless.. well. It is possible but so poor a method that Apple seem to have eliminated it in the setup wizard.. I would take that as a good thing..
If you cannot use ethernet you have two choices..
Use another apple router that is plugged into the Cable modem.. eg a second hand Extreme Gen5 or the latest Express.. the Extreme is both cheaper and better.
Or you can use a set of EOP (homeplug) adapters.. but they cannot be guaranteed to work so you should buy from a place that allows returns.

How do I use Cisco Anyconnect?

I'm not sure if this is the right place for this.
My work has provided Cisco Anyconnect to access their network. I'm able to download and install successfully but once I establish the connection, then what. I'm connected but nothing seems to happen. How do I actually access my works network? Do I need to connect to a server (Using Go/Connect to a server...)?
Thanks

All Anyconnect does is connect you to you work's network. Once you've established a connection, you should have access to work resources (servers, desktops, printers) by connecting to them as you would if you were at your office.
If there are any special connection requirements to use your work resources, you would need to contact the I/T people at your workplace.

How can I use DFProfi II to monitor a Gateway ?

Hi everybody
I am a total newby to Profibus, so excuse me please, if this is a silly question:
I have a Simatic S7 400 controlling (via Profibus) a robot application on a factory floor. The profibus network also contains a gateway slave to RS-232 which communicates with a LabVIEW RT image processing system. Basically the gateway (HMS-Anybus) is nothing more than a shared memory space which can be accessed from both the Profibus- and the RS-232 side which seems to me a very simple and efficient solution.
What I would like to do in order to investigate (existing???) timing problems in the system is the following:
I have a DF-Profi II in a PXI-Rack and would like to connect this to the Profibus network and use LabVIEW to watch/log the communication between the S7 and the RS-232 over the gateway.
Is this possible? Can anybody give me a few hints how to configure the DF-Profi II? It would have to be in "master" mode, wouldn't it ??
So that would make 2 masters (S7 + DF-Profi) on the bus then?
Any little bit of information is greatly appreciated
Thanks
HU
Solved!
Go to Solution.

Hello Hurban,
in my opinion, a Multimaster Network is what you need. See also this link:
http://www.automation.siemens.com/WW/forum/guests/PostShow.aspx?PageIndex=1&PostID=160971&Language=d...
Further Information on the device you intend to use can be found on this page:
http://www.comsoft.de/de/geschaeftsbereiche/industrielle-kommunikation/produkte/profibus-produkte/ba...
Best Regards!
Moritz M.

How do I use a JProgressBar to monitor the loading of a file ?

How do I let the progress bar tell how much it has finished the reading so far ?? Thanks !!!

You can use a ProgressMonitorInputStream, which can be used much like any other input stream, e.g.:
in = new ProgressMonitorInputStream(contentPane, "Loading " + filename, new FileInputStream(filename));Look here for lots more info: http://java.sun.com/docs/books/tutorial/uiswing/components/progress.html
Hope this is helpful
Chris.

How do I use Smart Albums to show photo's from two different iphone 5 devices so all photos are not together?

Hi,
My wife and I both have the iphone 5.
I backup all our photos onto the one iphoto but she wants to be able to now see the photos she took on her iphone 5 only and not mine.
I've tried using smart albums but there is no option to pick between two of the same devices.. Is there any way I can just her iphone 5 pics to show up and ignore mine?
Thanks

Have a look here...
http://macmost.com/using-iphoto-albums-and-smart-albums-2.html

How would you use an IF or an OR to test two cells before an either/or answ

I have a Numbers worksheet, and want to check as follows:
If L8 is blank
or
If M8 is blank
Leave this cell blank
Otherwise, L8-M8
The following attempts do not work:
=OR(isblank(f8), OR(isblank(l8), “”,q8-k8)
=IF(f8&l8=””,””,q8-k8)
The Formulas and Functions guide does not seem to help me.
Has anyone successfully figured out something like this. I can do it in Excel, but am quite new to Numbers.
Thanks.

"The following attempts do not work:
=OR(isblank(f8), OR(isblank(l8), “”,q8-k8)
=IF(f8&l8=””,””,q8-k8)
The Formulas and Functions guide does not seem to help me."
Certainly less intuitive than it should be to get to a list of functions and their syntax.
Help menu > Numbers Help > search 'function'
Top hit: Adding Functions to Formulas.
Click show
Click the link to iWork Formulas and Functions help
Click Function reference.
OR is in the Listing of Logical and Informational functions.
Click OR in that list to get information on the syntax for this function.
Your first example is very close to correct:
=OR(isblank(f8), OR(isblank(l8), “”,q8-k8)
=IF(OR(isblank(f8),isblank(l8)),“”,q8-k8)
Your second is ingenious, and at first glance should work if the concatenate operator (&) produces a null result from joining two empty cells. Not something I've ever tried.
Since you want the subtraction only if both cells contain numbers, the following should also give the desired result:
IF(AND(ISNUMBER(F8),ISNUMBER(L8)),Q8-K8,"")
Regards,
Barry

Can I use my IPad to monitor 2 web cams in my children's rooms? How, and what do I need?

How can I use my IPad to monitor 2 web cams wirelessly in my children's rooms?

Search for webcam apps in the app store. Most work only with specific cameras. Check the manufacturer of yours and see if they offer an iOS app.

How do I use the High Speed Data Logger with multiple I/O devices?

I am using the High Speed Data Logger vi to read from a 16 channel A/D card (NI PCI-MIO-16E). The project may require more than 16 channels. How can I use High Speed Data Logger to read from two A/D cards? Will it be able to write the data to one file?

The High Speed Data Logger vi will not acquire and right to multiple DAQ boards at the same time without modification. LabVIEW is more than capable of doing this what you are trying to do, but you will have to modify the code.
Regards,
Anuj D.

How do I use Cisco MARS to monitor two FWSMs in two Cat6500 in failover ?

Similar Messages

Maybe you are looking for