IOS XR - ipv4 virtual address

In case when there is failover between RP on the GSR; tend to lose the ssh /
telnet session for few mintues.
is this ipv4 virtual address needs to be configured. how does it help? i have configured it but still loses my connection.
ipv4 virtual address 10.10.138.19 255.255.255.248
MgmtEth0/8/CPU0/0              unassigned      Up                    Up
MgmtEth0/9/CPU0/0              10.10..138.20  Up                    Up
Thanks.

Hello Atif,
in order to have a working virtual address both management interfaces need to have an IP address in the same IP subnet
see from one of our CRS:
sh ip int br | inc Mgmt
MgmtEth0/RP1/CPU0/0            10.85.17.50     Up                    Up     
MgmtEth0/RP0/CPU0/0            10.85.17.49     Up                    Up    
then you configure the virtual IP address in the same IP subnet
sh run | inc 10.85.17.
Building configuration...
ipv4 virtual address 10.85.17.51 255.255.255.240
10 permit ipv4 10.85.17.48 0.0.0.15 any
ipv4 address 10.85.17.49 255.255.255.240
ipv4 address 10.85.17.50 255.255.255.240
Hope to help
Giuseppe

Similar Messages

  • Need help: Unable to handle kernel paging request at virtual address; javac

    Hi
    we're working with apache tomcat under linux mandrake 10. (x86)
    when our webapp get recompiled the server stop responding
    (web server, telnet, etc... are down, but the server is pingable)
    after a hard reboot , we get this message in var/log/messages :
    Unable to handle kernel paging request at virtual address 02000064
    kernel: printing eip:
    kernel: c018e379
    kernel: *pde = 00000000
    kernel: Oops: 0000 [#1]
    kernel: CPU: 1
    kernel: EIP: 0060:[proc_pid_stat+137/928] Not tainted VLI
    kernel: EIP: 0060:[<c018e379>] Not tainted VLI
    kernel: EFLAGS: 00010286
    kernel: EIP is at proc_pid_stat+0x89/0x3a0
    kernel: eax: 00000000 ebx: 02000000 ecx: d85ac000 edx: 92960700
    kernel: esi: d11ea6f0 edi: ded440a0 ebp: cf0ddf44 esp: cf0ddee4
    kernel: ds: 007b es: 007b ss: 0068
    kernel: Process javac (pid: 2415, threadinfo=cf0dc000 task=d11ea6f0)
    kernel: Stack: c0143d5a c1259e78 00000000 c1259e78 c0343980 0000015b 00000000 cf0ddf40
    attached ther is kernel messages, pci , dmesg.
    Thanks
    Massimo TRENTO
    Apache Tomcat/4.1.30
    j2sdk1.4.2_01
    kernel 2.6.3-7mdksmp #1 SMP
    --- DMESG ---
    00100000 - 000000001f6f0000 (usable)
    BIOS-e820: 000000001f6f0000 - 000000001f6fb000 (ACPI data)
    BIOS-e820: 000000001f6fb000 - 000000001f700000 (ACPI NVS)
    BIOS-e820: 000000001f700000 - 000000001f780000 (usable)
    BIOS-e820: 000000001f780000 - 0000000020000000 (reserved)
    BIOS-e820: 00000000fec00000 - 00000000fed00400 (reserved)
    BIOS-e820: 00000000fee00000 - 00000000fef00000 (reserved)
    BIOS-e820: 00000000ffb80000 - 00000000ffc00000 (reserved)
    BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)
    503MB LOWMEM available.
    found SMP MP-table at 000f7920
    hm, page 000f7000 reserved twice.
    hm, page 000f8000 reserved twice.
    hm, page 0009f000 reserved twice.
    hm, page 000a0000 reserved twice.
    On node 0 totalpages: 128896
    DMA zone: 4096 pages, LIFO batch:1
    Normal zone: 124800 pages, LIFO batch:16
    HighMem zone: 0 pages, LIFO batch:1
    DMI present.
    ACPI: RSDP (v000 PTLTD ) @ 0x000f7980
    ACPI: RSDT (v001 PTLTD RSDT 0x00050000 LTP 0x00000000) @ 0x1f6f74ed
    ACPI: FADT (v001 FSC D156x 0x00050000 0x000f4240) @ 0x1f6f751d
    ACPI: MADT (v001 FSC      APIC 0x00050000 CSF 0x00000000) @ 0x1f6faf76
    ACPI: BOOT (v001 PTLTD $SBFTBL$ 0x00050000 LTP 0x00000001) @ 0x1f6fafd8
    ACPI: DSDT (v001 FSC D156x 0x00050000 MSFT 0x0100000e) @ 0x00000000
    ACPI: PM-Timer IO Port: 0xf008
    ACPI: Local APIC address 0xfee00000
    ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
    Processor #0 15:2 APIC version 20
    ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled)
    Processor #1 15:2 APIC version 20
    ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
    Using ACPI for processor (LAPIC) configuration information
    Intel MultiProcessor Specification v1.1
    Virtual Wire compatibility mode.
    OEM ID: Product ID: APIC at: 0xFEE00000
    I/O APIC #2 Version 32 at 0xFEC00000.
    Enabling APIC mode: Flat. Using 1 I/O APICs
    Processors: 2
    Built 1 zonelists
    Kernel command line: auto BOOT_IMAGE=linux-nonfb ro root=301 noapic devfs=mount acpi=ht resume=/dev/hda5
    Initializing CPU#0
    PID hash table entries: 2048 (order 11: 16384 bytes)
    Detected 2793.223 MHz processor.
    Using pmtmr for high-res timesource
    Console: colour VGA+ 80x25
    Memory: 504916k/515584k available (1920k kernel code, 9820k reserved, 892k data, 288k init, 0k highmem)
    Checking if this processor honours the WP bit even in supervisor mode... Ok.
    Calibrating delay loop... 5537.79 BogoMIPS
    Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
    Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
    Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
    checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
    Freeing initrd memory: 225k freed
    CPU: After generic identify, caps: bfebfbff 00000000 00000000 00000000
    CPU: After vendor identify, caps: bfebfbff 00000000 00000000 00000000
    CPU: Trace cache: 12K uops, L1 D cache: 8K
    CPU: L2 cache: 512K
    CPU: Physical Processor ID: 0
    CPU: After all inits, caps: bfebfbff 00000000 00000000 00000080
    Intel machine check architecture supported.
    Intel machine check reporting enabled on CPU#0.
    CPU#0: Intel P4/Xeon Extended MCE MSRs (12) available
    CPU#0: Thermal monitoring enabled
    Enabling fast FPU save and restore... done.
    Enabling unmasked SIMD FPU exception support... done.
    Checking 'hlt' instruction... OK.
    POSIX conformance testing by UNIFIX
    CPU0: Intel(R) Pentium(R) 4 CPU 2.80GHz stepping 09
    per-CPU timeslice cutoff: 1462.56 usecs.
    task migration cache decay timeout: 2 msecs.
    enabled ExtINT on CPU#0
    ESR value before enabling vector: 00000000
    ESR value after enabling vector: 00000000
    Booting processor 1/1 eip 3000
    Initializing CPU#1
    masked ExtINT on CPU#1
    ESR value before enabling vector: 00000000
    ESR value after enabling vector: 00000000
    Calibrating delay loop... 5570.56 BogoMIPS
    CPU: After generic identify, caps: bfebfbff 00000000 00000000 00000000
    CPU: After vendor identify, caps: bfebfbff 00000000 00000000 00000000
    CPU: Trace cache: 12K uops, L1 D cache: 8K
    CPU: L2 cache: 512K
    CPU: Physical Processor ID: 0
    CPU: After all inits, caps: bfebfbff 00000000 00000000 00000080
    Intel machine check architecture supported.
    Intel machine check reporting enabled on CPU#1.
    CPU#1: Intel P4/Xeon Extended MCE MSRs (12) available
    CPU#1: Thermal monitoring enabled
    CPU1: Intel(R) Pentium(R) 4 CPU 2.80GHz stepping 09
    Total of 2 processors activated (11108.35 BogoMIPS).
    cpu_sibling_map[0] = 1
    cpu_sibling_map[1] = 0
    Using local APIC timer interrupts.
    calibrating APIC timer ...
    ..... CPU clock speed is 2792.0645 MHz.
    ..... host bus clock speed is 199.0474 MHz.
    checking TSC synchronization across 2 CPUs: passed.
    Starting migration thread for cpu 0
    Starting migration thread for cpu 1
    Brought up 1 CPUs
    NET: Registered protocol family 16
    EISA bus registered
    PCI: PCI BIOS revision 2.10 entry at 0xfd8cb, last bus=3
    PCI: Using configuration type 1
    mtrr: v2.0 (20020519)
    ACPI: Subsystem revision 20040211
    ACPI: Interpreter disabled.
    Linux Plug and Play Support v0.97 (c) Adam Belay
    PnPBIOS: Disabled
    PCI: Probing PCI hardware
    PCI: Probing PCI hardware (bus 00)
    PCI: Ignoring BAR0-3 of IDE controller 0000:00:1f.1
    Transparent bridge - 0000:00:1e.0
    PCI: Discovered primary peer bus 01 [IRQ]
    PCI: Using IRQ router PIIX/ICH [8086/24d0] at 0000:00:1f.0
    PCI: IRQ 0 for device 0000:00:1f.1 doesn't match PIRQ mask - try pci=usepirqmask
    PCI: Found IRQ 10 for device 0000:00:1f.1
    PCI: Sharing IRQ 10 with 0000:00:1d.2
    PCI: Sharing IRQ 10 with 0000:00:1f.2
    PCI: Sharing IRQ 10 with 0000:02:01.0
    SBF: Simple Boot Flag extension found and enabled.
    SBF: Setting boot flags 0x1
    apm: BIOS version 1.2 Flags 0x03 (Driver version 1.16ac)
    apm: disabled - APM is not SMP safe.
    Starting balanced_irq
    ikconfig 0.7 with /proc/config*
    VFS: Disk quotas dquot_6.5.1
    devfs: 2004-01-31 Richard Gooch ([email protected])
    devfs: boot_options: 0x1
    Initializing Cryptographic API
    isapnp: Scanning for PnP cards...
    isapnp: No Plug & Play device found
    pty: 1024 Unix98 ptys configured
    Serial: 8250/16550 driver $Revision: 1.90 $ 8 ports, IRQ sharing enabled
    ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
    ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
    RAMDISK driver initialized: 16 RAM disks of 32000K size 1024 blocksize
    Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
    ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
    ICH5: IDE controller at PCI slot 0000:00:1f.1
    PCI: Found IRQ 10 for device 0000:00:1f.1
    PCI: Sharing IRQ 10 with 0000:00:1d.2
    PCI: Sharing IRQ 10 with 0000:00:1f.2
    PCI: Sharing IRQ 10 with 0000:02:01.0
    ICH5: chipset revision 2
    ICH5: not 100% native mode: will probe irqs later
    ide0: BM-DMA at 0x3000-0x3007, BIOS settings: hda:DMA, hdb:pio
    ide1: BM-DMA at 0x3008-0x300f, BIOS settings: hdc:DMA, hdd:pio
    hda: WDC WD800LB-07DNA2, ATA DISK drive
    Using anticipatory io scheduler
    ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
    hdc: LITE-ON COMBO LTC-48161H, ATAPI CD/DVD-ROM drive
    ide1 at 0x170-0x177,0x376 on irq 15
    ICH5-SATA: IDE controller at PCI slot 0000:00:1f.2
    PCI: Found IRQ 10 for device 0000:00:1f.2
    PCI: Sharing IRQ 10 with 0000:00:1d.2
    PCI: Sharing IRQ 10 with 0000:00:1f.1
    PCI: Sharing IRQ 10 with 0000:02:01.0
    ICH5-SATA: chipset revision 2
    ICH5-SATA: 100% native mode on irq 10
    ide2: BM-DMA at 0x3010-0x3017, BIOS settings: hde:pio, hdf:pio
    ide3: BM-DMA at 0x3018-0x301f, BIOS settings: hdg:pio, hdh:pio
    hda: max request size: 1024KiB
    hda: 156301488 sectors (80026 MB) w/2048KiB Cache, CHS=16383/255/63, UDMA(100)
    /dev/ide/host0/bus0/target0/lun0: p1 p2 < p5 p6 >
    mice: PS/2 mouse device common for all mice
    serio: i8042 AUX port at 0x60,0x64 irq 12
    input: ImPS/2 Generic Wheel Mouse on isa0060/serio1
    serio: i8042 KBD port at 0x60,0x64 irq 1
    input: AT Translated Set 2 keyboard on isa0060/serio0
    md: md driver 0.90.0 MAX_MD_DEVS=256, MD_SB_DISKS=27
    EISA: Probing bus 0 at eisa0
    NET: Registered protocol family 2
    IP: routing cache hash table of 4096 buckets, 32Kbytes
    TCP: Hash tables configured (established 32768 bind 32768)
    NET: Registered protocol family 1
    BIOS EDD facility v0.13 2004-Mar-09, 1 devices found
    Please report your BIOS at http://linux.dell.com/edd/results.html
    PM: Reading pmdisk image.
    PM: Resume from disk failed.
    md: Autodetecting RAID arrays.
    md: autorun ...
    md: ... autorun DONE.
    RAMDISK: Compressed image found at block 0
    VFS: Mounted root (ext2 filesystem).
    Mounted devfs on /dev
    SCSI subsystem initialized
    libata version 1.00 loaded.
    EXT3-fs: INFO: recovery required on readonly filesystem.
    EXT3-fs: write access will be enabled during recovery.
    kjournald starting. Commit interval 5 seconds
    EXT3-fs: hda1: orphan cleanup on readonly fs
    ext3_orphan_cleanup: deleting unreferenced inode 1038473
    ext3_orphan_cleanup: deleting unreferenced inode 1038472
    ext3_orphan_cleanup: deleting unreferenced inode 1038471
    ext3_orphan_cleanup: deleting unreferenced inode 1038470
    ext3_orphan_cleanup: deleting unreferenced inode 1038469
    ext3_orphan_cleanup: deleting unreferenced inode 1038467
    ext3_orphan_cleanup: deleting unreferenced inode 1038466
    ext3_orphan_cleanup: deleting unreferenced inode 1038464
    ext3_orphan_cleanup: deleting unreferenced inode 1038463
    ext3_orphan_cleanup: deleting unreferenced inode 1038462
    ext3_orphan_cleanup: deleting unreferenced inode 1038461
    ext3_orphan_cleanup: deleting unreferenced inode 1038460
    ext3_orphan_cleanup: deleting unreferenced inode 1038459
    ext3_orphan_cleanup: deleting unreferenced inode 1038458
    ext3_orphan_cleanup: deleting unreferenced inode 1038457
    ext3_orphan_cleanup: deleting unreferenced inode 1038456
    ext3_orphan_cleanup: deleting unreferenced inode 1038455
    ext3_orphan_cleanup: deleting unreferenced inode 1038454
    ext3_orphan_cleanup: deleting unreferenced inode 973782
    EXT3-fs: hda1: 19 orphan inodes deleted
    EXT3-fs: recovery complete.
    EXT3-fs: mounted filesystem with ordered data mode.
    Mounted devfs on /dev
    Freeing unused kernel memory: 288k freed
    Real Time Clock Driver v1.12
    drivers/usb/core/usb.c: registered new driver usbfs
    drivers/usb/core/usb.c: registered new driver hub
    drivers/usb/host/uhci-hcd.c: USB Universal Host Controller Interface driver v2.1
    PCI: Found IRQ 9 for device 0000:00:1d.0
    PCI: Sharing IRQ 9 with 0000:00:02.0
    PCI: Sharing IRQ 9 with 0000:00:1d.3
    uhci_hcd 0000:00:1d.0: UHCI Host Controller
    PCI: Setting latency timer of device 0000:00:1d.0 to 64
    uhci_hcd 0000:00:1d.0: irq 9, io base 00001400
    uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
    hub 1-0:1.0: USB hub found
    hub 1-0:1.0: 2 ports detected
    PCI: Found IRQ 11 for device 0000:00:1d.1
    uhci_hcd 0000:00:1d.1: UHCI Host Controller
    PCI: Setting latency timer of device 0000:00:1d.1 to 64
    uhci_hcd 0000:00:1d.1: irq 11, io base 00001800
    uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 2
    hub 2-0:1.0: USB hub found
    hub 2-0:1.0: 2 ports detected
    PCI: Found IRQ 10 for device 0000:00:1d.2
    PCI: Sharing IRQ 10 with 0000:00:1f.1
    PCI: Sharing IRQ 10 with 0000:00:1f.2
    PCI: Sharing IRQ 10 with 0000:02:01.0
    uhci_hcd 0000:00:1d.2: UHCI Host Controller
    PCI: Setting latency timer of device 0000:00:1d.2 to 64
    uhci_hcd 0000:00:1d.2: irq 10, io base 00001c00
    uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 3
    hub 3-0:1.0: USB hub found
    hub 3-0:1.0: 2 ports detected
    PCI: Found IRQ 9 for device 0000:00:1d.3
    PCI: Sharing IRQ 9 with 0000:00:02.0
    PCI: Sharing IRQ 9 with 0000:00:1d.0
    uhci_hcd 0000:00:1d.3: UHCI Host Controller
    PCI: Setting latency timer of device 0000:00:1d.3 to 64
    uhci_hcd 0000:00:1d.3: irq 9, io base 00002000
    uhci_hcd 0000:00:1d.3: new USB bus registered, assigned bus number 4
    hub 4-0:1.0: USB hub found
    hub 4-0:1.0: 2 ports detected
    PCI: Found IRQ 9 for device 0000:00:1d.7
    ehci_hcd 0000:00:1d.7: EHCI Host Controller
    PCI: Setting latency timer of device 0000:00:1d.7 to 64
    ehci_hcd 0000:00:1d.7: irq 9, pci mem e0004000
    ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 5
    PCI: cache line size of 128 is not supported by device 0000:00:1d.7
    ehci_hcd 0000:00:1d.7: USB 2.0 enabled, EHCI 1.00, driver 2003-Dec-29
    hub 5-0:1.0: USB hub found
    hub 5-0:1.0: 8 ports detected
    EXT3 FS on hda1, internal journal
    Adding 522072k swap on /dev/hda5. Priority:-1 extents:1
    Linux agpgart interface v0.100 (c) Dave Jones
    agpgart: Detected an Intel 865 Chipset.
    agpgart: Maximum main memory to use for agp memory: 431M
    agpgart: Detected 8060K stolen memory.
    agpgart: AGP aperture is 128M @ 0xf0000000
    Supermount version 2.0.4 for kernel 2.6
    kjournald starting. Commit interval 5 seconds
    EXT3 FS on hda6, internal journal
    EXT3-fs: mounted filesystem with ordered data mode.
    Intel(R) PRO/1000 Network Driver - version 5.2.30.1-k2
    Copyright (c) 1999-2004 Intel Corporation.
    PCI: Found IRQ 10 for device 0000:02:01.0
    PCI: Sharing IRQ 10 with 0000:00:1d.2
    PCI: Sharing IRQ 10 with 0000:00:1f.1
    PCI: Sharing IRQ 10 with 0000:00:1f.2
    PCI: Setting latency timer of device 0000:02:01.0 to 64
    eth0: Intel(R) PRO/1000 Network Connection
    inserting floppy driver for 2.6.3-7mdksmp
    Floppy drive(s): fd0 is 1.44M
    FDC 0 is a post-1991 82077
    hdc: ATAPI 48X DVD-ROM CD-R/RW CD-MRW drive, 2048kB Cache, UDMA(33)
    Uniform CD-ROM driver Revision: 3.20
    ide-floppy driver 0.99.newide
    drivers/usb/core/usb.c: registered new driver hiddev
    drivers/usb/core/usb.c: registered new driver hid
    drivers/usb/input/hid-core.c: v2.0:USB HID core driver
    NET: Registered protocol family 17
    e1000: eth0 NIC Link is Up 100 Mbps Half Duplex
    PCI: Found IRQ 5 for device 0000:00:1f.5
    PCI: Sharing IRQ 5 with 0000:00:1f.3
    PCI: Setting latency timer of device 0000:00:1f.5 to 64
    intel8x0_measure_ac97_clock: measured 49851 usecs
    intel8x0: clocking to 48000
    NET: Registered protocol family 10
    Disabled Privacy Extensions on device c037da00(lo)
    IPv6 over IPv4 tunneling driver
    Installing knfsd (copyright (C) 1996 [email protected]).
    atkbd.c: Unknown key released (translated set 2, code 0x7a on isa0060/serio0).
    atkbd.c: This is an XFree86 bug. It shouldn't access hardware directly.
    atkbd.c: Unknown key released (translated set 2, code 0x7a on isa0060/serio0).
    atkbd.c: This is an XFree86 bug. It shouldn't access hardware directly.
    eth0: no IPv6 routers present
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    printk: 24045 messages suppressed.
    Neighbour table overflow.
    printk: 24276 messages suppressed.
    Neighbour table overflow.
    printk: 16555 messages suppressed.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    printk: 24221 messages suppressed.
    Neighbour table overflow.
    printk: 24272 messages suppressed.
    Neighbour table overflow.
    printk: 15931 messages suppressed.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    Neighbour table overflow.
    printk: 24289 messages suppressed.
    Neighbour table overflow.
    printk: 21235 messages suppressed.
    Neighbour table overflow.
    ---- LSPCI ---
    00:00.0 Host bridge: Intel Corp. 82865G/PE/P Processor to I/O Controller (rev 02)
    00:02.0 VGA compatible controller: Intel Corp. 82865G Integrated Graphics Device (rev 02)
    00:03.0 PCI bridge: Intel Corp. 82865G/PE/P Processor to PCI to CSA Bridge (rev 02)
    00:1d.0 USB Controller: Intel Corp. 82801EB USB (rev 02)
    00:1d.1 USB Controller: Intel Corp. 82801EB USB (rev 02)
    00:1d.2 USB Controller: Intel Corp. 82801EB USB (rev 02)
    00:1d.3 USB Controller: Intel Corp. 82801EB USB (rev 02)
    00:1d.7 USB Controller: Intel Corp. 82801EB USB2 (rev 02)
    00:1e.0 PCI bridge: Intel Corp. 82801BA/CA/DB/EB PCI Bridge (rev c2)
    00:1f.0 ISA bridge: Intel Corp. 82801EB LPC Interface Controller (rev 02)
    00:1f.1 IDE interface: Intel Corp. 82801EB Ultra ATA Storage Controller (rev 02)
    00:1f.2 IDE interface: Intel Corp. 82801EB Ultra ATA Storage Controller (rev 02)
    00:1f.3 SMBus: Intel Corp. 82801EB SMBus Controller (rev 02)
    00:1f.5 Multimedia audio controller: Intel Corp. 82801EB AC'97 Audio Controller (rev 02)
    02:01.0 Ethernet controller: Intel Corp.: Unknown device 1019
    -- LSMOD --
    Module Size Used by
    nfsd 175840 8
    exportfs 7552 1 nfsd
    md5 4864 1
    ipv6 251392 29
    snd-seq-oss 33568 0
    snd-seq-midi-event 8704 1 snd-seq-oss
    snd-seq 55696 4 snd-seq-oss,snd-seq-midi-event
    snd-pcm-oss 53316 0
    snd-mixer-oss 19008 1 snd-pcm-oss
    snd-intel8x0 34440 0
    snd-ac97-codec 59588 1 snd-intel8x0
    snd-pcm 97440 2 snd-pcm-oss,snd-intel8x0
    snd-timer 26660 2 snd-seq,snd-pcm
    gameport 5664 1 snd-intel8x0
    snd-page-alloc 12996 2 snd-intel8x0,snd-pcm
    snd-mpu401-uart 8320 1 snd-intel8x0
    snd-rawmidi 25248 1 snd-mpu401-uart
    snd-seq-device 9032 3 snd-seq-oss,snd-seq,snd-rawmidi
    snd 55492 12 snd-seq-oss,snd-seq-midi-event,snd-seq,snd-pcm-oss,snd-mixer-oss,snd-intel8x0,snd-ac97-codec,snd-pcm,snd-timer,snd-mpu401-uart,snd-rawmidi,snd-seq-device
    soundcore 10560 1 snd
    af_packet 22632 0
    hid 55360 0
    raw 8640 1
    ide-floppy 19776 0
    ide-tape 36752 0
    ide-cd 41764 0
    cdrom 38272 1 ide-cd
    floppy 61620 0
    e1000 83460 0
    supermount 39856 1
    intel-agp 18364 1
    agpgart 32460 2 intel-agp
    ehci-hcd 25572 0
    uhci-hcd 31856 0
    usbcore 103228 5 hid,ehci-hcd,uhci-hcd
    rtc 13640 0
    ext3 114216 2
    jbd 61976 1 ext3
    sd_mod 17696 0
    ata_piix 8836 0
    libata 40256 1 ata_piix,[permanent]
    scsi_mod 117104 2 sd_mod,libata
    ----- /var/log/kernel/warnings -------
    Oct 5 10:16:47 nsilaslin02 kernel: printing eip:
    Oct 5 10:16:47 nsilaslin02 kernel: c018e379
    Oct 5 10:16:47 nsilaslin02 kernel: Oops: 0000 [#1]
    Oct 5 10:16:47 nsilaslin02 kernel: CPU: 1
    Oct 5 10:16:47 nsilaslin02 kernel: EIP: 0060:[proc_pid_stat+137/928] Not tainted VLI
    Oct 5 10:16:47 nsilaslin02 kernel: EIP: 0060:[<c018e379>] Not tainted VLI
    Oct 5 10:16:47 nsilaslin02 kernel: EFLAGS: 00010286
    Oct 5 10:16:47 nsilaslin02 kernel: EIP is at proc_pid_stat+0x89/0x3a0
    Oct 5 10:16:47 nsilaslin02 kernel: eax: 00000000 ebx: 02000000 ecx: d85ac000 edx: 92960700
    Oct 5 10:16:47 nsilaslin02 kernel: esi: d11ea6f0 edi: ded440a0 ebp: cf0ddf44 esp: cf0ddee4
    Oct 5 10:16:47 nsilaslin02 kernel: ds: 007b es: 007b ss: 0068
    Oct 5 10:16:47 nsilaslin02 kernel: Process javac (pid: 2415, threadinfo=cf0dc000 task=d11ea6f0)
    Oct 5 10:16:47 nsilaslin02 kernel: Stack: c0143d5a c1259e78 00000000 c1259e78 c0343980 0000015b 00000000 cf0ddf40
    Oct 5 10:16:47 nsilaslin02 kernel: 52143e93 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    Oct 5 10:16:47 nsilaslin02 kernel: 00000000 00000000 000000d0 00001000 000000d0 d11ea6f0 00000400 de64f060
    Oct 5 10:16:47 nsilaslin02 kernel: Call Trace:
    Oct 5 10:16:47 nsilaslin02 kernel: [buffered_rmqueue+234/400] buffered_rmqueue+0xea/0x190
    Oct 5 10:16:47 nsilaslin02 kernel: [<c0143d5a>] buffered_rmqueue+0xea/0x190
    Oct 5 10:16:47 nsilaslin02 kernel: [proc_info_read+75/320] proc_info_read+0x4b/0x140
    Oct 5 10:16:47 nsilaslin02 kernel: [<c018b60b>] proc_info_read+0x4b/0x140
    Oct 5 10:16:47 nsilaslin02 kernel: [vfs_read+142/224] vfs_read+0x8e/0xe0
    Oct 5 10:16:47 nsilaslin02 kernel: [<c015bf2e>] vfs_read+0x8e/0xe0
    Oct 5 10:16:47 nsilaslin02 kernel: [sys_read+46/80] sys_read+0x2e/0x50
    Oct 5 10:16:47 nsilaslin02 kernel: [<c015c14e>] sys_read+0x2e/0x50
    Oct 5 10:16:47 nsilaslin02 kernel: [sysenter_past_esp+82/121] sysenter_past_esp+0x52/0x79
    Oct 5 10:16:47 nsilaslin02 kernel: [<c010b1b9>] sysenter_past_esp+0x52/0x79
    Oct 5 10:16:47 nsilaslin02 kernel:
    Oct 5 10:16:47 nsilaslin02 kernel: Code: 00 00 8b 7e 68 85 ff 74 09 57 e8 b3 5f f9 ff 59 89 c7 8b 8e 24 03 00 00 85 c9 74 38 8b 81 98 00 00 00 89 45 c8 8b 59 04 8b 51 08 <0f> bf 43 64 0f bf 5b 66 c1 e0 14 09 d8 01 d0 89 c1 c1 e9 14 0f
    Oct 5 10:30:32 nsilaslin02 kernel: Linux version 2.6.3-7mdksmp ([email protected]) (gcc version 3.3.2 (Mandrake Linux 10.0 3.3.2-6mdk)) #1 SMP Wed Mar 17 14:24:28 CET 2004
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 0000000000000000 - 000000000009f800 (usable)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 00000000000e0000 - 0000000000100000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 0000000000100000 - 000000001f6f0000 (usable)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 000000001f6f0000 - 000000001f6fb000 (ACPI data)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 000000001f6fb000 - 000000001f700000 (ACPI NVS)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 000000001f700000 - 000000001f780000 (usable)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 000000001f780000 - 0000000020000000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 00000000fec00000 - 00000000fed00400 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 00000000fee00000 - 00000000fef00000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 00000000ffb80000 - 00000000ffc00000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: BIOS-e820: 00000000fff00000 - 0000000100000000 (reserved)
    Oct 5 10:30:32 nsilaslin02 kernel: hm, page 000f7000 reserved twice.
    Oct 5 10:30:32 nsilaslin02 kernel: hm, page 000f8000 reserved twice.
    Oct 5 10:30:32 nsilaslin02 kernel: hm, page 0009f000 reserved twice.
    Oct 5 10:30:32 nsilaslin02 kernel: hm, page 000a0000 reserved twice.
    Oct 5 10:30:32 nsilaslin02 kernel: On node 0 totalpages: 128896
    Oct 5 10:30:32 nsilaslin02 kernel: DMA zone: 4096 pages, LIFO batch:1
    Oct 5 10:30:32 nsilaslin02 kernel: Normal zone: 124800 pages, LIFO batch:16
    Oct 5 10:30:32 nsilaslin02 kernel: HighMem zone: 0 pages, LIFO batch:1
    Oct 5 10:30:33 nsilaslin02 kernel: Processor #0 15:2 APIC version 20
    Oct 5 10:30:33 nsilaslin02 kernel: Processor #1 15:2 APIC version 20
    Oct 5 10:30:33 nsilaslin02 kernel: Enabling APIC mode: Flat. Using 1 I/O APICs
    Oct 5 10:30:33 nsilaslin02 kernel: Built 1 zonelists
    Oct 5 10:30:33 nsilaslin02 kernel: Kernel command line: auto BOOT_IMAGE=linux-nonfb ro root=301 noapic devfs=mount acpi=ht resume=/dev/hda5
    Oct 5 10:30:33 nsilaslin02 kernel: PID hash table entries: 2048 (order 11: 16384 bytes)
    Oct 5 10:30:33 nsilaslin02 kernel: Detected 2793.223 MHz processor.
    Oct 5 10:30:33 nsilaslin02 kernel: Console: colour VGA+ 80x25
    Oct 5 10:30:33 nsilaslin02 kernel: Checking if this processor honours the WP bit even in supervisor mode... Ok.
    Oct 5 10:30:33 nsilaslin02 kernel: Calibrating delay loop... 5537.79 BogoMIPS
    Oct 5 10:30:33 nsilaslin02 kernel: Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
    Oct 5 10:30:33 nsilaslin02 kernel: Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
    Oct 5 10:30:33 nsilaslin02 kernel: POSIX conformance testing by UNIFIX
    Oct 5 10:30:33 nsilaslin02 kernel: CPU0: Intel(R) Pentium(R) 4 CPU 2.80GHz stepping 09
    Oct 5 10:30:33 nsilaslin02 kernel: per-CPU timeslice cutoff: 1462.56 usecs.
    Oct 5 10:30:33 nsilaslin02 kernel: task migration cache decay timeout: 2 msecs.
    Oct 5 10:30:33 nsilaslin02 kernel: enabled ExtINT on CPU#0
    Oct 5 10:30:33 nsilaslin02 kernel: ESR value before enabling vector: 00000000
    Oct 5 10:30:33 nsilaslin02 kernel: ESR value after enabling vector: 00000000
    Oct 5 10:30:33 nsilaslin02 kernel: Booting processor 1/1 eip 3000
    Oct 5 10:30:33 nsilaslin02 kernel: masked ExtINT on CPU#1
    Oct 5 10:30:33 nsilaslin02 kernel: ESR value before enabling vector: 00000000
    Oct 5 10:30:33 nsilaslin02 kernel: ESR value after enabling vector: 00000000
    Oct 5 10:30:33 nsilaslin02 kernel: Calibrating delay loop... 5570.56 BogoMIPS
    Oct 5 10:30:33 nsilaslin02 kernel: CPU1: Intel(R) Pentium(R) 4 CPU 2.80GHz stepping 09
    Oct 5 10:30:33 nsilaslin02 kernel: cpu_sibling_map[0] = 1
    Oct 5 10:30:33 nsilaslin02 kernel: cpu_sibling_map[1] = 0
    Oct 5 10:30:33 nsilaslin02 kernel: Using local APIC timer interrupts.
    Oct 5 10:30:33 nsilaslin02 kernel: calibrating APIC timer ...
    Oct 5 10:30:33 nsilaslin02 kernel: ..... CPU clock speed is 2792.0645 MHz.
    Oct 5 10:30:33 nsilaslin02 kernel: ..... host bus clock speed is 199.0474 MHz.
    Oct 5 10:30:33 nsilaslin02 kernel: checking TSC synchronization across 2 CPUs: passed.
    Oct 5 10:30:33 nsilaslin02 kernel: Starting migration thread for cpu 0
    Oct 5 10:30:33 nsilaslin02 kernel: Starting migration thread for cpu 1
    Oct 5 10:30:33 nsilaslin02 kernel: Brought up 1 CPUs
    Oct 5 10:30:33 nsilaslin02 kernel: PCI: Probing PCI hardware
    Oct 5 10:30:33 nsilaslin02 kernel: PCI: Probing PCI hardware (bus 00)
    Oct 5 10:30:33 nsilaslin02 kernel: Transparent bridge - 0000:00:1e.0
    Oct 5 10:30:33 nsilaslin02 kernel: PCI: IRQ 0 for device 0000:00:1f.1 doesn't match PIRQ mask - try pci=usepirqmask
    Oct 5 10:30:33 nsilaslin02 kernel: pty: 1024 Unix98 ptys configured
    Oct 5 10:30:33 nsilaslin02 kernel: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
    Oct 5 10:30:33 nsilaslin02 kernel: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
    Oct 5 10:30:33 nsilaslin02 kernel: RAMDISK driver initialized: 16 RAM disks of 32000K size 1024 blocksize
    Oct 5 10:30:33 nsilaslin02 kernel: hda: WDC WD800LB-07DNA2, ATA DISK drive
    Oct 5 10:30:33 nsilaslin02 kernel: Using anticipatory io scheduler
    Oct 5 10:30:33 nsilaslin02 kernel: ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
    Oct 5 10:30:33 nsilaslin02 kernel: hdc: LITE-ON COMBO LTC-48161H, ATAPI CD/DVD-ROM drive
    Oct 5 10:30:33 nsilaslin02 kernel: ide1 at 0x170-0x177,0x376 on irq 15
    Oct 5 10:30:33 nsilaslin02 kernel: hda: max request size: 1024KiB
    Oct 5 10:30:33 nsilaslin02 kernel: VFS: Mounted root (ext2 filesystem).
    Oct 5 10:30:33 nsilaslin02 kernel: PCI: cache line size of 128 is not supported by device 0000:00:1d.7
    Oct 5 10:30:33 nsilaslin02 kernel: hdc: ATAPI 48X DVD-ROM CD-R/RW CD-MRW drive, 2048kB Cache, UDMA(33)
    Oct 5 10:30:33 nsilaslin02 kernel: ide-floppy driver 0.99.newide
    Oct 5 10:30:39 nsilaslin02 kernel: atkbd.c: Unknown key released (translated set 2, code 0x7a on isa0060/serio0).
    Oct 5 10:30:39 nsilaslin02 kernel: atkbd.c: This is an XFree86 bug. It shouldn't access hardware directly.
    Oct 5 10:30:39 nsilaslin02 kernel: atkbd.c: Unknown key released (translated set 2, code 0x7a on isa0060/serio0).
    Oct 5 10:30:39 nsilaslin02 kernel: atkbd.c: This is an XFree86 bug. It shouldn't access hardware directly.
    Oct 5 10:30:50 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:30:50 nsilaslin02 last message repeated 9 times
    Oct 5 10:30:55 nsilaslin02 kernel: printk: 24045 messages suppressed.
    Oct 5 10:30:55 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:31:00 nsilaslin02 kernel: printk: 24276 messages suppressed.
    Oct 5 10:31:00 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:36:06 nsilaslin02 kernel: printk: 16555 messages suppressed.
    Oct 5 10:36:06 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:36:06 nsilaslin02 last message repeated 9 times
    Oct 5 10:36:11 nsilaslin02 kernel: printk: 24221 messages suppressed.
    Oct 5 10:36:11 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:36:16 nsilaslin02 kernel: printk: 24272 messages suppressed.
    Oct 5 10:36:16 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:46:22 nsilaslin02 kernel: printk: 15931 messages suppressed.
    Oct 5 10:46:22 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:46:22 nsilaslin02 last message repeated 9 times
    Oct 5 10:46:27 nsilaslin02 kernel: printk: 24289 messages suppressed.
    Oct 5 10:46:27 nsilaslin02 kernel: Neighbour table overflow.
    Oct 5 10:46:32 nsilaslin02 kernel: printk: 21235 messages suppressed.
    Oct 5 10:46:32 nsilaslin02 kernel: Neighbour table overflow.

    Java programs are run by a virtual machine which is running in userland. They don't "mess" with the kernel.
    OTOH, each userland program interacts with the kernel through system calls, signals, pageing activity, ...
    My guess is that it's either broken hardware, or a fault in the linux kernel.
    Is the crash reproducible? Does ist always crash with the same error message, at the same "eip" location?
    If the crashes are sporadic and non deterministic, with different error messages each time, then I'd say it's
    a hardware problem. Otherwise, it could be a linux kernel software problem.

  • Can we assign IPv4 IP address pool to IPv6 VPN Client

    We are planning to enable IPv6 SSL VPN clients, Let me explain the current setup
    We have Cisco ASA firewall used for SSL VPN and Cisco ACS for user authentication and RSA for two factor authentication.
    LAN Server are in IPv4 only..
    Requirement :
    Client (IPv6) --- Cloud (IPv6) ---- Outsite(IPv6) -Cisco ASA - Inside(IPv4) ----- ACS (IPv4) & RSA (IPv4)
    Client with IPv6 internet connectivity connect to SSL VPN with IPv6, Cisco ASA outside interface with IPv6 address will receive the request.
    Qus:
    1. Will Cisco ASA check two factor authentication with ACS and RSA both are in IPv4 address for an IPv6 client ?
    2. Once if authenticated, Cisco ASA can assign IPv4/IPv6 address pool to the client, if i prefer only IPv4 address pool and client will get IPv4 address as tunnel interface IP address. Will it work? Means IPv4 over IPv6 SSL VPN tunnel.
    Thanks
    Sankar

    AFAIR, with SSL we support IPv4 and IPv6 assigned IP addresses, with IPsec IKEv2 we only support IPv4 addressing. 
    Query to AAA servers are separate process, from user<-> headend authentication flow, unless we're talking about IKEv2 with standard EAP methods.

  • Ipv4 mapped addresses bind problem: address already in use.

    Hello. It's me again with another, may be newbie, question.
    This time I observe different behavior binding different type of ip addresses on tcp sockets. For instance
    - when I bind ipv4 mapped addresses, if there is a remaining old socket in TIME_WAIT state from a previous run
    I get the error 'Address already in use', event with SO_REUSEADDR set.
    - when I bind another type of ipv6 or just ipv4 addresses. if there if a remaining old socket in TIME_WAIT state from
    a previous run, the bind is successful (SO_REUSEADDR is set).
    How can be explained this behavior?
    Thanks a lot.
    Details
    =======
    I made a small program to test this. This program:
    - dump the addresses to be used in bind() and connect()
    - creates a LISTEN SOCKET calling
    - socket(AF_INET6, SOCK_STREAM, 0)
    - fcntl(F_SETFD, fcntl(F_GETFD) | FD_CLOEXEC)
    - fcntl(F_SETFL, fcntl(F_GETFL) | O_NONBLOCK),
    - setsockopt(SO_REUSEADDR),
    - setsockopt(SO_KEEPALIVE),
    - setsockopt(TCP_NODELAY),
    - bind()
    - listen()
    - creates a CONNECTING SOCKET calling
    - socket(AF_INET6, SOCK_STREAM, 0)
    - fcntl(F_SETFD, fcntl(F_GETFD) | FD_CLOEXEC)
    - fcntl(F_SETFL, fcntl(F_GETFL) | O_NONBLOCK),
    - setsockopt(SO_REUSEADDR),
    - setsockopt(SO_KEEPALIVE),
    - setsockopt(TCP_NODELAY),
    - connect()
    - creates a ACCEPTED SOCKET calling
    - accept()
    - fcntl(F_SETFD, fcntl(F_GETFD) | FD_CLOEXEC)
    - fcntl(F_SETFL, fcntl(F_GETFL) | O_NONBLOCK),
    - setsockopt(SO_REUSEADDR),
    - setsockopt(SO_KEEPALIVE),
    - setsockopt(TCP_NODELAY),
    - issue a std::system( "netstat -an | grep 10329" )
    - wait with select() for a write event in the CONNECTING SOCKET
    - wait with select() for a write event in the ACCEPTED SOCKET
    - close the accepted socket
    - close the connecting socket
    - close the listen socket
    - issue another std::system( "netstat -an | grep 10329" )
    - exit(0)
    Note: please don't get confused with my notation of addresses, the last component, after the last colon, is the port.
    I run it with ipv4 mapped listen address, with this result:
    $ ./test_reuseaddr listen_address=0.0.0.0:10329 connect_address=127.0.0.1:10329
    Listener in *'::ffff:0.0.0.0:10329'*
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    Connect to '::ffff:127.0.0.1:10329'
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 7f 00 00 01 00 00 00 00 00 00 00 00 |................|
    Creating listen socket
    Creating connecting socket
    Creating accepted socket
    netstat -an | grep 10329
    *.10329 *.* 0 0 49152 0 LISTEN
    127.0.0.1.35114 127.0.0.1.10329 49152 0 49152 0 ESTABLISHED
    127.0.0.1.10329 127.0.0.1.35114 49152 0 49152 0 ESTABLISHED
    Closing connecting socket
    Closing accepted socket
    Closing listen socket
    netstat -an | grep 10329
    *127.0.0.1.10329 127.0.0.1.35114 49152 0 49152 0 TIME_WAIT*
    Immediately run it again the same way, with this result (Address already in use):
    $ ./test_reuseaddr listen_address=0.0.0.0:10329 connect_address=127.0.0.1:10329
    Listener in *'::ffff:0.0.0.0:10329'*
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    Connect to '::ffff:127.0.0.1:10329'
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 7f 00 00 01 00 00 00 00 00 00 00 00 |................|
    Creating listen socket
    *### SYSCALL ERROR: bind(): 125, Address already in use*
    Wait and verify that the TIME_WAIT socket has disappeared
    $ sleep 120
    $ netstat -an | grep 10329
    Now run the same program with normal ipv6 listen addresses
    $ ./test_reuseaddr listen_address=*::0*:10329 connect_address=127.0.0.1:10329
    Listener in *':::10329'*
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    Connect to '::ffff:127.0.0.1:10329'
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 7f 00 00 01 00 00 00 00 00 00 00 00 |................|
    Creating listen socket
    Creating connecting socket
    Creating accepted socket
    netstat -an | grep 10329
    *.10329 *.* 0 0 49152 0 LISTEN
    127.0.0.1.35115 127.0.0.1.10329 49152 0 49152 0 ESTABLISHED
    127.0.0.1.10329 127.0.0.1.35115 49152 0 49152 0 ESTABLISHED
    *.10329 *.* 0 0 49152 0 LISTEN
    Closing connecting socket
    Closing accepted socket
    Closing listen socket
    netstat -an | grep 10329
    *127.0.0.1.10329 127.0.0.1.35115 49152 0 49152 0 TIME_WAIT*
    Immediately run it again the same way (no error this time)
    $ ./test_reuseaddr listen_address=*::0*:10329 connect_address=127.0.0.1:10329
    Listener in *':::10329'*
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
    Connect to '::ffff:127.0.0.1:10329'
    1a 00 28 59 00 00 00 00 00 00 00 00 00 00 00 00 |..(Y............|
    00 00 ff ff 7f 00 00 01 00 00 00 00 00 00 00 00 |................|
    Creating listen socket
    Creating connecting socket
    Creating accepted socket
    netstat -an | grep 10329
    127.0.0.1.10329 127.0.0.1.35115 49152 0 49152 0 TIME_WAIT
    *.10329 *.* 0 0 49152 0 LISTEN
    127.0.0.1.35116 127.0.0.1.10329 49152 0 49152 0 ESTABLISHED
    127.0.0.1.10329 127.0.0.1.35116 49152 0 49152 0 ESTABLISHED
    *.10329 *.* 0 0 49152 0 LISTEN
    Closing connecting socket
    Closing accepted socket
    Closing listen socket
    netstat -an | grep 10329
    *127.0.0.1.10329 127.0.0.1.35115 49152 0 49152 0 TIME_WAIT*
    *127.0.0.1.10329 127.0.0.1.35116 49152 0 49152 0 TIME_WAIT*
    Run it againg many times with no error.

    sunlover1984 wrote:
    Sorry, to use such short forms in forums as i dont know much about this. i rarly use java forum. well, i removed the code that i gave u for server starting. but still it is giving me the same error. this time i put it in a java bean file.(Hint "u" is just another short form).
    Did you try the suggestion to put a log statement just before you start the server? Or put a breakpoint at that line and see how often it is reached.
    Because the only reason for this problem is that something is already listening at that port.
    And if there's really nothing listening before you start you application, then only your application itself can listen there already, so the logical conclusion for me would be that you're starting the Server twice.

  • Hide my Ip address Show virtual address

    Dear Friends,
    I am developing an JSP application and using Tomcat 4.1, for running my application i have to type my ip address and port number
    http://<<ip address>>:<<port no>>/ <<Root folder name>>.
    I need to type any virtual address http://programs_java instead of http://127.1.1.0:8080/programs_java
    Thanks in advance
    Rengaraj.R

    You cannot do anything by installing some software. If you are inside a network then there will be some DNS servers where the mapping of ipaddress and names are stored. So you have to get your ip mapped to a name which you want to type in address bar, in the DNS server. Ask your network administrator for more details on how to get it mapped.

  • How can I check the virtual-address up using show command in ACE?

    I want to check the virtual-address using show command.
    however, there are not in ACE. So I used the ping to check virtual-address status in ACE
    I want to know the command what is verify virtual-address status , using show command
    Thank :)

    Try -> show arp
    There you have a Type column and a Status column.
    Look for the entry "VSERVER" in the Type column
    Roble

  • Virtual address location in process WSDL

    Hi,
    now we use following approach:
    We refer to default WSDL at http://<server>:<port>/orabpel/<domain>/<process name>/<process name>?wsdl
    Where address location is the default revision of the process: http://<server>:<port>/orabpel/<domain>/<process name>/<revision>
    Is there any possibility to refer to WSDL with 'virtual address location' that always refers to default revision?
    We want that our partner has one WSDL with address location
    and we can transparently change process revisions without notifying our partner to clear wsdl caches and refresh address location?
    Are there any possibilities?
    (we use BPEL 10.1.2.0.0 )
    Thank You and Reagrds
    Karel

    Hi,
    To always use the latest revision of a process you need to exclude the <revision> part of the Location url. To dynamically set the url's at runtime you can use the following in a assign activity:
    <copy>
    <from expression="string(bpws:getVariableData('urlVariable','/ns1:ParameterCollection/ns1:location'))"/>
    <to partnerLink="RunUcmJasperReport" bpelx:property="location"/>
    </copy>
    <copy>
    <from expression="string(bpws:getVariableData('urlVariable','/ns1:ParameterCollection/ns1:wsdlLocation'))"/>
    <to partnerLink="RunUcmJasperReport" bpelx:property="wsdlRuntimeLocation"/>
    </copy>
    Make sure you assign both wsdlLocation and Location and that the <from> part explicitly is a string. This works in 10.1.3 but i do not know if it also was available in 10.1.2
    Kind Regards,
    Andre

  • Physical Address to Virtual address

    Hi all,
    Are there any DDI/DKI API's to convert physical address to virtual address and vice versa. If there are no API's available is there any other way/method to achive this.
    Regards and Thanx in advance
    Pradeep

    in general, you're not supposed to need to do that, although hat_getpkfnum will work. If you are trying to use dma, it is better to use the dma functions such as ddi_dma_alloc_handle with ddi_dma_mem_alloc and ddi_dma_addr_bind_handle, or dvma_kaddr_load.

  • How does OpenSPARC translate Virtual Address to Physical Address or Vice V

    The i386 page address system has three levels: dir, page, offset. The 32 bits virtual address consists of dir, page, offset. When the process releases a virtual address to read a memory content, the MMU of i386 will translate the virtual address to physical address as follows:1,Based on the value of CR3 register and dir of virtual address, MMU returns the base address of page.2, Based on the the base address of page and value of page of virtual address, MMU returns the base address of physical page.3, Based on the base address of physical page and value of offset of virtual address, MMU returns physical memory address. 4, Read the content of physical memory address.
    However, when I read the source code of the bw_r_tlb of OpenSPARC�s MMU, I am puzzled. I am not clear how is the page address system of OpenSPARC implement.
    Will you offer me some hints about it ? And are there any documents about it?
    Thanks a lot!

    It would be good to add the definition of Hypervisor in the wikipedia.
    Thanks
    [email protected] wrote:
    > I have downloaded the source code of linux-2.6.17.9 version. In the arch directory of linux-2.6.17.9, I
    find the Hypervisor API (such as sun4v_intr_setstate, sun4v_intr_gettarget) has been
    integrated with Linux kernel. In other words, it is implemented in Linux kernel. All the time, I think
    Hypervisor API is an independent layer which provides an easy way to switch among all kinds of OS. But now,
    I find it is a part of Linux. If so, what a role does Hypervisor API take? Why do we name it Hypervisor API
    rather than a part of Linux? It do puzzle me, am I wrong?
    The Hypervisor API ("application programming interface") is fully described in the UltraSPARC T1 Hypervisor API Specification, which is downloadable from page http://opensparc-t1.sunsource.net/index.html .
    As a brief digression ... the term "Hypervisor API" has always seemed a bit oxymoronic to me -- given the historic equivalency of "application" to "nonprivileged". After all, isn't it more of an "SPI" (supervisor programming interface) because it services privileged supervisor (operating system) software, not nonprivileged (application) software? But if you think of a guest OS as an "application" (in the general sense of the word) supported by the Hypervisor, then "Hypervisor API" makes some sense.
    Now, regarding Hypervisor API and Linux. If you read the UltraSPARC T1 Hypervisor API Specification, you'll find that Hypervisor API calls are defined (appropriately enough) in terms of native SPARC assembly language. I haven't looked at the Linux source code, but I'd bet a considerable sum of money that the Linux sun4v_intr_gettarget() function is a C-language wrapper around a SPARC assemly-language routine that sets up arguments, performs a trap to the Hypervisor intr_gettarget function, and returns the result(s) to the caller.
    In any case, all actual Hypervisor code is fully implemented in the Hypervisor, not in Linux or Solaris or FreeBSD or Wind River Linux or any other OS running on top of the Hypervisor. Each OS may implement some "wrapper" code around Hypervisor calls, but no actual Hypervisor functionality actually resides in a guest OS. In fact, it can't reside in a guest OS because it must run in hyperprivileged mode and guest operating systems run in "merely" Privileged mode.
    To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]
    Shrenik Mehta               Tel: 408-774-8580
    Sr. Director, Frontend Technologies & OpenSPARC Program
    System Group               Fax: 408-774-8154
    Sun Microsystems          http://www.opensparc.net
    NOTICE: This email message is for the sole use of the intended
    recipient(s) and may contain confidential and privileged
    information. Any unauthorized review, use, disclosure or
    distribution is prohibited. If you are not the intended
    recipient, please contact the sender by reply email and destroy
    all copies of the original message.
    To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]

  • Restart becomes Not Responding, kernel Data/Stack execution not permitted: firefox[pid 5397] at virtual address 0x130656000, protections were

    Trying to restart (after upgrade to Mac 30.0) and load previous session (via an addon session manager)
    FF becomes "Not Responding" and Console shows repeated lines of:
    6/11/14 1:08:15 AM kernel Data/Stack execution not permitted: firefox[pid 5397] at virtual address 0x130656000, protections were read-write

    Discussion continues here: https://support.mozilla.org/questions/1005647

  • Virtual address to physical address

    Hi,
    How do i convert kernel virtual address to physical address.... do we have
    any DDI function for this.?.. i am writing a driver for a pci card... my
    card needs the physical address of the memory location so that it can dump
    data to this location..
    OS: SOlaris 7 on intel pc..
    gurus any idea how to do this stuff???....
    TIA
    azad

    The recommended way to do this is by using the ddi_dma* functions. I would suggest reading the entire "Writing Device Drivers", but pay particular attention to the chapters on DMA and the section in the chapter on character drivers that deals with DMA.

  • Update 30 unusable. EVERY page: kernel Data/Stack execution not permitted: firefox[pid 6174] at virtual address 0x128dea000, protections wer

    EVERY page that tries to open causes FF to become Not Responding:
    6/11/14 4:50:05 PM kernel Data/Stack execution not permitted: firefox[pid 6174] at virtual address 0x128dea000, protections were read-write
    6/11/14 4:50:13 PM kernel Data/Stack execution not permitted: firefox[pid 6174] at virtual address 0x128deb000, protections were read-write
    6/11/14 4:50:17 PM kernel Data/Stack execution not permitted: firefox[pid 6174] at virtual address 0x128dec000, protections were read-write
    6/11/14 4:50:21 PM kernel Data/Stack execution not permitted: firefox[pid 6174] at virtual address 0x128ded000, protections were read-write
    etc. Forever.

    Nope. After turning it off, FF became NOT RESPONDING. Restarted, and happened again. Using Safe Mode now.
    6/11/14 7:51:10 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x117b86000, protections were read-write
    6/11/14 7:51:12 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x117b87000, protections were read-write
    6/11/14 7:51:14 PM Firewall[61] 33300 Deny ICMP:8.0 192.168.1.1 192.168.1.2 in via en1
    6/11/14 7:51:17 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:51382 from 4.2.2.3:53
    6/11/14 7:51:17 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:51585 from 4.2.2.3:53
    6/11/14 7:51:17 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:50260 from 4.2.2.3:53
    6/11/14 7:51:17 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:58396 from 4.2.2.3:53
    6/11/14 7:51:18 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:64932 from 4.2.2.3:53
    6/11/14 7:51:18 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:62508 from 4.2.2.3:53
    6/11/14 7:51:30 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eaac000, protections were read-write
    6/11/14 7:51:30 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:55176 from 4.2.2.3:53
    SNIP SOME CHARACTERS FOR 10k LIMIT IN POST
    HOW THE HELL CAN I HAVE "EXCEEDED THE NUMBER OF ANSWERS THAT CAN BE POSTED IN A GIVEN AMOUNT OF TIME when every attempt was blocked for being over 10k characters? how the hell are you supposed to EDIT these?
    PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:56995 from 4.2.2.3:53
    6/11/14 7:51:32 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63351 from 50.18.44.24:80
    6/11/14 7:51:32 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:61082 from 4.2.2.3:53
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:50233 from 4.2.2.3:53
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63359 from 173.194.68.191:80
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63361 from 173.194.68.191:80
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63355 from 74.125.228.3:80
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:62761 from 4.2.2.3:53
    6/11/14 7:51:33 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63358 from 173.194.68.191:80
    6/11/14 7:51:34 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:62393 from 4.2.2.3:53
    6/11/14 7:51:34 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eaaf000, protections were read-write
    6/11/14 7:51:34 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63349 from 93.99.92.186:80
    6/11/14 7:51:34 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63351 from 50.18.44.24:80
    6/11/14 7:51:34 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63347 from 93.99.92.186:80
    6/11/14 7:51:35 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eaaf000, protections were read-write
    6/11/14 7:51:35 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63348 from 93.99.92.186:80
    6/11/14 7:51:36 PM Firewall[61] 33300 Deny ICMP:8.0 192.168.1.1 192.168.1.2 in via en1
    6/11/14 7:51:37 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63359 from 173.194.68.191:80
    6/11/14 7:51:37 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63361 from 173.194.68.191:80
    6/11/14 7:51:37 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63355 from 74.125.228.3:80
    6/11/14 7:51:37 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63358 from 173.194.68.191:80
    6/11/14 7:51:38 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eaaf000, protections were read-write
    6/11/14 7:51:38 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63351 from 50.18.44.24:80
    6/11/14 7:51:40 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63349 from 93.99.92.186:80
    6/11/14 7:51:40 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63347 from 93.99.92.186:80
    6/11/14 7:51:41 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63348 from 93.99.92.186:80
    6/11/14 7:51:41 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eab0000, protections were read-write
    6/11/14 7:51:42 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eab0000, protections were read-write
    6/11/14 7:51:43 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eab1000, protections were read-write
    6/11/14 7:51:44 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eab1000, protections were read-write
    6/11/14 7:51:45 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x12eab1000, protections were read-write
    6/11/14 7:51:45 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63359 from 173.194.68.191:80
    6/11/14 7:51:45 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63361 from 173.194.68.191:80
    6/11/14 7:51:45 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63355 from 74.125.228.3:80
    6/11/14 7:51:45 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63358 from 173.194.68.191:80
    6/11/14 7:51:46 PM Firewall[61] Stealth Mode connection attempt to TCP 192.168.1.2:63351 from 50.18.44.24:80
    6/11/14 7:51:50 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b7000, protections were read-write
    6/11/14 7:51:51 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b7000, protections were read-write
    6/11/14 7:51:53 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b7000, protections were read-write
    6/11/14 7:51:54 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b8000, protections were read-write
    6/11/14 7:51:56 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b8000, protections were read-write
    6/11/14 7:51:57 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b8000, protections were read-write
    6/11/14 7:51:57 PM Firewall[61] 33300 Deny ICMP:8.0 192.168.1.1 192.168.1.2 in via en1
    6/11/14 7:51:59 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b9000, protections were read-write
    6/11/14 7:52:00 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b9000, protections were read-write
    6/11/14 7:52:01 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9b9000, protections were read-write
    6/11/14 7:52:03 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9ba000, protections were read-write
    6/11/14 7:52:04 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9ba000, protections were read-write
    6/11/14 7:52:07 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9bb000, protections were read-write
    6/11/14 7:52:14 PM kernel Data/Stack execution not permitted: firefox[pid 6634] at virtual address 0x11b9bc000, protections were read-write
    6/11/14 7:52:18 PM [0x0-0x310310].org.mozilla.firefox[6634] [6644] ###!!! ABORT: Aborting on channel error.: file /builds/slave/rel-m-rel-osx64_bld-0000000000/build/ipc/glue/MessageChannel.cpp, line 1522
    6/11/14 7:52:18 PM [0x0-0x310310].org.mozilla.firefox[6634] [6644] ###!!! ABORT: Aborting on channel error.: file /builds/slave/rel-m-rel-osx64_bld-0000000000/build/ipc/glue/MessageChannel.cpp, line 1522
    6/11/14 7:52:18 PM com.apple.launchd.peruser.501[112] ([0x0-0x310310].org.mozilla.firefox[6634]) Exited: Terminated
    6/11/14 7:52:19 PM Firewall[61] 33300 Deny ICMP:8.0 192.168.1.1 192.168.1.2 in via en1
    6/11/14 7:52:25 PM kernel firefox (map: 0x17d5e0a4) triggered DYLD shared region unnest for map: 0x17d5e0a4, region 0x7fff81000000->0x7fff81200000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
    6/11/14 7:52:28 PM ReportCrash[6652] Saved crash report for plugin-container[6644] version ??? (1.0) to /Users/hal9000/Library/Logs/DiagnosticReports/plugin-container_2014-06-11-195228_Hal-9000s-MBP.crash
    6/11/14 7:52:29 PM Firewall[61] Stealth Mode connection attempt to UDP 192.168.1.2:60331 from 4.2.2.3:53

  • IPv4 Multicast address range

    Hello there.
    How can we classify the IPv4 multicast range ( 224.0.0.0 - 239.255.255.255 ) in terms of Public or Private addresses ?
    regards.        

    It's a mixture of private and public addresses depending on the particular subnet within that range. See below
    http://en.wikipedia.org/wiki/Multicast_address

  • Virtual address configure listener.ora and tnsnames.ora files on Solaris10

    Hi,
    I have installed Oracle 10g R2 on Solaris 10 U4 SPARC.
    I need to configure Oracle 10g to work with Storage Foundation for Oracle v5.0.
    After Oracle installation listener.ora listens on host IP address.
    So I have changed to listens on the Virtual IP address. This is a requirement:
    All listeners to be configured must listen to the same virtual IP address
    Could you please tell what to correct to have my Oracle working correctly?
    listener.ora:
    -bash-3.00$ cat listener.ora
    # listener.ora Network Configuration File: /export/home/u01/app/oracle/product/10.2.0/Db_1/network/admin/listener.ora
    # Generated by Oracle configuration tools.
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (SID_NAME = PLSExtProc)
    (ORACLE_HOME = /export/home/u01/app/oracle/product/10.2.0/Db_1)
    (PROGRAM = extproc)
    LISTENER =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 10.160.19.64)(PORT = 1521))
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
    tnsnames.ora:
    -bash-3.00$ cat tnsnames.ora
    # tnsnames.ora Network Configuration File: /export/home/u01/app/oracle/product/10.2.0/Db_1/network/admin/tnsnames.ora
    # Generated by Oracle configuration tools.
    ORCL =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 10.160.19.64)(PORT = 1158))
    (CONNECT_DATA =
    (SERVER = DEDICATED)
    (SERVICE_NAME = orcl)
    EXTPROC_CONNECTION_DATA =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
    (CONNECT_DATA =
    (SID = PLSExtProc)
    (PRESENTATION = RO)
    Also connecting by web browser http://10.160.19.64:1158/em I am not able to start listener:
    Details TNS-12541: TNS:no listener
    Using the command listener start it starts successfully.
    Kind regards,
    Daniel

    The port in listener.ora nad tnsnames.ora are now the same - 1521
    After this trying logining by Web page there is an error:
    Error
    Io exception: The Network Adapter could not establish the connection
    When I run netca tool and I reconfigure listener netca change the IP address to sun3 which has 10.160.19.49. After this listener works fine and I am able to connect by Web page.
    bge0 10.160.19.49 - is the base IP address
    bge0:2 10.160.19.64 - is the virtual IP address
    I want listener to listen on 10.160.19.64.

  • IPv4 private addressing tradeoff: small footprint vs even VLSM length?

    Is minimising one's use of the private address space to avoid unnecesary potential overlap worth the hassle of having un-even VLSM lengths?
    I am designing my first non-trivial IPv4 addressing scheme in the 10.0.0.0/8 range.  Just two small branch offices, but on the access-layer, I'm putting servers, printers, desktops and phones onto separate VLANs.  (In fact, when doing L3 at the access-layer, you can quickly end up with multiple VLANs).
    Now, few of these VLANs are so big that they'll need a /24 all to themselves.  In fact, a /27 for phones and printers will be fine.  I'll give a /24 to desktops because 255.255.255.0 is the only mask which semi-technical users understand.  Maybe a /25 for servers, which gives a bit of room for further subnetting and putting VMs onto their own VLANs. 
    I'll summarise each site over DMVPN as a /21 subnet.  Neat.
    But at each site the routing tables look messy, with the router sporting addresses like 10.9.13.129/27 and there isn't any real pattern between the L3 address and the VLAN number.
    Why don't I just dole out /24's to each VLAN,  After all, I'm hardly going to minimise conflict with private IP addresses chosen by prospective partners by using /20's instead of /21's for each site (right?), and even if they do, NAT can handle all these situations elegantly (right?).
    What about you, would you minimise your footprint in the address space and deal with 'unevenness' in subnet sizes?  Or would you be easier on your eyes now and simply bite the bullet if you had to NAT one day?
    thanks!
    David.
    Message was edited by: David Bullock - tries to get the crux of the question closer to the top of text.

    I chose Alessio's as the 'correct' answer, since it mentioned route summarisation.  But both answers were correct in the sense that they were quite reasonable.
    In the end, I decided to go wtih my varying-length VLSM approach, to keep the address-sprawl at each site confined to a /21 subnet.  I don't find the varying-length VLSM to be much of an nuisance in practice.  I miss out on being able to make the 3rd octet 'line up' with the VLAN, but I feel that's a pretty delicate affair anyhow.  Some person just has to give VLAN100 as a 'best practice' for the Voice VLAN, for example, and you either start working with a /17 at each site (minimally), or abandon your numbering scheme.  You'd really have to go with a /16 for each site to ensure you can number 254 VLANs in this fashion.  And that means for each site that you chose, there's a 1-in-256 chance you'll pick the same second octet as someone else.  With my scheme, there is a 1 in 8192 chance that I'll pick the same address range, so I've decreased the likelyhood of a conflict by a factor of 32.
    At the end of the day though, so long as route summarisation works, all other considerations seem to be a matter of taste.

Maybe you are looking for

  • Need help with Tamil unicode fonts in Macbook OSX 10.6.7

    I am really desperate for some help figuring out my Tamil unicode font problem. With great difficulty I got all these fonts set up on my previous ibook G4. When that computer died in the fall I got this new Macbook, and had all my data brought from t

  • Disposable tabbed pane redrawing

    Hi, i'm using disposable tabbed panes (with close button) in my program and i'm using following method to update their titles according to what user entered: //this is class extending JPanel public void updatePanelTitle(String newTitle) {         Mai

  • Table having list of screen exits for a given enhancement....

    Hi, Can someone tell me if I want to see a list of function exits or list of menu exits or list of screen exits in a given enhancement, what table can I go and see ? Regards, Tushar.

  • IPhoto and ITunes

    ILite9 Where are IPhoto Photos and ITunes Music stored on the HD If I transfer to an external HD can I still see them without 10.5 not installed on the external HD Richard

  • Why is home sharing computers not showing up in iTunes (lion)?

    Hey, I'm wondering if someone can tell me why home sharing computers aren't showing up in my iTunes even though both computers are on and authorized to use my itunes account.