IPS 4240 High Availability?

Hello there,
Does 4240 work in HA mode?
Or do I have to look at 4255 if I need them to work in HA mode?
Kindly help me with this info..thanks in advance.
Regards,
Ram

Just to add a little bit to Bob's response. It is possible to get HA, but like mentioned above, it's not HA like you would expect from a firewall, and requires significant network planning and is pretty technical in nature.
The best documentation I have been able to find regarding HA designs is in Chapter 21 - "Deploying Cisco IPS for High Availability and High Performance" of the CCNP Security IPS 642-627 Official Cert Guide, ISBN: 9780132372107. It gets pretty detailed and explains a lot of different methods.
I was also able to find some information on this site, but it's at a higher level, and doesn't provide as many options.
https://www.networkworld.com/community/node/18384
I've had to work HA into some of our environments, and I'm here to tell ya, plan ahead, way ahead, test several methods to find the best one. We ended up using a method that I couldn't find mentioned anywhere.

Similar Messages

Can IPS 4345 work in High Availability mode?

Hi all,
Can IPS 4345 work in High Availability mode?
Or can it have a bypass unit? Kindly help. Is there any alternative to this model in Sourcefire?
Regds,
Ram

Hi,
Cisco 4300 series IPS supports High-availability mode.
you can run it in active-active mode and also in active-standby mode.
Regards,
Rahul Chhabra
Network Engineer
Spooster IT Services

IPS High Availability Solution

Hi all,
requirement to have redundancy for IPS appliance placed on data center design, I have digged on Cisco docs but found the Resiliency and HA (High Availability) from the IPS point of view could occur in the switches side (HSRP/Eth channel load-balance).
is there any visible way to implement the High Availability in dynamic way !!
Regards,
Belal

Belal
You are correct, only one sensor at a time will pass traffic.
Spanning Tree Protocol uses layer 2 frames called BPDUs to determine if a path to the root bridge (in this case VLAN) exists. If the primary sensor stops passing layer 2 frames (a good indication that the rest of your traffic is not going to get through the sensor) then BPDUs will not pass thru the primary sensor and Spanning Tree will unblock the secondary path through the standby sensor. You may want to watch for an SNMP trap from the switch to know when that happens.
The failover cable is just an ordinary roll over cable between two ports (in the two VLANS) on the switch. I called it a failover cable because it only carries traffic when the sensor has failed to pass layer two (and above) frames.

I'm looking for Failover/High available solutions for IPS 4200 Series

Hi all,
I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

I do not know if this is documented anywhere, but I can tell you what I do. As long as the IPS 4200 has power, with the right software settings, the unit can fail such that it will pass traffic. Should the unit loose power, it does stop all traffic. I run a patch cable in parallel with the in line IPS unit, in the same VLAN, with a higher STP cost. Thus all traffic will traverse the IPS unit when possible, but should something happen to it, a $10 patch cable takes over.
Mike

Error while installing NW 7.4 SR2 in High availability

Hello Guys,
We are installing NW 7.4 SR2 Enterprise Portal with sybase database on windows 2012 R2 server under high availability i.e Microsoft Cluster.
JEP is the system ID of the server, SAPJEP is the virtual host and X.X.X.36 is the virtual I.P for Central Instance node.
Physical I.P of First node is X.X.X.21
We have started the installation as first cluster node and get stuck at phase 3.
The error in sapinst.log is below:-
FCO-00011 The step assignNetworknameToClusterGroup with step key
|NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_GetSidFromCluster|ind|ind|ind|ind|getSid|0|assignNetworknameToClusterGroup
was executed with status ERROR ( Last error reported by the step: Could
not set properties on ClusterResource 'SAP JEP IP'.).
The error log of sapinst_dev.log is is below:-
TRACE      2015-03-18 11:30:29.193
NWInstance.getStartProfilePath(true)
TRACE      2015-03-18 11:30:29.194
NWInstance.getStartProfileName()
TRACE      2015-03-18 11:30:29.194
NWInstance.getStartProfileName() done: JEP_ERS10_SAPJEP
TRACE      2015-03-18 11:30:29.194
NWERSInstance.getDirProfile()
TRACE      2015-03-18 11:30:29.194
NW.getDirProfile(false)
TRACE      2015-03-18 11:30:29.195
NW.getDirProfile() done: \\SAPJEP/sapmnt/JEP/SYS/profile
TRACE      2015-03-18 11:30:29.204 [synxcpath.cpp:925]
          CSyPath::getOSNodeType(bool) lib=syslib module=syslib
Path \\SAPJEP/sapmnt/JEP/SYS/profile is on a non-existing share.
TRACE      2015-03-18 11:30:29.204
NWERSInstance.getDirProfile() done: \\SAPJEP/sapmnt/JEP/SYS/profile
TRACE      2015-03-18 11:30:29.205
NWInstance.getStartProfilePath() done: \\SAPJEP/sapmnt/JEP/SYS/profile/JEP_ERS10_SAPJEP
TRACE      2015-03-18 11:30:29.206
NWInstance.getProfilePath() done: \\SAPJEP/sapmnt/JEP/SYS/profile/JEP_ERS10_SAPJEP
TRACE      2015-03-18 11:30:29.206
NWProfiles(JEP.ERS10.SAPJEP).getPersistentDefaultProfile()
TRACE      2015-03-18 11:30:29.207
NW.getPersistentDefaultProfile()
TRACE      2015-03-18 11:30:29.207
NW.isUnicode(true)
TRACE      2015-03-18 11:30:29.208
NW.isUnicode() done: true
TRACE      2015-03-18 11:30:29.208
NW.getPersistentDefaultProfile() done
TRACE      2015-03-18 11:30:29.208
NWProfiles(JEP.ERS10.SAPJEP).getPersistentDefaultProfile() done
TRACE      2015-03-18 11:30:29.208
NWProfiles(JEP.ERS10.SAPJEP)._getPersistentProfile(INSTANCE) done
TRACE      2015-03-18 11:30:29.209
NWProfiles(JEP.ERS10.SAPJEP).getPersistentProfile() done
TRACE      2015-03-18 11:30:29.209
PersistentR3Profile.commit()
TRACE      2015-03-18 11:30:29.209
PersistentR3Profile.commit() done
TRACE      2015-03-18 11:30:29.209
NWProfiles(JEP.ERS10.SAPJEP).getPersistentDefaultProfile()
TRACE      2015-03-18 11:30:29.210
NW.getPersistentDefaultProfile()
TRACE      2015-03-18 11:30:29.210
NW.isUnicode(true)
TRACE      2015-03-18 11:30:29.211
NW.isUnicode() done: true
TRACE      2015-03-18 11:30:29.211
NW.getPersistentDefaultProfile() done
TRACE      2015-03-18 11:30:29.211
NWProfiles(JEP.ERS10.SAPJEP).getPersistentDefaultProfile() done
TRACE      2015-03-18 11:30:29.211
PersistentR3Profile.commit()
TRACE      2015-03-18 11:30:29.211
PersistentR3Profile.commit() done
TRACE      2015-03-18 11:30:29.212
NWProfiles(JEP.ERS10.SAPJEP).commit() done
TRACE      2015-03-18 11:30:29.212
NWInstanceInstall.addSAPCryptoParametersToProfile() done
TRACE      2015-03-18 11:30:29.260
The step setProfilesForSAPCrypto with key |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_Unpack2|ind|ind|ind|ind|unpack|0|NW_SAPCrypto|ind|ind|ind|ind|crypto|0 has been executed successfully.
INFO      2015-03-18 11:30:29.262 [synxccuren.cpp:887]
          CSyCurrentProcessEnvironmentImpl::setWorkingDirectory(const CSyPath & C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1)
          lib=syslib module=syslib
Working directory changed to C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1.
TRACE      2015-03-18 11:30:29.265 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:29.267 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:29.270 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:29.280 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:29.281 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:29.284 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:29.293 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:29.295 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:29.315 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
INFO      2015-03-18 11:30:29.330 [csistepexecute.cpp:1024]
Execute step askUnpack of component |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_Unpack2|ind|ind|ind|ind|unpack|0
TRACE      2015-03-18 11:30:29.339 [csistepexecute.cpp:1079]
Execution of preprocess block of |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_Unpack2|ind|ind|ind|ind|unpack|0|askUnpack returns TRUE
TRACE      2015-03-18 11:30:29.364
Call block: NW_Unpack2_ind_ind_ind_ind
    function: NW_Unpack2_ind_ind_ind_ind_DialogPhase_askUnpack
is validator: false
TRACE      2015-03-18 11:30:29.364
NWInstall.getSystem(JEP)
TRACE      2015-03-18 11:30:29.366
NWOption(localExeDir).value()
TRACE      2015-03-18 11:30:29.366
NWOption(localExeDir).value() done: true
TRACE      2015-03-18 11:30:29.367
NWOption(collected).value()
TRACE      2015-03-18 11:30:29.367
NWOption(collected).value() done: true
TRACE      2015-03-18 11:30:29.369
NWInstall({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:29.370
NW({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:29.371
NW() done
TRACE      2015-03-18 11:30:29.371
NWInstall() done
TRACE      2015-03-18 11:30:29.371
NWInstall.getSystem() done
TRACE      2015-03-18 11:30:29.372
NWInstall.mapUnpackTable(t_askUnpack)
TRACE      2015-03-18 11:30:29.373
NWInstall.mapUnpackTable() done: true
TRACE      2015-03-18 11:30:29.377
NWDB._get(JEP, ind)
TRACE      2015-03-18 11:30:29.377
NWDB._fromTable(JEP, ctor)
TRACE      2015-03-18 11:30:29.379
NWDB(JEP, {
sid:JEP
hostname:undefined
dbsid:undefined
installDB:false
ORACLE_HOME:
abapSchema:
abapSchemaUpdate:
javaSchema:
TRACE      2015-03-18 11:30:29.379
NWDB() done
TRACE      2015-03-18 11:30:29.379
NWDB._fromTable() done
TRACE      2015-03-18 11:30:29.380
NWDB._get() done
TRACE      2015-03-18 11:30:29.380
NWDB.getDBType(): ind
TRACE      2015-03-18 11:30:29.390 [iaxxgenimp.cpp:283]
          CGuiEngineImp::showDialogCalledByJs()
showing dlg d_nw_ask_unpack
TRACE      2015-03-18 11:30:29.390 [iaxxgenimp.cpp:293]
          CGuiEngineImp::showDialogCalledByJs()
<dialog sid="d_nw_ask_unpack">
<title>Unpack Archives</title>
<table enabled="true" fixedrows="true" sid="askUnpack">
<caption>Archives to Be Unpacked</caption>
<column enabled="true" type="check" numeric="false" upper="false" name="unpack">
<caption>Unpack</caption>
<helpitem id="common.Unpack"/>
<value type="string">false</value>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="path">
<caption>Archive</caption>
<helpitem id="common.UnpackArchive"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="codepage">
<caption>Codepage</caption>
<helpitem id="common.UnpackArchiveCodepage"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="destination">
<caption>Destination</caption>
<helpitem id="common.UnpackArchiveDestination"/>
</column>
<column enabled="true" type="file" numeric="false" upper="false" name="ownPath">
<caption>Downloaded To</caption>
<helpitem id="common.UnpackArchiveDownload"/>
<value type="string"/>
</column>
<row rowId="0">
<boolvalue>
<true/>
</boolvalue>
<value>DBINDEP\SAPEXE.SAR</value>
<value>Unicode</value>
<value>E:\usr\sap\JEP\SYS\exe\uc\NTAMD64</value>
<value></value>
</row>
</table>
<dialog/>
TRACE      2015-03-18 11:30:29.391 [iaxxgenimp.cpp:1031]
          CGuiEngineImp::acceptAnswerForBlockingRequest
Waiting for an answer from GUI
TRACE      2015-03-18 11:30:30.617 [iaxxdlghnd.cpp:96]
          CDialogHandler::doHandleDoc()
CDialogHandler: ACTION_NEXT requested
TRACE      2015-03-18 11:30:30.618 [iaxxcdialogdoc.cpp:190]
          CDialogDocument::submit()
<dialog sid="d_nw_ask_unpack">
<table enabled="true" fixedrows="true" sid="askUnpack">
<caption>Archives to Be Unpacked</caption>
<column enabled="true" type="check" numeric="false" upper="false" name="unpack">
<caption>Unpack</caption>
<helpitem id="common.Unpack"/>
<value type="string">false</value>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="path">
<caption>Archive</caption>
<helpitem id="common.UnpackArchive"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="codepage">
<caption>Codepage</caption>
<helpitem id="common.UnpackArchiveCodepage"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="destination">
<caption>Destination</caption>
<helpitem id="common.UnpackArchiveDestination"/>
</column>
<column enabled="true" type="file" numeric="false" upper="false" name="ownPath">
<caption>Downloaded To</caption>
<helpitem id="common.UnpackArchiveDownload"/>
<value type="string"/>
</column>
<row rowId="0">
<boolvalue>
<true/>
</boolvalue>
<value>DBINDEP\SAPEXE.SAR</value>
<value>Unicode</value>
<value>E:\usr\sap\JEP\SYS\exe\uc\NTAMD64</value>
<value/>
</row>
</table>
<dialog/>
TRACE      2015-03-18 11:30:30.646
Call block: NW_Unpack2_ind_ind_ind_ind
    function: NW_Unpack2_ind_ind_ind_ind_DialogPhase_askUnpackValidator_default
is validator: true
TRACE      2015-03-18 11:30:30.646
NWInstall.getSystem(JEP)
TRACE      2015-03-18 11:30:30.648
NWOption(localExeDir).value()
TRACE      2015-03-18 11:30:30.648
NWOption(localExeDir).value() done: true
TRACE      2015-03-18 11:30:30.649
NWOption(collected).value()
TRACE      2015-03-18 11:30:30.649
NWOption(collected).value() done: true
TRACE      2015-03-18 11:30:30.652
NWInstall({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:30.653
NW({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:30.654
NW() done
TRACE      2015-03-18 11:30:30.654
NWInstall() done
TRACE      2015-03-18 11:30:30.654
NWInstall.getSystem() done
TRACE      2015-03-18 11:30:30.655
NWInstall.validateUnpackTable(t_askUnpack)
TRACE      2015-03-18 11:30:30.657
NWInstall.validateUnpackTable(): validating row {
codepage:Unicode
destination:E:\usr\sap\JEP\SYS\exe\uc\NTAMD64
ownPath:
path:DBINDEP\SAPEXE.SAR
sid:JEP
unpack:true
TRACE      2015-03-18 11:30:30.659 [tablecpp.cpp:136]
          Table(t_NW_unpack).updateRow({
cd:UKERNEL
codepage:Unicode
confirmUnpack:
destination:E:\usr\sap\JEP\SYS\exe\uc\NTAMD64
list:
needUnpacking:true
ownPath:
path:DBINDEP\SAPEXE.SAR
selectiveExtract:false
sid:JEP
unpack:true
wasUnpacked:false
}, WHERE sid='JEP' AND path='DBINDEP\SAPEXE.SAR' AND codepage='Unicode' AND destination='E:\usr\sap\JEP\SYS\exe\uc\NTAMD64')
updating
TRACE      2015-03-18 11:30:30.661
NWInstall.validateUnpackTable() done
TRACE      2015-03-18 11:30:30.722 [iaxxgenimp.cpp:301]
          CGuiEngineImp::showDialogCalledByJs()
<dialog sid="d_nw_ask_unpack">
<table enabled="true" fixedrows="true" sid="askUnpack">
<caption>Archives to Be Unpacked</caption>
<column enabled="true" type="check" numeric="false" upper="false" name="unpack">
<caption>Unpack</caption>
<helpitem id="common.Unpack"/>
<value type="string">false</value>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="path">
<caption>Archive</caption>
<helpitem id="common.UnpackArchive"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="codepage">
<caption>Codepage</caption>
<helpitem id="common.UnpackArchiveCodepage"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="destination">
<caption>Destination</caption>
<helpitem id="common.UnpackArchiveDestination"/>
</column>
<column enabled="true" type="file" numeric="false" upper="false" name="ownPath">
<caption>Downloaded To</caption>
<helpitem id="common.UnpackArchiveDownload"/>
<value type="string"/>
</column>
<row rowId="0">
<boolvalue>
<true/>
</boolvalue>
<value>DBINDEP\SAPEXE.SAR</value>
<value>Unicode</value>
<value>E:\usr\sap\JEP\SYS\exe\uc\NTAMD64</value>
<value/>
</row>
</table>
<dialog/>
TRACE      2015-03-18 11:30:30.724 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:30.725 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:30.728 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:30.776
The step askUnpack with key |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_Unpack2|ind|ind|ind|ind|unpack|0 has been executed successfully.
INFO      2015-03-18 11:30:30.778 [synxccuren.cpp:887]
          CSyCurrentProcessEnvironmentImpl::setWorkingDirectory(const CSyPath & C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1)
          lib=syslib module=syslib
Working directory changed to C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1.
TRACE      2015-03-18 11:30:30.780 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:30.781 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:30.785 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:30.802 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:30.803 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:30.806 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:30.819 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:30.842 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\keydb.xml
TRACE      2015-03-18 11:30:30.908 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:30.909 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:30.963 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\statistic.xml
TRACE      2015-03-18 11:30:31.139 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
INFO      2015-03-18 11:30:31.142 [csistepexecute.cpp:1024]
Execute step setDisplayNames of component |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0
TRACE      2015-03-18 11:30:31.177
Call block: NW_FirstClusterNode_ind_ind_ind_ind
    function: NW_FirstClusterNode_ind_ind_ind_ind_DialogPhase_setDisplayNames_Preprocess
is validator: false
TRACE      2015-03-18 11:30:31.219 [csistepexecute.cpp:1079]
Execution of preprocess block of |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|setDisplayNames returns TRUE
TRACE      2015-03-18 11:30:31.243
Call block: NW_FirstClusterNode_ind_ind_ind_ind
    function: NW_FirstClusterNode_ind_ind_ind_ind_DialogPhase_setDisplayNames
is validator: false
TRACE      2015-03-18 11:30:31.246
NWInstance.byNumberAndRealHost(00, DCEPPRDCI)
TRACE      2015-03-18 11:30:31.246
NWInstance.find()
TRACE      2015-03-18 11:30:31.248
NWOption(localExeDir).value()
TRACE      2015-03-18 11:30:31.248
NWOption(localExeDir).value() done: true
TRACE      2015-03-18 11:30:31.249
NWOption(collected).value()
TRACE      2015-03-18 11:30:31.249
NWOption(collected).value() done: true
TRACE      2015-03-18 11:30:31.252
NWInstance._fromRow({
sid:JEP
name:SCS00
number:00
host:SAPJEP
guid:0
realhost:dcepprdci
type:SCS
installationStatus:installing
startProfileName:JEP_SCS00_SAPJEP
instProfilePath:
dir_profile:
unicode:false
collectSource:
TRACE      2015-03-18 11:30:31.252
NWSCSInstance()
TRACE      2015-03-18 11:30:31.252
NWInstance(JEP/SCS00/SAPJEP)
TRACE      2015-03-18 11:30:31.252
NWInstance(JEP/SCS00/SAPJEP) done
TRACE      2015-03-18 11:30:31.253
NWInstanceInstall()
TRACE      2015-03-18 11:30:31.253
NWInstanceInstall() done
TRACE      2015-03-18 11:30:31.253
NWInstall.getSystem(JEP)
TRACE      2015-03-18 11:30:31.253
NWOption(localExeDir).value()
TRACE      2015-03-18 11:30:31.254
NWOption(localExeDir).value() done: true
TRACE      2015-03-18 11:30:31.254
NWOption(collected).value()
TRACE      2015-03-18 11:30:31.254
NWOption(collected).value() done: true
TRACE      2015-03-18 11:30:31.256
NWInstall({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:31.257
NW({
sid:JEP
sapDrive:E:
dbtype:ind
sapmnt:/sapmnt
hasABAP:false
hasJava:true
isAddinInstallation:undefined
unicode:true
workplace:undefined
loadType:SAP
umeConfiguration:
doMigMonConfig:
useParallelAbapSystemCopy:
dir_profile:\\SAPJEP\sapmnt\JEP\SYS\profile
os4_krnlib:
os4_seclanglib:
useCurrentUser:false
noShares:false
TRACE      2015-03-18 11:30:31.258
NW() done
TRACE      2015-03-18 11:30:31.258
NWInstall() done
TRACE      2015-03-18 11:30:31.258
NWInstall.getSystem() done
TRACE      2015-03-18 11:30:31.258
NWSCSInstance() done
TRACE      2015-03-18 11:30:31.259
NWInstance._fromRow() done
TRACE      2015-03-18 11:30:31.259
NWInstance._fromRow({
sid:JEP
name:ERS10
number:10
host:SAPJEP
guid:1
realhost:dcepprdci
type:ERS
installationStatus:installing
startProfileName:JEP_ERS10_SAPJEP
instProfilePath:
dir_profile:
unicode:false
collectSource:
TRACE      2015-03-18 11:30:31.259
NWERSInstance()
TRACE      2015-03-18 11:30:31.260
NWInstance(JEP/ERS10/SAPJEP)
TRACE      2015-03-18 11:30:31.260
NWInstance(JEP/ERS10/SAPJEP) done
TRACE      2015-03-18 11:30:31.260
NWInstanceInstall()
TRACE      2015-03-18 11:30:31.260
NWInstanceInstall() done
TRACE      2015-03-18 11:30:31.261
NWERSInstance() done
TRACE      2015-03-18 11:30:31.261
NWInstance._fromRow() done
TRACE      2015-03-18 11:30:31.261
NWInstance.find() done: 1 instances found
TRACE      2015-03-18 11:30:31.261
t_scs.setDisplayName([nw.progress.installInstance, SCS00], WHERE ROWNUM=0)
TRACE      2015-03-18 11:30:31.305
The step setDisplayNames with key |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0 has been executed successfully.
INFO      2015-03-18 11:30:31.307 [synxccuren.cpp:887]
          CSyCurrentProcessEnvironmentImpl::setWorkingDirectory(const CSyPath & C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1)
          lib=syslib module=syslib
Working directory changed to C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1.
TRACE      2015-03-18 11:30:31.362
Build Client for subcomponent |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_FinishFirstClusterNode|ind|ind|ind|ind|finishFirst|0
TRACE      2015-03-18 11:30:31.364
TRACE      2015-03-18 11:30:31.364 [ccdclient.cpp:22]
          CCdClient::CCdClient()
TRACE      2015-03-18 11:30:31.385 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:31.387 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\inifile.xml
TRACE      2015-03-18 11:30:31.390 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:31.406 [cpropertycontentmanager.hpp:220]
          CPropertyContentManager::logMissingParameters()
The following parameters can be set via SAPINST_PARAMETER_CONTAINER_URL (inifile.xml) but not via SAPINST_INPUT_PARAMETERS_URL:
Component 'NW_ERS_Instance': ersInstanceNumber, restartSCS
Component 'NW_GetDomainOU': isOUInstallation, ou_delimiter, windows_domain_ous
Component 'NW_GetSidFromCluster': clusterGroup, isUnicode, localDrive, network, networkName, sharedDrive, sid, useDHCP
Component 'NW_GetUserParameterWindows': sapDomain, sapServiceSIDPassword, sidAdmPassword
Component 'NW_SAPCrypto': installSAPCrypto
Component 'NW_SCS_Instance': instanceNumber, scsMSPort, scsMSPortInternal
Component 'Preinstall': installationMode
INFO      2015-03-18 11:30:31.802 [synxcpath.cpp:799]
          CSyPath::createFile() lib=syslib module=syslib
Creating file C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\summary.html.
TRACE      2015-03-18 11:30:31.828 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:31.852 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\keydb.xml
TRACE      2015-03-18 11:30:31.916 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:31.917 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:31.971 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\statistic.xml
TRACE      2015-03-18 11:30:32.152 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:32.154 [sixxbsummary.cpp:320]
          CSiSummaryContainer::showDialog()
<?xml version="1.0" encoding="UTF-8"?><sapinstgui version="1.0"><dialog version="1.0" sid="diReviewDialog"> <title>Parameter Summary</title><description>Choose 'Next' to start with the values shown. Otherwise, select the parameters to be changed and choose 'Revise'. You are then taken to the screen where you can change the parameter. You might be guided through other screens that have so far been processed.</description> <review id="review_controll"><caption><![CDATA[Parameter list]]></caption><inputgroup id="ID_1"> <caption><![CDATA[Drive for Local Instances]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_2"><pulldown edit="false" enabled="true" highlight="false" sid="localDrive">
<caption>Destination Drive for Local Instances</caption>
<helpitem id="mscs.SelectLocalDrive"/>
<value>C:</value>
<value>D:</value>
<selectvalue>D:</selectvalue>
</pulldown></input></inputgroup><inputgroup id="ID_3"> <caption><![CDATA[SAP System Cluster Parameters]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_4"><field enabled="true" highlight="false" sid="sid">
<caption>SAP System ID (SAPSID)</caption>
<helpitem id="common.SAPSystemIDCIDB"/>
<value type="upper" maxlength="3" regexp="^[A-Z][A-Z0-9]{2}" minlength="3">JEP</value>
</field></input><input id="ID_5"><field enabled="true" highlight="false" sid="networkName">
<caption>Network Name (SAP Virtual Instance Host)</caption>
<helpitem id="common.VirtualInstanceHostWindowsMSCS"/>
<value type="string" maxlength="13" minlength="1">SAPJEP</value>
</field></input><input id="ID_6"><pulldown edit="false" enabled="true" highlight="false" sid="network">
<caption>Use Public Network</caption>
<helpitem id="mscs.UsePublicNetwork"/>
<value>Cluster Network 1</value>
<selectvalue>Cluster Network 1</selectvalue>
</pulldown></input><input id="ID_7"><pulldown edit="false" enabled="true" highlight="false" sid="sharedDrive">
<caption>Destination Drive for Clustered Instances</caption>
<helpitem id="mscs.SelectSharedDrive"/>
<value>BACKUP</value>
<value>SAP_USR_SID_CI_NODE</value>
<value>SAPDATA1</value>
<value>SAPDATA2</value>
<value>SAPDATA3</value>
<value>SAPDATA4</value>
<value>SAPLOG1</value>
<value>SAPLOG2</value>
<value>SAPTEMP_SAPDIAG_SAPSYBSYSTEM</value>
<value>SYBASE</value>
<selectvalue>SAP_USR_SID_CI_NODE</selectvalue>
</pulldown></input></inputgroup><inputgroup id="ID_8"> <caption><![CDATA[DNS Domain Name]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_9"><check enabled="true" highlight="false" sid="setFQDN">
<caption>Set FQDN for SAP system</caption>
<helpitem id="common.FullyQualifiedDomainNameSelect"/>
<boolvalue>
<true/>
</boolvalue>
</check></input><input id="ID_10"><field enabled="true" highlight="false" sid="FQDN" depends="setFQDN">
<caption>DNS Domain Name for SAP System</caption>
<helpitem id="common.FullyQualifiedDomainName"/>
<value type="string" regexp="^[^.]+.*$" minlength="1">jnport.com</value>
</field></input></inputgroup><inputgroup id="ID_11"> <caption><![CDATA[Windows Domain]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_12"><radiobox enabled="true" highlight="false" sid="domainType">
<caption>Domain Model</caption>
<helpitem id="common.DomainModelDomainLocal"/>
<radio enabled="true" sid="global">
<caption>Domain of Current User</caption>
<boolvalue>
<true/>
</boolvalue>
</radio>
<radio enabled="true" sid="other">
<caption>Different Domain</caption>
</radio>
</radiobox></input></inputgroup><inputgroup id="ID_13"> <caption><![CDATA[Operating System Users]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_14"><password confirm="true" enabled="true" highlight="false" sid="sidAdmPassword">
<caption>Password of SAP System Administrator</caption>
<helpitem id="common.PasswordCreateExistsOS"/>
<encrvalue maxlength="63">*****</encrvalue>
</password></input><input id="ID_15"><password confirm="true" enabled="true" highlight="false" sid="sapServiceSIDPassword">
<caption>Password of SAP System Service User</caption>
<helpitem id="common.PasswordCreateExistsOS"/>
<encrvalue maxlength="63">*****</encrvalue>
</password></input></inputgroup><inputgroup id="ID_16"> <caption><![CDATA[Windows Domain for SAP Host Agent]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_17"><radiobox enabled="true" highlight="false" sid="domainType">
<caption>Domain Model</caption>
<helpitem id="common.DomainModelDomainLocal"/>
<radio enabled="true" sid="local">
<caption>Local Domain</caption>
<boolvalue>
<true/>
</boolvalue>
</radio>
<radio enabled="true" sid="global">
<caption>Domain of Current User</caption>
</radio>
<radio enabled="true" sid="other">
<caption>Different Domain</caption>
</radio>
</radiobox></input></inputgroup><inputgroup id="ID_18"> <caption><![CDATA[Operating System Users]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_19"><password confirm="true" enabled="true" highlight="false" sid="sidAdmPassword">
<caption>Password of SAP System Administrator</caption>
<helpitem id="common.PasswordCreateExistsOS"/>
<encrvalue maxlength="63">*****</encrvalue>
</password></input></inputgroup><inputgroup id="ID_20"> <caption><![CDATA[SCS Instance]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_21"><field enabled="true" highlight="false" sid="instanceNumber">
<caption>SCS Instance Number</caption>
<helpitem id="common.InstanceNumberCreate"/>
<value type="string" maxlength="2" regexp="[0-9]{2}" minlength="2">00</value>
</field></input></inputgroup><inputgroup id="ID_22"> <caption><![CDATA[Java Message Server Port]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_23"><field enabled="true" highlight="false" sid="scsMSPortInternal">
<caption>Internal Java Message Server Port</caption>
<helpitem id="common.InternalMessagePort"/>
<value type="numeric" maxlength="5" min="1025" max="65535">3900</value>
</field></input></inputgroup><inputgroup id="ID_24"> <caption><![CDATA[Enqueue Replication Server Instance]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_25"><field enabled="true" highlight="false" sid="ersInstanceNumber">
<caption>Number of the ERS Instance</caption>
<helpitem id="common.InstanceNumberCreate"/>
<value type="numeric" maxlength="2" max="99" minlength="2">10</value>
</field></input><input id="ID_26"><field enabled="true" highlight="false" sid="ersVirtualHostname">
<caption>ERS Instance - Virtual Host Name</caption>
<helpitem id="common.virtualHostname"/>
<value type="string" maxlength="60" minlength="1">SAPJEP</value>
</field></input></inputgroup><inputgroup id="ID_27"> <caption><![CDATA[Unpack Archives]]></caption><selector enabled="true"><bool><boolvalue><false/></boolvalue></bool></selector><input id="ID_28"><table enabled="true" fixedrows="true" sid="askUnpack">
<caption>Archives to Be Unpacked</caption>
<column enabled="true" type="check" numeric="false" upper="false" name="unpack">
<caption>Unpack</caption>
<helpitem id="common.Unpack"/>
<value type="string">false</value>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="path">
<caption>Archive</caption>
<helpitem id="common.UnpackArchive"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="codepage">
<caption>Codepage</caption>
<helpitem id="common.UnpackArchiveCodepage"/>
</column>
<column enabled="false" type="field" numeric="false" upper="false" name="destination">
<caption>Destination</caption>
<helpitem id="common.UnpackArchiveDestination"/>
</column>
<column enabled="true" type="file" numeric="false" upper="false" name="ownPath">
<caption>Downloaded To</caption>
<helpitem id="common.UnpackArchiveDownload"/>
<value type="string"/>
</column>
<row rowId="0">
<boolvalue>
<true/>
</boolvalue>
<value>DBINDEP\SAPEXE.SAR</value>
<value>Unicode</value>
<value>E:\usr\sap\JEP\SYS\exe\uc\NTAMD64</value>
<value/>
</row>
</table></input></inputgroup></review><button sid="btPREV" default="false" enabled="false" ><caption>< &Back</caption><action>ACTION_PREV</action><tooltiphelp><![CDATA[]]></tooltiphelp></button><button sid="btNEXT" default="true"><caption>&Next</caption><action>ACTION_NEXT</action><tooltiphelp><![CDATA[Continue processing]]></tooltiphelp></button><button sid="btEDIT"><caption>&Revise</caption><action>ACTION_EDIT</action><tooltiphelp><![CDATA[Edit input values]]></tooltiphelp></button><button sid="btDETAIL" default="true"><caption>Show &Detail</caption><action>ACTION_CBD_DETAIL</action><tooltiphelp><![CDATA[Show all input values]]></tooltiphelp></button></dialog></sapinstgui>
TRACE      2015-03-18 11:30:32.161 [iaxxgenimp.cpp:1031]
          CGuiEngineImp::acceptAnswerForBlockingRequest
Waiting for an answer from GUI
TRACE      2015-03-18 11:30:33.330 [sixxbsummary.cpp:83]
          CSiSummaryContainer::setDocument(const iXMLDocument & doc)
<?xml version="1.0" encoding="utf-8"?>
<sapinstguiresp>
<action>ACTION_NEXT</action>
<dialog sid="diReviewDialog">
<review id="review_controll"/>
</dialog>
</sapinstguiresp>
TRACE      2015-03-18 11:30:33.331 [iaxxdlghnd.cpp:96]
          CDialogHandler::doHandleDoc()
CDialogHandler: ACTION_NEXT requested
TRACE      2015-03-18 11:30:33.331 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:33.356 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\keydb.xml
TRACE      2015-03-18 11:30:33.375 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:33.375 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:33.429 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\statistic.xml
TRACE      2015-03-18 11:30:33.500 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:33.773
Status of Step |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_First_Steps|ind|ind|ind|ind|firstSteps|0|NW_Update_DLLs|ind|ind|ind|ind|dll|0|ntpatch2 is not OK. So we have to restart at this point.
TRACE      2015-03-18 11:30:33.773
Switch to STANDARD mode
TRACE      2015-03-18 11:30:33.773 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:33.801 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\keydb.xml
TRACE      2015-03-18 11:30:33.866 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:33.868 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:33.926 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\statistic.xml
TRACE      2015-03-18 11:30:34.67 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
INFO      2015-03-18 11:30:34.67 [csistepexecute.cpp:1024]
Execute step ntpatch2 of component |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_First_Steps|ind|ind|ind|ind|firstSteps|0|NW_Update_DLLs|ind|ind|ind|ind|dll|0
TRACE      2015-03-18 11:30:34.084
Call block: NW_Update_DLLs_ind_ind_ind_ind
    function: NW_Update_DLLs_ind_ind_ind_ind_SubComponentContainer_ntpatch2_Preprocess
is validator: false
TRACE      2015-03-18 11:30:34.115 [csistepexecute.cpp:1079]
Execution of preprocess block of |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_First_Steps|ind|ind|ind|ind|firstSteps|0|NW_Update_DLLs|ind|ind|ind|ind|dll|0|ntpatch2 returns TRUE
TRACE      2015-03-18 11:30:34.127
Call block: NW_Update_DLLs_ind_ind_ind_ind
    function: NW_Update_DLLs_ind_ind_ind_ind_SubComponentContainer_ntpatch2
is validator: false
TRACE      2015-03-18 11:30:34.127
NW_Update_DLLs.installDLLs(false)
TRACE      2015-03-18 11:30:34.127
NW_Update_DLLs.installDLLs() already run
TRACE      2015-03-18 11:30:34.153
The step ntpatch2 with key |NW_FirstClusterNode_Java|ind|ind|ind|ind|0|0|NW_FirstClusterNode|ind|ind|ind|ind|NW_FirstClusterNode|0|NW_First_Steps|ind|ind|ind|ind|firstSteps|0|NW_Update_DLLs|ind|ind|ind|ind|dll|0 has been executed successfully.
INFO      2015-03-18 11:30:34.154 [synxccuren.cpp:887]
          CSyCurrentProcessEnvironmentImpl::setWorkingDirectory(const CSyPath & C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1)
          lib=syslib module=syslib
Working directory changed to C:/Program Files/sapinst_instdir/NW740SR2/SYB/INSTALL/HA/JAVA/MSCS-NODE1.
TRACE      2015-03-18 11:30:34.187 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:34.200 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\keydb.xml
TRACE      2015-03-18 11:30:34.255 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
TRACE      2015-03-18 11:30:34.256 [kdxxctaco.cpp:93]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile start ...
TRACE      2015-03-18 11:30:34.283 [kdxxctaco.cpp:121]
          CKdbTableContainerImpl::syncToContainerFile
after creating out stream for C:\Program Files\sapinst_instdir\NW740SR2\SYB\INSTALL\HA\JAVA\MSCS-NODE1\statistic.xml
TRACE      2015-03-18 11:30:34.425 [kdxxctaco.cpp:155]
          CKdbTableContainerImpl::syncToContainerFile
CKdbTableContainerImpl::syncToContainerFile stop ...
INFO      2015-03-18 11:30:34.426 [csistepexecute.cpp:1024]
Execute s

Hello Arjun,
Have you executed any other installation prior this attempt?
It seems there are unfinished installations on this server. If this is the case, run the SWPM to uninstall the unfinished installation. Then, execute the installation once again.
Also, make sure all IPs are corrects in the DND and host files. There were cases in which the IPs were not properly configured, or maybe a typo.
Regards,
Henrique Girardi
SAP Active Global Support
#2081285 - How to enter good search terms to an SAP search?
https://service.sap.com/sap/support/notes/2081285
SWPM Troubleshooting documents:
http://scn.sap.com/docs/DOC-62646

OIM 11g High Availability Deployment

Hi Experts,
I'm deploying OIM 11g in High Available schema, following Oracle docs: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF, I have succesfully installed and configured OIM & SOA in weblogic domain on 'OIMHOST1', trying to propagate the configuration from 'OIMHOST1' to 'OIMHOST2' I have packed (using pack.sh) the domain on 'OIMHOST1' and unpacked (using unpack.sh) it to 'OIMHOST2' so I have updated the NodeManager executing setNMProps.sh and finally Ihave started the NodeManager. In order to Test everything is fine and following the documentation I'm traying to perform the following steps, but I'm not succeed
I'M MUST TO SAY THAT I'M RUNNING ON SINGLE STANDARD EDITION DB INSTANCE AND NOT RAC AS MENTIONED IN ORACLE DOCS, PLEASE CLARIFY IF RAC IS REQUIRED, FOR NOW I'M IN DEVELOPMENT ENVIRONMENT, SO I THINK RAC IS NOT REQUIRED FOR NOW, PLEASE CLARIFY
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1&
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console.
Here its not possible start AdminServer on OIMHOST2, first of all, it looks like boot.properties file under WLS_OIM_DOMAIN_HOME/servers/AdminSever/security is not valid, the first time I try to execute startWeblogic.sh script, it ask for username/password, I have updated boot.properties (vi boot.properties) and manually set clear username and password, this time startWeblogic.sh script passed this stage, but fails:
<Error> <util.install.help.BuildMasterHelpSet> <BEA-000000> <IOException ioe java.io.IOException: No such file or directory>
<Error> <oracle.adf.share.config.ADFMDSConfig> <BEA-000000> <MDSConfigurationException encountered in parseADFConfigurationMDS-01330: unable to load MDS configuration document
MDS-01329: unable to load element "persistence-config"
MDS-01370: MetadataStore configuration for metadata-store-usage "writeable" is invalid.
MDS-00503: The metadata path "/u01/app/oracle/product/Middleware/user_projects/domains/IDMDomain/sysman/mds" does not contain any valid directories.
I have verified that this directory "mds" does not exists, as reported by the IOException, in OIMHOST2, but it exists in OIMHOST1. from here its not possible for me following Oracle's documentation, I test this starting Adminserver in OIMHOST1, and starting WLS_SOA2 and WLS_OIM2 managed servers from OIMHOST1 AdminServer console, I have tested 2 ways:
1.- All managed servers in OIHOST1 are shutdown, for this, managed servers in OIMHOST2 works as expected
2.- All managed servers in OIMHOST1 are RUNNING, for this, first I have started SOA2 managed server, after that, I have fired OIM2 managed server, when it finish boot process the following message appears in server's output:
<Warning> <org.quartz.impl.jdbcjobstore.JobStoreCMT> <BEA-000000> <This scheduler instance (servername.domainname1304128390936) is still active but was recovered by another instance in the cluster. This may cause inconsistent behavior.>
Start the WLS_SOA2 managed server using the WebLogic Administration Console.
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started.
8.9.3.9 Validate the Oracle Identity Manager Instance on OIMHOST2
Validate the Oracle Identity Manager Server instance on OIMHOST2 by bringing up the Oracle Identity Manager Console using a web browser.
The URL for the Oracle Identity Manager Console is:
http://oimvhn2.mycompany.com:14000/oim
Log in using the xelsysadm password.
Your help is highly apprecciated
Regards
Juan

Hi Vaasu,
I have succeeded deploying OIM in HA, just now my customer and I are working on the installation of webtier. Now I have a better understand about HA concepts and the way weblogic works -really nice, but little tricky-
All the magic about HA is configuring properly the network interfaces in each Linux boxes (our case) so, first of all you need to create 2 new floating IP's on each Linux boxes (google: how to create virtual Ip in linux, if you don't know) clone and modify your 'eth0' network script to create the virtual IPs
Follow the procudere in the HA guide: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF
create DB schemas with RCU
install weblogic
install SOA
patch SOA
install IAM
---if you are working on a virtual machine is good idea to take a snapshot here---
Create and configure the weblogic domain (special attentention whe configuring the cluster), see step 13 of 8.9.3.2 Creating and Configuring the WebLogic Domain for OIM and SOA on OIMHOST1, here you need to cofigure:
For the oim_server1 entry, change the entry to the following values:
Name: WLS_OIM1
Listen Address: the IP that is confured in eth0:1 of Linux box1
Listen Port: 14000
For the soa_server1 entry, change the entry to the following values:
Name: WLS_SOA1
Listen Address: the IP configure on eth0:2 of Linux box1
Listen Port: 8001
For the second OIM Server, click Add and supply the following information:
Name: WLS_OIM2
Listen Address: the IP configured on eth0:1 of Linux box2
Listen Port: 14000
For the second SOA Server, click Add and supply the following information:
Name: WLS_SOA2
Listen Address: the IP configured on eth0:2 of Linux box2
Listen Port: 8001
Click Next.
On Step 16 ensure you are using the UNIX tab to configure the machines, also ensure that for machine1 you use the IP configured on the eth0 interface of Linux box1, the same for machine2
please confirm you have performered 8.9.3.3.2 Update Node Manager on OIMHOST1
if everything is ok you must be able to start the AdminServer as described in the guide.
configure OIM: 8.9.3.4.2 Running the Oracle Identity Management Configuration Wizard, in my case I don't need LDAPsync, I have skipped this section, if you configure properly OIM, then you mus perform 8.9.3.5 Post-Configuration Steps for the Managed Servers
resrtar AdminServer then from the weblogic console, start OIM and SOA if node manager is properly configured SOA and OIM must run properly, update deployment mode and coherence as described in the guide and verify that OIM run perfectly in Linux box1.
Propagate OIM from Linux box1 to Linux box2 as described in the guide, using pack and unpack (you MUST use the same filesystem directory structure on both Linux boxes)
Update and start NodeManager as described in the guide
VERY IMPORTAN OBSERVATION
the guide say:
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
JUAN OBSERVATION:
IS NOT POSSIBLE TO START OR STOP ADMINSERVER ON HOST2 SINCE ADMIN SERVER WERE CONFIGURED TO LISTEN ON THE IP ADDRES OF eth0 INTERFACE ON HOST1, SO, ITS NOT POSSIBLE TO PLAY IT ON HOST2, I THINK AND ADDITIONAL PROCEDURE SHOULD BE FOLLOWED TO CONFIGURE ADMINSERVER IN HA IN A ACTIVE-PASSIVE MODE
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1& -----NOT APPLICABLE
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console. -----NOT APPLICABLE
Start the WLS_SOA2 managed server using the WebLogic Administration Console. ----START SOA2 FROM THE CONSOLE RUNNING ON HOST1, IT DOESN'T MATTER
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started. ------ START OIM2 FROM THE CONSOLE RUNNING ON HOST1
HERE YOU MUST BE ABLE TO LOGIN TO OIM2 SERVER AS DESCRIBED IN THE GUIDE, YOU DON'T NEED TO EXECUTE config.sh SCRIPT THIS SHOULD WORK AS DESCRIBED.
Server migration should work straight-forward if you have configured the floating IPs as described, I have not configured the persistence yet since my customer does not have the skills to share a storage.
I hope this helps, and feel free to comment or complement.
By the way, did you know how to set up a valid SSL certificate in Windows 2003 server??? I need it to test and Exchange 2007 I'm tryin to integrate
Regards
Juan

IPS 4240 software 6.2(3)E4

Hello!
I have a sensor IPS-4240 which holds IPS software 6.2(3)E4. Right now we havn't got a license.
With the device wh have almost 100% cpu usage all the time:
show statistics host
General Statistics
   Last Change To Host Config (UTC) = 27-Dec-2010 14:51:19
   Command Control Port Device = Management0/0
Network Statistics
Memory Usage
   usedBytes = 1426128896
   freeBytes = 558419968
   totalBytes = 1984548864
Summertime Statistics
   start = 02:00:00 UTC Sun Mar 27 2011
   end = 03:00:00 UTC Sun Oct 30 2011
CPU Statistics
   Usage over last 5 seconds = 100
   Usage over last minute = 100
   Usage over last 5 minutes = 100
Memory Statistics
   Memory usage (bytes) = 1426128896
   Memory free (bytes) = 558419968
From service accont I see that only one process eats CPU - mainApp.
I even created addition virtual sensor vs1 where I have disabled all signatures. It gave me no result.
Situation can be changed for a while after the sensor's reboot, but not for long time.
show interfaces doesn't show a lot of input traffic too.
Event log contains only following warnings:
evError: eventId=1293461883161643337 severity=warning vendor=Cisco
originator:
    hostId: XXXXXX
    appName: notification
    appInstanceId: 409
time: 2011/01/19 15:22:56 2011/01/19 21:22:56 GMT+06:00
errorMessage: name=errWarning - the subscription lost data [IdsEventStore::readSubscription()]
What can be a problem? How can I reduce CPU usage?
With hope to resolve the issue

It would be difficult to pin point what the exact issue is with the high CPU just by the information provided in the post. It seems that the mainApp is causing the high CPU, however, it is worth investigating further. I would suggest that you log a Cisco TAC case so further investigation can be performed.
Alternatively, you can try to upgrade the software to the latest version of 7.0.4(E4) which has engine improvement.

Multi Site SQL High Availability group

Hi,
We have our primary Data Centre where we have 2 MS SQL 2012 Enterprise Servers and 2 SharePoint 2013 Enterprise servers.
We have SQL High Availability group implemented on our primary Site (Site A)
Site A has subnet of 192.168.0.0.
We recently added a new DR Site (Site B). Site B we have MS SQL 2012 Enterprise Servers. Site B have a subnet of
172.1.1.0
Both sites are connected via a VPN Tunnel. MS SQL 2012 Enterprise Server on Site B has been added in have SQL High Availability
group of Site A.
SQL High Availability group have 2 IPs 192.168.0.32 and 172.1.1.32. SQL Listener have 2 IPs 192.168.0.33 and 172.1.1.33
We want to make sure that if Site A completely down then Site B work as an active Site. But when Site A down we are unable
to ping High Availability group and Site B is unable to work as active site. SQL and SharePoint services are completely down.
Site A has AD(Primary Domain Controller) and Site B has ADC(Additional Domain Controller).
Site A has witness server.
We are using Server 2012 Data Centre
Please suggest.
Farooq

SharePoint is not the same as any other applications. The DR site has to be a completely different farm from your production. This means that the SharePoint_AdminContent and config databases on both farms are different and should not be included in the Availability
Group (they do not support asynchronous Availability Group.) Only content databases and other SharePoint databases supported in an Availability Group should be included as per this
TechNet article. Have a look at this
blog post for your networking configuration.
The reason your Windows cluster service goes down in the DR data center when the when your primary data center goes down is because the cluster has no majority votes. You have 4 available votes in your cluster - 3 in the primary data center in the form of
the 2 Availability Group replicas and the witness server and 1 in the DR data center. If the Windows cluster does not have majority of votes, it automatically shuts down the cluster. This is by design. That is why when this situation happens, you need to force
the cluster to start without a quorum as described in
this article (Windows Server 2012 R2 introduced the concept of dynamic witness and dynamic quorum to address this concern.) By default, the IP address of the Availability Group listener name will be registered on all of the DNS servers if the cluster is
running Windows Server 2012 and higher (this is the RegisterAllProvidersIP property that Samir mentioned.) However, you need to flush the DNS cache on the SharePoint web and application servers and point them to the correct IP address on the DR server after
failover. This is because the default TTL value of the Availability Group listener name is 20 minutes.
It is important to define your DR strategies and objectives when designing the architecture to make sure that the solution will meet your goals. This will also help you automate some of the processes in the DR data center when failover or a disaster occurs.
Edwin Sarmiento SQL Server MVP | Microsoft Certified Master
Blog |
Twitter | LinkedIn
SQL Server High Availability and Disaster Recover Deep Dive Course

2xC350 in High Availability Mode (Cluster Mode)

Hello all,
first of all, i`m a newbie in ironport. So Sorry for my basic questions, but i can`t find anything in the manuals.
I want to configure the two boxes in High Availability Mode (Cluster Mode) but i don`t understand the ironport cluster architecture.
1) in machine mode i can configure IP-Adresses -> OK
2) in Clustermode i can configure listeners and bind them to a IP-Address -> OK
But how works the HA?
A) Should i configure on both boxes the same IP to use one MX Record? And if one box is down the other takes over?
B) Or should i configure different IPs and configure two MX Records?
And if one box is down the second MX will be used.
Thanks in advance
Michael

The ironport clustering is for policy distribution only - not for smtp load mgmt.
A) Should i configure on both boxes the same IP to use one MX Record? And if one box is down the other takes over?
Could do - using NAT'ing on the f/w but few large business take this approach today.
Many/most large businesses use a HW loadbalancer like an F5, Foundry ServerIron, etc. The appliances themselves would be set up on seperate IP addresses. Depending on the implementation requirements, the internal IP address could be a public IP or a private IP.
B) Or should i configure different IPs and configure two MX Records?
And if one box is down the second MX will be used.
If you set up two boxes, even with a different MX preference, mail will be delivered to both MX records. There are broken SMTP implementations that get the priority backwards, and many spammers will intentionally attempt to exploit less-restrictive accept rules on secondary MX recievers and will send to them first.

New to IPS 4240 - What else can I use to manage it?

I have just purchased a Cisco IPS 4240 and have it up and running. Have been using the IEV to view IPS information and that works ok. The VMS 2.2 that came included with the IPS will not work with the current Cisco works (LMS 2.5) installation that we have.
My question is, is there any other tool besides the IEV and the VMS 2.2 that I can use to mange/monitor my IPS? the IEV seems so limited.
I have downloaded the newer VMS from the Cisco site and am planning to test that this comming week, but wanted to know ahead of time if I needed to waste my time with this tool or not.
Thanks!

The latest CSMARS release is promising and honestly the netforensics solution offered by Cisco probably wouldn't be a good fit for the op, but I think Cisco needs to rething pushing the MARS in leui of everything else. As a previous customer of netforensics, and now a user of CSMARS...there are definitely many things that netforensics does better than CSMARS.
My biggest beef with CSMARS is the seemingly casual way in which it treats time and "raw messages". IMHO, these should be sacred to any SIM. I can elaborate, but for the sake of brevity I'll just give a couple examples:
The signature name reported in the "raw message" that MARS makes available is not always correct. Also, custom signature events report as "unknown" in the "raw message". Clearly this is not a "raw message" by any reasonable interpretation...MARS is writing bits that never existed in the original message.
the event contextual information is very often truncated. If you rely on this a great deal, the MARS probably isn't for you. There's also no interface for decoding it, requiring a cut-and-paste into your favorite decoder.
Believe me, I could go on. On the bright side, the MARS is showing promise...I was able to cross off my list quite a few issues after the latest upgrade.
Matt

IPS 4240 - additional card

Hi,
Does anybody know, when will be available 4xFE cards for IPS 4240 (for total 8 interfaces)?
Regards,
Krzysztof

Cisco IDS 4250 is supported in version 5.0 Inline if the 4FE, Gig TX PCI card, two of the SX PCI cards, or the XL card is installed. Cisco IPS 4240 is supported in version 5.0, Inline supported (it has four sensing interfaces). IPS 4255 is supported in version 5.0, Inline is supported (it has four sensing interfaces). IDSM-2 is supported in version 5.0, Inline supported (it has two sensing interfaces).
http://www.cisco.com/en/US/netsol/ns498/netqa0900aecd8029e8de.html

IPS 4240 upgrade

hi,
i am running version 6.2 on ips 4240. could please someone let me have the procedure to upgrade the OS to 7.1.8 please? is this upgrade same as cisco IOS using tftp ?
what is the procedure to upgrade ? is it first os and then sensor ? cold you please post the commands ?
Thanks

Get the 7.18 upgrade pkg file from here:
http://software.cisco.com/download/release.html?mdfid=283674966&flowid=24482&softwareid=282549759&release=7.1(8)E4&relind=AVAILABLE&rellifecycle=&reltype=latest
The readme is available from the same link.
In order to apply 7.1(8), the minimum required running version is 6.0(6) on 42xx series sensors, which you have, so you can simply apply the upgrade pkg. Apply it via IDM is probably the easiest way - or check the readme for CLI instructions.
7.1(8) is packaged with signature level s735 - if you have a more recent level, that will be preserved, if not, you will end up @ s735. Then you can update the signature package to the most current level from here:
http://software.cisco.com/download/type.html?mdfid=283674966&flowid=24482

IPS 4240 Inline deployment.

Hi,
I am trying to deploy IPS 4240 with Software version 4.1. My query is, will this version support inline prevention? If yes, what are the deployment & sensor interface configuration considerations. I believe the new 5.0 version supports this feature. But the documentation on v4.x is not clear.
Thanks in advance.
Ajay Dand

Inline is implemented in software version 5.0.
The upgrade image is available at:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips5
All IPS software is available at:
http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

Advice Requested - High Availability WITHOUT Failover Clustering

We're creating an entirely new Hyper-V virtualized environment on Server 2012 R2. My question is: Can we accomplish high availability WITHOUT using failover clustering?
So, I don't really have anything AGAINST failover clustering, and we will happily use it if it's the right solution for us, but to be honest, we really don't want ANYTHING to happen automatically when it comes to failover. Here's what I mean:
In this new environment, we have architected 2 identical, very capable Hyper-V physical hosts, each of which will run several VMs comprising the equivalent of a scaled-back version of our entire environment. In other words, there is at least a domain
controller, multiple web servers, and a (mirrored/HA/AlwaysOn) SQL Server 2012 VM running on each host, along with a few other miscellaneous one-off worker-bee VMs doing things like system monitoring. The SQL Server VM on each host has about 75% of the
physical memory resources dedicated to it (for performance reasons). We need pretty much the full horsepower of both machines up and going at all times under normal conditions.
So now, to high availability. The standard approach is to use failover clustering, but I am concerned that if these hosts are clustered, we'll have the equivalent of just 50% hardware capacity going at all times, with full failover in place of course
(we are using an iSCSI SAN for storage).
BUT, if these hosts are NOT clustered, and one of them is suddenly switched off, experiences some kind of catastrophic failure, or simply needs to be rebooted while applying WSUS patches, the SQL Server HA will fail over (so all databases will remain up
and going on the surviving VM), and the environment would continue functioning at somewhat reduced capacity until the failed host is restarted. With this approach, it seems to me that we would be running at 100% for the most part, and running at 50%
or so only in the event of a major failure, rather than running at 50% ALL the time.
Of course, in the event of a catastrophic failure, I'm also thinking that the one-off worker-bee VMs could be replicated to the alternate host so they could be started on the surviving host if needed during a long-term outage.
So basically, I am very interested in the thoughts of others with experience regarding taking this approach to Hyper-V architecture, as it seems as if failover clustering is almost a given when it comes to best practices and high availability. I guess
I'm looking for validation on my thinking.
So what do you think? What am I missing or forgetting? What will we LOSE if we go with a NON-clustered high-availability environment as I've described it?
Thanks in advance for your thoughts!

Udo -
Yes your responses are very helpful.
Can we use the built-in Server 2012 iSCSI Target Server role to convert the local RAID disks into an iSCSI LUN that the VMs could access? Or can that not run on the same physical box as the Hyper-V host? I guess if the physical box goes down
the LUN would go down anyway, huh? Or can I cluster that role (iSCSI target) as well? If not, do you have any other specific product suggestions I can research, or do I just end up wasting this 12TB of local disk storage?
- Morgan
That's a bad idea. First of all Microsoft iSCSI target is slow (it's non-cached @ server side). So if you really decided to use dedicated hardware for storage (maybe you do have a reason I don't know...) and if you're fine with your storage being a single
point of failure (OK, maybe your RTOs and RPOs are fair enough) then at least use SMB share. SMB at least does cache I/O on both client and server sides and also you can use Storage Spaces as a back end of it (non-clustered) so read "write back flash cache
for cheap". See:
What's new in iSCSI target with Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn305893.aspx
Improved optimization to allow disk-level caching
Updated
iSCSI Target Server now sets the disk cache bypass flag on a hosting disk I/O, through Force Unit Access (FUA), only when the issuing initiator explicitly requests it. This change can potentially improve performance.
Previously, iSCSI Target Server would always set the disk cache bypass flag on all I/O’s. System cache bypass functionality remains unchanged in iSCSI Target Server; for instance, the file system cache on the target server is always bypassed.
Yes you can cluster iSCSI target from Microsoft but a) it would be SLOW as there would be only active-passive I/O model (no real use from MPIO between multiple hosts) and b) that would require a shared storage for Windows Cluster. What for? Scenario was
usable with a) there was no virtual FC so guest VM cluster could not use FC LUs and b) there was no shared VHDX so SAS could not be used for guest VM cluster as well. Now both are present so scenario is useless: just export your existing shared storage without
any Microsoft iSCSI target and you'll be happy. For references see:
MSFT iSCSI Target in HA mode
http://technet.microsoft.com/en-us/library/gg232621(v=ws.10).aspx
Cluster MSFT iSCSI Target with SAS back end
http://techontip.wordpress.com/2011/05/03/microsoft-iscsi-target-cluster-building-walkthrough/
Guest
VM Cluster Storage Options
http://technet.microsoft.com/en-us/library/dn440540.aspx
Storage options
The following tables lists the storage types that you can use to provide shared storage for a guest cluster.
Storage Type
Description
Shared virtual hard disk
New in Windows Server 2012 R2, you can configure multiple virtual machines to connect to and use a single virtual hard disk (.vhdx) file. Each virtual machine can access the virtual hard disk just like servers
would connect to the same LUN in a storage area network (SAN). For more information, see Deploy a Guest Cluster Using a Shared Virtual Hard Disk.
Virtual Fibre Channel
Introduced in Windows Server 2012, virtual Fibre Channel enables you to connect virtual machines to LUNs on a Fibre Channel SAN. For more information, see Hyper-V
Virtual Fibre Channel Overview.
iSCSI
The iSCSI initiator inside a virtual machine enables you to connect over the network to an iSCSI target. For more information, see iSCSI
Target Block Storage Overviewand the blog post Introduction of iSCSI Target in Windows
Server 2012.
Storage requirements depend on the clustered roles that run on the cluster. Most clustered roles use clustered storage, where the storage is available on any cluster node that runs a clustered
role. Examples of clustered storage include Physical Disk resources and Cluster Shared Volumes (CSV). Some roles do not require storage that is managed by the cluster. For example, you can configure Microsoft SQL Server to use availability groups that replicate
the data between nodes. Other clustered roles may use Server Message Block (SMB) shares or Network File System (NFS) shares as data stores that any cluster node can access.
Sure you can use third-party software to replicate 12TB of your storage between just a pair of nodes to create a fully fault-tolerant cluster. See (there's also a free offering):
StarWind VSAN [Virtual SAN] for Hyper-V
http://www.starwindsoftware.com/native-san-for-hyper-v-free-edition
Product is similar to what VMware had just released for ESXi except it's selling for ~2 years so is mature :)
There are other guys doing this say DataCore (more playing for Windows-based FC) and SteelEye (more about geo-cluster & replication). But you may want to give them a try.
Hope this helped a bit :)
StarWind VSAN [Virtual SAN] clusters Hyper-V without SAS, Fibre Channel, SMB 3.0 or iSCSI, uses Ethernet to mirror internally mounted SATA disks between hosts.

SharePoint Foundation 2013 - Can we use the foundation for intranet portal with high availability ( medium farm)

Today I had requirement, where we have to use the SharePoint Foundation 2013 (free version) to build an intranet portal ( basic announcement , calendar , department site , document management - only check-in check-out / Version).
Please help me regarding the license and size limitations. ( I know the feature comparison of Standard / Enterprise) I just want to know only about the installation process and license.
6 Server - 2 App / 2 Web / 2 DB cluster ( so total license 6 windows OS license , 2 SQL Server license and Guess no sharepoint licenes)

Thanks Trevor,
Is load balance service also comes in free license... So, in that case I can use SharePoint Foundation 2013 version for building a simple Intranet & DMS ( with limited functionality). And for Workflow and content management we have to write code.
Windows Network Load Balancing (the NLB feature) is included as part of Windows Server and would offer high availability for traffic bound to the SharePoint servers. WNLB can only associate with up to 4 servers.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

IPS 4240 High Availability?

Similar Messages

Maybe you are looking for