ISE question about switches

I am implementing ISE and have run into several locations that have used consumer brand 4 ports switches to connect multiple workstations on one cable.  I realize there is a list of supported Cisco switches for ISE, but I was wondering if anyone has used a lower end Cisco or other vendor switch  (i.e. Cisco SG200-08 or SF300-08) to do basic authentication against ISE as it relates to enabling the port once the 802.1x authenitcation is passed?
Realize this is a bit vague, just looking for anyone with practical experience with this.
Thanks

I have not configured dot1x for the mentioned switches, if the switches do support dot1x you should be able to do basic authentication. If there are multiple endpoints on the same port, you should use the Multi-Auth host mode on switchport. Also you will have to choose an authentication method that is supported by the endpoints.
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps11229/data_sheet_c78-634369.html
• Network security:  Cisco 200 Series switches provide basic security and network management  features you need to maintain a level of security for your business,  keep unauthorized users off the network, and protect your business data.  The switches provide integrated network security to reduce the risk of a  security breach, with IEEE 802.1X port security to control access to  your network.
and
802.1X: RADIUS authentication and accounting, MD5 hash
There wont be CoA and authorization, you may apply manual ACL on switchport for the controlled access.
the answer to your post, yes you should be able to do basic dot1x authentication.
HTH

Similar Messages

  • ISE - Question about the NMAP service

    Hi there,
    I am currently playing around with the updated ISE 1.1 and tried out the new NMAP probe feature.
    Is there any possibility to alter or expand the features of the NMAP implementation in the ISE, like additional scripts etc.
    My main concern is to find a non obtrusive way to gain information about endpoints, without the user to do anything as opposed to opening a web page to ISE for a HTTP probe. So far the NMAP probe helped me a bit with iDevice recognition.
    Any suggestions?
    Thanks!
    Regards,
    Patrick

    Hi Jack,
    what I am looking for is to gain information about devices, which are connected to our network.
    Let's say a device connects. At first I can only get basic information. Is it an Apple device, MS Workstation, VMWare device etc.
    Now I want to dig further and find out, if for example this MS workstation is a WinXP or Win7 client.
    All this should happen under the premise that no user intervention must happen.
    I can achieve this by collecting HTTP probes, but this would require the user to open a web browser first, before anything else works (similar to web authentication) as I have not found another way to push the HTTP traffic to the ISE when not using the RADIUS NAC feature on the WLC.
    Users in the current company WLAN are not required to do this and it should continue.
    Regards,
    Patrick

  • Question about switching from pc to mac

    I am going to be purchasing a new computer in March. I am seriously considering switching to a mac. I've owned a mac before and I obviously have my reasons for wanting to go back...however...I've always been a pc and all of my software is pc based...and a lot of them I no longer have the install discs for. I'm a designer and my main concern is losing the ability to use my software, such as Adobe CS4 because I dont' know if it will be compatible with the mac. My question is, is there a way to transfer my software from my pc to a mac without any external hard drives and without having to buy all new software for the new mac? This is going to be the deciding factor on whether or not I go with a mac instead of a new pc. I really could use some input on this. Thanks so much.

    If you've bought your Mac, be sure to exchange your Windows CS4 license before CS5 comes out. Adobe will only do a cross-platform swap on the current version (which I found out the hard way!)
    Take a look here: http://kb2.adobe.com/cps/405/kb405819.html
    I have heard of a lot of folks having trouble getting a cross-platform swap. Also, don't believe anything an Adobe customer support rep tells you. They are either "misinformed" or they flat-out lie.
    Best of luck!

  • Question about switching DPS accounts and In-App Purchases

    Here comes a tricky one
    I have my app published on Apple using an specific DPS account (aka [email protected]) and I have some in-app purchases into the app that the final users have already bought.
    For some reason, I need to switch the app to use a different DPS account (let's say  [email protected]) and I need to recompile the app and make it available on App Store (Apple Account will be the same one). Concerning the folios, I can upload them again with the same product ID as the older ones and delete the older folios from the older account.
    Question is:  What would happen to my In-App Purchases? Will I be able to restore my purchases if I have a new app with a different account? Will Adobe allow to use the same Product ID for another folio even if it was used previously?
    Hope you can help me out with this.

    Phone is now fixed and because the game was saved to my game centre, it loaded with all purchases. So I'm thinking that as long as the game is saved to game centre, it will reload as it was previously.

  • Newbie question about switch statement

    Lets say you have a loop and inside the loop you have a switch statement, how do you BREAK out of the outer loop?
    for (i=0....) {
    switch {
    case 11:
    .... some stuff
    break; <==== HOW DO I BREAK OUT OF THE for loop here?

    In standard C and standard C++ the break statement terminates the nearest enclosing loop and only that loop; i.e. control transfers to the first statement following the loop. I think there are C or C++ extensions that allow loop tags which may be used with a break to specify which loop to drop through, but I don't think these are supported by gcc, and they would certainly be very non-portable.
    There are several common ways to drop out of one or more outer loops. In many cases, there's nothing else in the loop following the switch so you can simply write
    switch (condition) {
    default:
    case 0:
    break;
    // other case statements here
    break;
    Else you can declare a loop control var and use the continue statement like this:
    for (i=0; i<jMax && !bDone; i++) {
    switch (condition) {
    default:
    case 0:
    bDone++; continue;
    // other case statements
    If you need to escape several loops and/or don't want to use loop control vars, you might consider structuring the code so you can use return to terminate the entire function. In the worst case of a very complex structure that you don't know how to simplify with a helper function, you can always resort to a goto:
    switch (condition) {
    default:
    case 0:
    goto escape;
    // other case statements here
    // remainder of code inside nested loops here
    escape: <first statement following the outermost loop>;
    Note that the statement following the escape label is always executed; i.e. when execution skips the goto it's as if the statement following escape was unlabeled. Use goto sparingly of course, since it's an artifact of unstructured programming. But when you really need a goto, it can make your code much easier to maintain.

  • Question about "switch" statement

    hi all I am new to Java programming..
    I have one problem that is
    I would like to use switch statement like below
    in the switch statement can we use only integers ?
    but i am using string it is not supporting ..
    for strings like below what I have to do...
    String temp = "str2";
    switch(temp){
    case "str1":
    case "str2":
    case "str3":
    case "str4":
    please send the solution if anyone knows
    thanks

    What do you mean by a smart hash?At least smarter than String.hashCode ().
    Don't think so - char, byte, short, or int.You're correct - seems I've got to test things before I post. So it's safe to say that a switch works on anything that can be treated as an int?

  • Question about switching videos.

    Hello everyone!
    I would like to make a video player with the ability to
    switch between two different
    video files with a keystroke. It must loop the file forever
    until it reads the keystroke to switch.
    How can i do that? Dont have great experience with flash, im
    using flash cs3 on a mac.
    If someone could point me somewhere or explain i would be
    grateful.
    Thanks in advance

    lyons00,
    The legality of copying DVDs to another format, sometimes called "ripping", is a murky area legally, and outside the Terms of Use for Apple Discussions. Essentially when your purchase a movie, your purchase a license to play it at home on a DVD player. Playing it in front of an audience, or changing the format of it require a different license from whomever holds the distribution rights.
    Thank you,
    Nathan C.

  • (Agilent E3631A) Question about switching between channels

    Hi!
    I have got a problem with my Agilent E3631A. I want to control the machine into switching between +10V and -10V at given intervals of time. This should of course be achieved by switching between channel 2 and 3, but here the big problem arises: When the (+) and (-) are connected through the same wire, a current starts to pass from (-) to (+). I want to be able to completely close the channel that is not used a the time, thus making sure that the machine isn't short-circuiting the set up.
    Does anyone know how to "seal off" a channel?

    Hi Simon,
    as far as I know the 3 outputs of the power supply are independent.
    Have you tried to disable channel 3 through an SCPI command (or a driver VI) while enabling channel 2 and vice versa as you need it?
    I thought if disabling an output this one is then completely cut off, maybe it helps.
    Regards,
    gedi
    Regards,
    gedi

  • A question about switching between streams

    Hi,
    I am using a set of streams and readers in the following format to read from an ascii / binary mixed file. Once i read past all the ascii I break out of the loop and then use the data input stream to read som four byte floats from the binary data.
    If you look at the extract from the file that lase piece of ascii that I read in is EST_Header_End. It is then followed by the floats. I know that the .. following the EST_Header_End is carraige return and new line. My problem is that when i start reading the floats i get NaN even though i know for a fact that the values following the .. are floats.The second float that it read in is definitely 1.0 . I cannot understand why this is happening. Surely if i start using a DataInputStream it should start at the same position as the BufferedReader left off.
    fis = new FileInputStream(fileName);
    bis = new BufferedInputStream(fis);
    //allow a reader from a stream
    isr = new InputStreamReader(bis);
    //read the raw bytes
    dis = new DataInputStream(bis);
    //read the characters and strings
    br = new BufferedReader(isr);EXTRACT FROM FILE
    Channel_10 lpc_N..
    EST_Header_End..
    <..@?...K...>..;>.P.>...>.S:>....4f....}...."=...>...<._@?...K{s.>...>.U.>.L6>..<>....5.....4..0...
    for(int k = 0; k < numFrames; k++){
         System.out.println( "reading track" );
         voice.diphone[index].frame[k].setframeTime(dis.readFloat());
         counter += 4;
         System.out.println( "time " + voice.diphone[index].frame[k].getFrameTime());
         voice.diphone[index].frame[k].setIsVal(dis.readFloat());
         System.out.println("isVal "+ voice.diphone[index].frame[k].getIsVal());
         voice.diphone[index].frame[k].setGain(dis.readFloat());
         System.out.println("isVal "+ voice.diphone[index].frame[k].getGain());
         counter += 4;
         for(int l = 0; l < (numChannels); l++){
              voice.diphone[index].frame[k].setValueLpc((dis.readFloat()),l);
              counter += 4;                               
              System.out.println("LPC coefficents at diphone "+ index +" " +"frame "+ k+" Lpc coefficent "+l+" " + voice.diphone[index].frame[k].getValueLpc(l));
    }

    I assume that you read
    EST_Header_End..
    with the BufferedReader, using readLine().
    The problem is that when doing the readLine() (or any read for that matter) using BufferedReader, it's going to read more data than it needs and store those bytes in the BufferedReaderClass. Then when DataInputStream goes to read, it will not know this and read somewhere down the stream.
    Probably, as unpleasant as this is, you need to layer the DataInputStream on top of the BufferedReader. Or maybe you can do something fancy with mark() and reset() altho, doubtful.
    >
    fis = new FileInputStream(fileName);
    bis = new BufferedInputStream(fis);
    //allow a reader from a stream
    isr = new InputStreamReader(bis);
    //read the raw bytes
    dis = new DataInputStream(bis);
    //read the characters and strings
    br = new BufferedReader(isr);EXTRACT FROM FILE
    Channel_10 lpc_N..
    EST_Header_End..
    <..@?...K...>..;>.P.>...>.S:>....4f....}...."=...>...<.
    @?...K{s.>...>.U.>.L6>..<>....5.....4..0...
    for(int k = 0; k < numFrames; k++){
         System.out.println( "reading track" );
         voice.diphone[index].frame[k].setframeTime(dis.readFlo
    t());
         counter += 4;
    System.out.println( "time " +
    voice.diphone[index].frame[k].getFrameTime());
         voice.diphone[index].frame[k].setIsVal(dis.readFloat()
    System.out.println("isVal "+
    voice.diphone[index].frame[k].getIsVal());
         voice.diphone[index].frame[k].setGain(dis.readFloat())
    System.out.println("isVal "+
    voice.diphone[index].frame[k].getGain());
         counter += 4;
         for(int l = 0; l < (numChannels); l++){
              voice.diphone[index].frame[k].setValueLpc((dis.readFl
    at()),l);
              counter += 4;                               
    System.out.println("LPC coefficents at diphone "+
    + index +" " +"frame "+ k+" Lpc coefficent "+l+" " +
    voice.diphone[index].frame[k].getValueLpc(l));

  • I have a question about switching through spaces.

    I currently have 4 spaces up. I already know that holding control then any arrow key gets you through your customized spaces. I was wondering if there was a way or a software that works with the pad to do such a task. Maybe applying 5 fingures, idk something is something.

    Maybe the feature Mission Control described here will work for you.
    http://www.apple.com/macosx/lion/
    Coming this summer...
    Regards
    Captfred

  • Question about how the Robocopy /B switch works...

    I've been experimenting with robocopy recently, and most switches seem self explanatory for the most part; although I have a question about the /B switch.
    The help says the following:
    /B :: copy files in Backup mode.
    I've checked multiple forums and websites to try and elaborate on this a little more, and from my understanding this switch enables backup mode that essentially gives the ability to change the acls of a file/folder when the account running robocopy does
    not have sufficient privileges, to perform a successful copy.
    My question is, when the acls are changed when using this "backup mode" switch, with the /copyall switch, will the file still retain the same user access that it originally had - or does it change all of the security settings?
    I'm hoping it will somehow change the security settings, create a copy, and retain the same acls as the original - so users can still access necessary files.
    Can someone please explain how this "backup mode" works?
    Thanks in advance.

    This is a very useful thread with a lot of hostility in it.
    I have to agree with Jonathan and hazymat: there are few other forums that will discuss the exact function of /b switch, the TechNet article just says "copies in Backup Mode" (I have the article bookmarked), and when doing a google search, THIS page comes
    up as the top result! Kinda difficult to tell people they should go search, when you are the exact destination of that search, isn't it? ;)
    No offense to anybody working hard to help out here, but this is why sites like Stack Exchange will overshadow every traditional tech forum very soon. More concise question/answer format, more civil, and they actually encourage old questions developing new
    answers! All q&a is cataloged for future reference. Their focus is on being a 'resource'.
    The negativity here is unfortunate, you guys have great potential to be a very helpful resource for people. Who are you trying to be, the guys with all the answers, or the guys who say "get out of here, your answer isn't in here. Go search for it."?
    Regardless, many thanks to jrv! for helping me with my robocopy batch SCRIPT which I just used to create an automated backup! Take care boys. And yes, I just bumped your old-old thread.
    Unfortunately I think you miss the point.  RoboCopy is an application.  It is not a script.  This is a scripting forum.  Many people come here nd never read the forum guidelines and do not ask script related questions.
    The /b switch is documented in RoboCopy help.  Of course it assumes the reader is a trained Windows tech and knows what backup mode is.  It is used by nearly all backup software when backing up a live system..
    ¯\_(ツ)_/¯

  • Few questions about 3750X stack switch

    Dear,
    I have just joined this helpful community. Since I am still a newbie, it is my hope to comprehend through our discussions. I would like to ask few questions about 3750X stack switch:
    What kind of switches are considered as provisioned switch?
    What is the purpose of using provision switch?
    Which advantages does a provision switch provide? If we don't use provision feature, what would be happened?
    Thank you very much. Look forward to reading your replies.

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    Ivan's reference provides the details, but in real world where provisioned switches are nice include: if a switch member fails, that's switch member's configuration is still present and can be used on a like model replacement.
    Also:  for new stack members, being able to provision the new switch stack, before you add it to the stack, save a little time when you add the stack member to the stack.  I.e. you can provision the stack member ahead of time, and then when you add the stack member, as soon as it joins the stack, it has the desired configuration.

  • Just installed iOS6, questions about "iMessage" and other things...

    I've been a satisfied iOS4 user since I bought my iPhone4, but I was forced to install iOS6 tonight in order to download a "free" app. I found a few new icons on the screen along with about 200 percent more "Settings" I'd like to ask some questions about. I'm sure a few of these could be answered by doing a frantic and thorough search through weeks of posts but I'm a little short on time right now.
    First, what exactly is iMessage? Looking at the page for it, I can't see any difference between it and regular text messages. The info page says its to avoid charges, but between my data plan and not being charged for text I don't see where theres any other benefit. The one person I text with the most recently asked me why I had not installed iMessage yet, and didn't have an answer when I asked him why I should. I guess he just wanted to see text replies in blue instead of green.
    In a related bit, flipping through Settings>Messages>Send & Receive I find a "2 addresses" section, with my phone number in there as well as my email under "You can be reached by iMessage at:" and "Start new conversations from:". What good does it do iMessages to have my email address? Does the Mail app handle text as well as email addresses? That seems to be the only explanation, and also very odd to think I'd be trying to text through my Mail app.
    Second, looking through the Settings>Mail I see now that I have an icloud email address as well as the mac.com address I've been desperately hanging on to for the past 10 years, and the me.com address they've been trying to force me into since those came out. (I was happy to see I could delete the me.com address from the phone. I wish I could delete it from the universe.)
    I wasn't even aware there was a such thing as icloud.com addresses. When did this happen? What is it used for?
    Third, under that icloud Setting I see a long list of apps with buttons labeled "Off" under it. What are those for? Under the Mac.com settings I see switches for "Mail" and "Notes", with Mail on and Notes off. The Notes app (which I haven't used since my old iPhone 3) still opens, regardless of this setting.
    Fourth, I now have an item called "Facetime" under my Settings. It is off, but underneath it says "Your phone number and/or email address will be shared with people you call". I understand caller ID normally sends caller number info to the receiver, but why would someone need my email address if I call them?
    Fifth, I now have a "Music" setting, at the bottom of which I see a "Home Sharing" item, which when clicked brings up my AppleID and asks me if I want to Sign Out or Cancel. What is Home Sharing? Its also at the bottom of the "Video" settings.
    Sixth, now I have Twitter and Facebook settings? For what? I don't have accounts with either of those companies. So why have settings, especially since it asks me to create accounts and download apps for those companies right in the Settings?
    Seventh, there is a camera icon on the unlock screen. Touching it causes the screen to bounce up about a quarter inch, almost but not quite revealing something behind it. I should probably just quit asking about this stuff already, but I'll take the bait - what is this now?
    Finally, what is the Notification Center used for?
    If I got a text under iOS4, it would put an alert on the Unlock screen. Scrolling through this huge list of things under the Notification settings I'm really blown away by all the apps set up to yell at me. I can see having an alert for a text message but Game Center? What the heck is that, and why is it set up to hit me with a "Badge App Icon" (whatever that is) when I get alerts from "Everyone". Similarly, the phone is set to alert me to something called a "Photostream Alert"? What is this? Why is there a Phone section for the Notification Center? So they can put a Notice on my screen to tell me the phone is ringing? Holy cow! The phone is set to send me alerts from the "Weather Widget". So if I miss the fact its raining there will be a message on my screen to let me know? Whats next - a buzzer to tell me I'm listening to music?
    There's a lot more, like what would I need Passbook for when I have the actual movie tickets, gate boarding passes, coupons, etc in my hands, but we'll leave that for another time. Many thanks to all who can offer some answers to my questions above.

    Hey Taantumus!
    Here is an article that will provide some guidance on this question:
    Apple ID: Changing your password
    http://support.apple.com/kb/ht5624
    The next time you use an Apple feature or service that uses Apple ID, you'll be asked to sign in with your new Apple ID password.
    Thanks for coming to the Apple Support Communities!
    Regards,
    Braden

  • A question about the impact of SQL*PLUS SERVEROUTPUT option on v$sql

    Hello everybody,
    SQL> SELECT * FROM v$version;
    BANNER
    Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
    PL/SQL Release 11.2.0.1.0 - Production
    CORE    11.2.0.1.0  Production
    TNS for Linux: Version 11.2.0.1.0 - Production
    NLSRTL Version 11.2.0.1.0 - Production
    SQL>
    OS : Fedora Core 17 (X86_64) Kernel 3.6.6-1.fc17.x86_64I would like to ask a question about the SQL*Plus SET SERVEROUTPUT ON/OFF option and its impact on queries on views such as v$sql and v$session. Here is the problem
    Actually I define three variables in SQL*Plus in order to store sid, serial# and prev_sql_id columns from v$session in order to be able to use them later, several times in different other queries, while I'm still working in the current session.
    So, here is how I proceed
    SET SERVEROUTPUT ON;  -- I often activate this option as the first line of almost all of my SQL-PL/SQL script files
    SET SQLBLANKLINES ON;
    VARIABLE mysid NUMBER
    VARIABLE myserial# NUMBER;
    VARIABLE saved_sql_id VARCHAR2(13);
    -- So first I store sid and serial# for the current session
    BEGIN
        SELECT sid, serial# INTO :mysid, :myserial#
        FROM v$session
        WHERE audsid = SYS_CONTEXT('UserEnv', 'SessionId');
    END;
    PL/SQL procedure successfully completed.
    -- Just check to see the result
    SQL> SELECT :mysid, :myserial# FROM DUAL;
        :MYSID :MYSERIAL#
           129   1067
    SQL> Now, let's say that I want to run the following query as the last SQL statement run within my current session
    SELECT * FROM employees WHERE salary >= 2800 AND ROWNUM <= 10;According to Oracle® Database Reference 11g Release 2 (11.2) description for v$session
    http://docs.oracle.com/cd/E11882_01/server.112/e25513/dynviews_3016.htm#REFRN30223]
    the column prev_sql_id includes the sql_id of the last sql statement executed for the given sid and serial# which in the case of my example, it will be the above mentioned SELECT query on the employees table. As a result, right after the SELECT statement on the employees table I run the following
    BEGIN
        SELECT prev_sql_id INTO :saved_sql_id
        FROM v$session
        WHERE sid = :mysid AND serial# = :myserial#;
    END;
    PL/SQL procedure successfully completed.
    SQL> SELECT :saved_sql_id FROM DUAL;
    :SAVED_SQL_ID
    9babjv8yq8ru3
    SQL> Having the value of sql_id, I'm supposed to find all information about cursor(s) for my SELECT statement and also its sql_text value in v$sql. Yet here is what I get when I query v$sql upon the stored sql_id
    SELECT child_number, sql_id, sql_text
    FROM v$sql
    WHERE sql_id = :saved_sql_id;
    CHILD_NUMBER   SQL_ID          SQL_TEXT
    0              9babjv8yq8ru3    BEGIN DBMS_OUTPUT.GET_LINES(:LINES, :NUMLINES); END;Therefore instead of
    SELECT * FROM employees WHERE salary >= 2800 AND ROWNUM <= 10;for the value of sql_text I get the following value
    BEGIN DBMS_OUTPUT.GET_LINES(:LINES, :NUMLINES);Which is not of course what I was expecting to find in v$sql for the given sql_id.
    After a bit googling I found the following thread on the OTN forum where it had been suggested (well I think maybe not exactly for the same problem) to turn off SERVEROUTPUT.
    Problem with dbms_xplan.display_cursor
    This was precisely what I did
    SET SERVEROUTPUT OFFafter that I repeated the whole procedure and this time everything worked pretty well as expected. I checked SQL*Plus documentation for SERVEROUTPUT
    and also v$session page, yet I didn't find anything indicating that SERVEROUTPUT should be switched off whenever views such as v$sql, v$session
    are queired. I don't really understand the link in terms of impact that one can have on the other or better to say rather, why there is an impact
    Could anyone kindly make some clarification?
    thanks in advance,
    Regards,
    Dariyoosh

    >
    and also v$session page, yet I didn't find anything indicating that SERVEROUTPUT should be switched off whenever views such as v$sql, v$session
    are queired. I don't really understand the link in terms of impact that one can have on the other or better to say rather, why there is an impact
    Hi Dariyoosh,
    SET SERVEROUTPUT ON has the effect of executing dbms_output.get_lines after each and every statement. Not only related to system view.
    Here below what Tom Kyte is explaining in this page:
    Now, sqlplus sees this functionality and says "hey, would not it be nice for me to dump this buffer to screen for the user?". So, they added the SQLPlus command "set serveroutput on" which does two things
    1) it tells SQLPLUS you would like it <b>to execute dbms_output.get_lines after each and every statement</b>. You would like it to do this network rounding after each call. You would like this extra overhead to take place (think of an install script with hundreds/thousands of statements to be executed -- perhaps, just perhaps you don't want this extra call after every call)
    2) SQLPLUS automatically calls the dbms_output API "enable" to turn on the buffering that happens in the package.Regards.
    Al

  • Questions about Indexing and Using an Indexing POA

    Although I have only about 50 users, at least 15 of them have in excess of 100,000 messages in their accounts and the POA (version 7.0.2) is regularly slowing to a crawl. (I just know that plans for revolution are fomenting!) I have embarked on a campaign to reduce these accounts by archiving everything off to get mail accounts down to 3000 or fewer pieces. I have achieved user buy-in, but have worked on only a few users so far.
    In another closely related thread, it was suggested to me that the PO speed issues relate to broken indexes. And I suspect that given so many messages, the indexes were never getting fully rebuilt with the default QF POA settings. I am trying to fix that situation in addition to reducing mail account sizes. So, I have set up a second POA on another server and dedicated it to the indexing task. The /qfinterval is set for 1 hour, other /qf switches at default. The POA-QF does no mail delivery, but it does do nightly user upkeep.
    The POA-QF seems to be steadily working away and making progress at reducing the number of unindexed messages. However, I have questions about what I am seeing and what more I can do:
    1. Is the progress I am seeing real progress? For example I have a user with over 100,000 messages to be indexed and every time I check the logs, the count drops by about 500 messages per hourly QF cycle. I assume that if I just let it keep running, it will eventually get caught up and fixed. Not only with this user, but with all the others as well. Will my patience (and theirs) be rewarded? Are there any gotchas I need to prepare for?
    2. One user has recently had virtually all of her messages successfully moved to archive. I can see them in the Archive, and do not see them in the online account. However, now over a week later, QF still shows >130,000 items still left to index for that user. The POA-QF is making slow, steady progress reducing that number, but why is this user's QF count still so high? Does it just need more time, or is there something amiss for this user?
    3. I may want to rebuild indexes for single users from scratch. I have seen the TID 3105742 which tells how to do this: Essentially you turn off mail delivery functions, and make some other switch changes to dedicate the POA to indexing for just a single user, and then you let the POA rebuild the indexes. The implication of that scenario is that the POA is now enjoying exclusive access to the user's databases.
    If I want to use my secondary POA-QF to rebuild a user's index from scratch, does the main POA have to be offline and the user out of GWise? That is, Does the QF process require exclusive access in order to rebuild indexes from scratch?
    Thanks for any thoughts or suggestions.
    Peter Smick

    pgsmick wrote:
    > 1. Is the progress I am seeing real progress? For example I have a user with
    > over 100,000 messages to be indexed and every time I check the logs, the count
    > drops by about 500 messages per hourly QF cycle. I assume that if I just let
    > it keep running, it will eventually get caught up and fixed. Not only with
    > this user, but with all the others as well. Will my patience (and theirs) be
    > rewarded? Are there any gotchas I need to prepare for?
    Set this switch for this indexing POA - /qflevel=999 - this will index
    everything in one run. It will take a long time, but with no qflevel switch you
    are indeed only indexing 500 messages at a time, and if the user has that much
    mail, it might never really catch up.
    >
    > 2. One user has recently had virtually all of her messages successfully moved
    > to archive. I can see them in the Archive, and do not see them in the online
    > account. However, now over a week later, QF still shows >130,000 items still
    > left to index for that user. The POA-QF is making slow, steady progress
    > reducing that number, but why is this user's QF count still so high? Does it
    > just need more time, or is there something amiss for this user?
    >
    This is odd, because really the index count should drop to nothing, but with the
    above switch this might get resolved as well.
    > 3. I may want to rebuild indexes for single users from scratch. I have seen
    > the TID 3105742 which tells how to do this: Essentially you turn off mail
    > delivery functions, and make some other switch changes to dedicate the POA to
    > indexing for just a single user, and then you let the POA rebuild the indexes.
    > The implication of that scenario is that the POA is now enjoying exclusive
    > access to the user's databases.
    Not really - the POA is not enjoying exclusive access to the user's database,
    the indexer is just avoiding an attempt to index anything else.
    > If I want to use my secondary POA-QF to rebuild a user's index from scratch,
    > does the main POA have to be offline and the user out of GWise? That is, Does
    > the QF process require exclusive access in order to rebuild indexes from
    > scratch?
    No - QF never requires exclusive access. That said, you may find that an
    extremely vigorous QF can cause slowdowns for the user.
    Danita
    Novell Knowledge Partner
    Moving GroupWise to Linux?
    http://www.caledonia.net/gwmove.html

Maybe you are looking for

  • Radeon HD 5770 vs. NVIDIA GeForce 7300 GT

    I am running a first gen. 1,1 Mac Pro 2 x GHz Dual-Core with 18 GB Ram. I have two 30"-Cinema Display connected to two NVIDIA GeForce 7300 GT. Will I recognize more speed by upgrading to a single Radeon HD 5770? I know that this upgrade would cost me

  • Understanding Fan, Fan Control, and Heating Intel iMac

    Greetings all, I'm a recent convert from the world of Windows to Mac and I've enjoyed it more than you can imagine. I'm a network admin at a major airport and have come to hate working on Windows during the day to working on Windows at home. Although

  • Apple TV interference

    Hi There! I just purchesed Apple TV yesterday. I was surprised to see that when connected to my new Samsung TV a very disturbing flashing on the middle of the screen keep jumping up. I have a quality hdmi cable. I have tried connecting via lan to ele

  • How can i get wired LAN to work, missing driver?

    i recently have upgraded my machine with a new hd and windows 7 ultimate 64 bit. now i dont have use of my wired connection do to no driver for it, i cant find it anywhere and do to being a netbook i dont have a driver cd. how can i get the driver im

  • Possible to shut off iCloud SMTP Server on iPhone?

    Is it possible to use my own smtp server on my icloud account on my iphone.  Really starting to annoy me that I can't figure out how to disable the primary server and use my own.  Thanks!