LDP question

Hi, all,
I have a question regarding LDP tunnel LSP which I can't think of a satisfied answer.
Suppose we have two routers connected back to back, but, LDP is not enabled on either router's interface. If I configure EoMPLS in between , a LDP targeted session will be initiated and both prefix-fec and VC-fec mapping will be exchanged. In current IOS image, the l2 vc will not come up because the tunnel LSP is not ready. Now my question is, why do we need to enable LDP on the interface in order to bring up the tunnle LSP? from either router's point of view, it has label mapping to peer's router-id and peer is directly connected, it should just install the label (either implicit-null or explicit null) in its LFIB, and declare LSP is ready, right?
Anybody can please tell me why the router decides not to install the tunnel label?

Hi,
maybe an analogy can help to clarify this: assume you have two routers back to back with no IP address on either interface. Even if you install static routes to each others loopbacks pointing to the connecting interface, no IP forwarding takes place. The reason is, that for IP forwarding to take place a valid IP needs to be configured on the interface enabling this protocol (0x0800).
Similar, "mpls ip" enables the usage and forwarding of MPLS labeled packets (protocol 0x8847) over an interface. Works as designed.
[Edit] From another point of view: this might be seen as a secutrity feature. Assume a MPLS PE connecting through an IP interface to a customer CE. The customer can NOT send labeled packets (DoS), which would then be forwarded, because MPLS is not enabled on the interface.
Hope this helps!
Regards, Martin

Similar Messages

  • Question about autodiscover in case of multiple bound namespace

    Hi Experts,
    I have a question about the autodiscover behaviour. Let's assume we have the below infrastructure:
    SiteA :
    MBX-Server-SiteA : Member of a DAG
    CAS-Server-SiteA : outlook anywhere url = siteA.domain.com
    SiteB :
    MBX-Server-SiteB : Member of a DAG
    CAS-Server-SiteB-1 : outlook anywhere url = siteB-1.domain.com
    CAS-Server-SiteB-2: outlook anywhere url = siteB-2.domain.com
    We have DB-1 and DB-2 that have copies in both MBX servers.
    My question is how does exchange select the access URLs to return in the autodiscover process? I know that it depends on where the mailbox is hosted but can't find details about the process in the technet articles.
    Thanks.

    There's quite a few details that are involved in the Autodiscover process. First of all - probably the most important thing is that there are 2 stages to the whole process.
    In the first stage, the client is simply concerned with getting the address of a CAS server that will help it further. We'll keep things simple and assume your scenario where the client is located inside the network and is domain-joined. The details of the
    LDAP query are detailed in
    this link. (At the time I was investigating this I've actually went ahead and ran the queries using the ldp.exe client against the Configuration partition of the respective AD domain - it's worth seeing the actual responses.) An interesting trick here is
    the 'keywords' attribute that's stamped on those SCP entries. The reason behind it is that you don't want a client located in a site to go half across the globe in order to connect to a CAS server, when there's one available in its own site. One simple way
    to get the 'keywords' attribute stamped is through the Set-ClientAccessServer cmdlet, using the -AutodiscoverSiteScope parameter. In your example, you'd probably want to run it against the CAS server in Site A and specify the name of the corresponding AD site
    ('SiteA') and correspondingly against the 2 CAS servers in Site B (using 'SiteB'). Once the client has got the response to his query, it will attempt to select one server that's handling the site he's in (essentially it will filter the results based on 'keywords'
    -contains <client-site>). Now that we got our endpoint we can go to stage 2.
    In stage 2, the client will actually use EWS in order to query the Autodiscover service itself running on our target server. There are 2 possible interfaces of accessing the Autodiscover service: POX (Plain Old XML) and SOAP. POX will be targeting the ../Autodiscover.xml
    URLS, while the SOAP one will be using ../Autodiscover.svc URLs. Details about this including some hardcoded parts are
    here. What happens next is detailed in point 3, section 2.1 The Autodiscover Process
    here. This last link is the key to the whole process:
    "It provides a list of CAS that has AutodiscoverSiteScope information set for the
    Associated AD site of the Database where the client Mailbox is located."
    In other words, the CAS is smart enough to return the URLs belonging to a CAS server in the AD site where the client's mailbox' database is active.
    My advice is to test this on your scenario. Tests can be done here first-hand: the Outlook's tray icon Test E-Mail AutoConfiguration can be used or alternatively - if you want to see the details in the communication - SoapUI
    for the SOAP access method, for POX there's an extension called 'Postman for Chrome' that can be used. I've used all these in my tests back when I was fighting conflicting results from the articles around the web about Autodiscover.
    That's a long way of saying we get the AutoD URL of a CAS server closest to the workstation, which then provides the configuration to use which are the the URLs closest to the mailbox  :)
    By all means look at the SOAP response, but Outlook will only use POX.  Lync does SOAP along with other 3rd party apps.
    Cheers,
    Rhoderick
    Microsoft Senior Exchange PFE
    Blog:
    http://blogs.technet.com/rmilne 
    Twitter:   LinkedIn:
      Facebook:
      XING:
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • How traffic is directed in MPLS network? Via ldp LSPs or via RSVP LSPs

    My question is basicly to understand how traffic is treated.
    Lets assume our topology is :
    A-----------------------------B------------------------------------C--------------------------------------------D
    1-) if we just enable MPLS under all interfaces, LDP labels are exchanged with each peer. At that moment   RIB, LIB, FIB and LFIB are created on all routers. So LDP LSPs are created dynamicly. but  If i ping "loopback D"  from router A, there will be IP routing or LABEL switching.  will routing make routing by looking IP address at each hop or labels will be swapped at each hop ?
    2-) If we enable MPLS traffic engineering capability and create a tunnel interface between router A and router D, vice versa. At that moment, Router A will have :
    -simple IGP reachability to Router D,
    -Dynamic LDP LSP  and
    -RSVP tunnel.
    what about now, Which one of the paths above  my traffic will follow ? do I have to direct my traffic to tunnel interface signaled via RSVP. Is there any precedence for choosing the path that traffic will be addressed ?

    for second secenario, i have found that I have to write
    "tunnel mpls traffic-eng autoroute announce " other wise traffic will always follow LDP signaled paths. In order to get all traffic inside "tunnel" we should execute that command.  once you write that command you see that ;
    Before executing command;
    R1#sh ip route
    O       3.3.3.3 [110/129] via 3.3.3.3, 00:07:08, serial0/0
    R1#show mpls forwarding-table
    18     18          3.3.3.3/32        0          Se0/0      point2point
    After executing command;
    R1#sh ip route
    O       3.3.3.3 [110/129] via 3.3.3.3, 00:07:08, Tunnel0
    R1#show mpls forwarding-table
    18     Pop tag [T] 3.3.3.3/32        0          Tu0        point2point 
    Hope you see my point, router doesnt decide to use RSVP signaled LSP itself, we shoud trig router to use RSVP signalled LSP.

  • [OSPF/LDP/PW Fast convergence] ASR9k/ME3800/ME3600

    Hello, Netpro:
    I'm having a bit of a problem with OSPF/LDP Pseudowire fast convergence.
    I have a test lab scenario with 2 ASR9000, 1 ME3800X and 1 ME3600X.
    They are connected in an L3 MPLS ring, like this:
    ME3800X---[a]---ASR1--[b]--ASR2---[c]---ME3600X
      |                                                                      |
      |--------------------------------[d]-----------------------|   
    The MEs are connected back to back closing the loop.
    The ring is configured for: OSPF fast convergence timers, LDP session protection, MPLS LDP  sync and BFP for OSPF on all interfaces.
    For testing purposes I've configured a pseudowire between the MEs and forced the path via OSPF to go through the ASRs.
    My problem is that I do not get the same responses when breaking the ring in different places. For example: if I break the ring in (b) or (d) i get ~100ms loss (when breaking the d connection, I change OSPF so that the PW takes the direct route between MEs). If I break the ring in (a) or ( c ) I get ~ 500ms loss.
    Also for testing purposes, I ran a similar test but with regular L3 interfaces ( NO pseudowire) between MEs and for all scenarios i get 60-100ms. So, basically I'm assuming OSPF is converging like it's supposed to and the issue is within LDP.
    Any ideas?
    Regards,
    c.

    Yes, I did test traffic engineering, but there's a bug (on 3600/3800) that when a PW changes paths, it will stop passing traffic, so that part is stuck.
    Is there an OSPF problem with ASR? I didn't understand very well your comment
    My description of my scenario is just for simplicity purposes. The real question here is, what is going on between an IOS box and an XR box that when you cause a fault in between those 2, LDP recovers in 500ms and when you cause a fault in same-OS boxes, recovery is 100ms.

  • CR-LDP supported Platforms

    Does Cisco support the CR-LDP? If yes, does anyone knows if it is supported on 7600 sup720 3bxl?

    My understanding is that CR-LDP is pretty much dead. IETF has made a choice in favor of RSVP. Therefore I doubt that Cisco or any other vendor would invest in a protocol that IETF has decided to drop. For more information, please refer to RFC3468.
    http://www.ietf.org/rfc/rfc3468.txt?number=3468
    Let me know if I answered your question,

  • Ldp concepts

    Hi,
    Im just starting to work on MPLS and I have a few questions about LDP and MPLS VPNs. Hopefully some expert out there can show me if my thinking is correct.
    Q1. If I have a number of directly connected PE routers (say via ethernet) which are servicing MPLS VPNs, technically do i really need to run LDP here ? I believe the LFIB gets populated by MBGP for the VPNv4 customer prefixes, so is there any need for LDP between the directly connected PEs ?
    Q2. In the case where now I have another set of PEs that are not directly connected to the set of PEs in Q1, and I have a P router to connect the two sets of PEs together. Am I correct in saying that now I must run LDP even if I am just doing MPLS VPNs, since the P router needs to know how to forward traffic, and it does this forwarding via LDP since it doesnt particiapte in MBGP and therefre does not have customer VPNv4 routes/prefixes ?
    Q3. I read about LDP session protection via targetted LDP. If P/PEs are directly connected (via ethernet), is there any point in running protected LDP sessions ? Im thinking of having two interfaces on each router, ethernet interface 1 (g0/1) and ethernet interface 2 (g0/2). So each router g0/1 will be directly connected via an ethernet switch, and same for g0/2. If we run LDP between loopbacks of the routers, then there is inherent protection if one of the interfaces (say g0/1) goes down, the LDP session does not go down, since the loopbacks will be reachable via the other g0/2 interface ? So in this case is there any point in using session protection ?
    thanks
    Mark

    Hello Giuseppe and Mark,
    Regarding the RD: everything is exactly as Giuseppe has explained. Personally, when I am asked about why do we need both RD and RT, I need to talk a little about BGP itself.
    The BGP is used to convey routing information from multiple VRFs between PE routers. However, originally, it was not designed for this application, and without additional "tricks", it would not be able to do this job. One particular problem is that when it needs to advertise an update to a route that already exists, it just sends it anew - the network, its mask and its attributes. The recipient of this message will replace the old information about this network with the new information.
    Now, imagine two VRFs, one with RT 1:1, the second with RT 1:2, both containing the same network 192.0.2.0/24. The RT is a BGP attribute - a property of a network but not its identifier or a part of its address. Now image what would happen if the router advertised the contents from these VRFs to a peer. Say that first, the 192.0.2.0/24 with the RT 1:1 would be advertised. The peer would receive this network and import it to his VRF with the RT 1:1 import target. Then, the 192.0.2.0/24 with the RT 1:2 would be advertised. Now, the peer would receive this advertisement and it would think that this is an update of the previous advertisement - the network and the mask are the same, just the RT attribute has changed from 1:1 to 1:2. So it would remove the network 192.0.2.0/24 from the first VRF and move it to the second VRF with the RT 1:2 import target. In essence, the network would jump from one VRF to another, although it should be in both VRFs because despite looking identical, these two VRFs are totally separate address spaces.
    This problem is remedied using the RD. The RD acts like an address extension within BGP messages so that identically numbered networks from various VRFs do not look identical in the BGP communication. If I get back to my example and assign the RD 1:1 to the first VRF and RD 1:2 to the second VRF, I have solved the BGP deficiency: the network from the first VRF will be announced as network 1:1:192.0.2.0/24, the network from the second VRF will be announced as 1:2:192.0.2.0/24, thereby maintaining their distinctiveness and not looking like one updates the other. Speaking more technically, there is a new address family format introduced for BGP that combines the RD and the IPv4 address into a single 96-bit network address.
    The RD is simply a hack - a trick - a workaround for BGP. It defines a prefix for all networks within a particular VRF so that identically numbered networks from different VRFs look differently in BGP messages. However, this prefix is used only in BGP communication and only between pairwise between two BGP peers. The actual sorting of received networks among receiver's VRFs is always done by RT attribute, never by RD. The RD is actually not even used by the BGP receiver other than to see that "this network looks differently in its 64-bit prefix (the RD) than this one".
    Best regards,
    Peter

  • LDP on MPLS VPN?

    I have an MPLS VPN configured between two PEs. I haven't enabled LDP, but when i do ' show mpls ldp binding' i see some label binding info.
    Does LDP get enabled automatically when i configure L3VPN or what does it do?
    thanks
    Gopal.

    If you do a "show ip cef" for the egress PE loopback address and the egress interface is a tunnel then you are definitely using RSVP.
    In the case of MPLS VPN, when a packet is received from the MPLS cloud, the outer label will already be stripped by the P router (Penultimate Hop Popping) as you mentioned. The egress PE will lookup the inner label in the LFIB (not the LIB) and forward the packet to the proper VRF interface.
    The LIB is actually not used to forward packets but rather as input, along with the FIB, to create the LFIB.
    Here's a summary of what forwarding table is used per device:
    ingress PE: FIB
    P router(s): LFIB
    egress PE: FIB (in the case there is no inner label) and LFIB (in the case there is a inner label)
    Let me know if I answered your questions,

  • Questions on Print Quote report

    Hi,
    I'm fairly new to Oracle Quoting and trying to get familiar with it. I have a few questions and would appreciate if anyone answers them
    1) We have a requirement to customize the Print Quote report. I searched these forums and found that this report can be defined either as a XML Publisher report or an Oracle Reports report depending on a profile option. Can you please let me know what the name of the profile option is?
    2) When I select the 'Print Quote' option from the Actions drop down in the quoting page and click Submit I get the report printed and see the following URL in my browser.
    http://<host>:<port>/dev60cgi/rwcgi60?PROJ03_APPS+report=/proj3/app/appltop/aso/11.5.0/reports/US/ASOPQTEL.rdf+DESTYPE=CACHE+P_TCK_ID=23731428+P_EXECUTABLE=N+P_SHOW_CHARGES=N+P_SHOW_CATG_TOT=N+P_SHOW_PRICE_ADJ=Y+P_SESSION_ID=c-RAuP8LOvdnv30grRzKqUQs:S+P_SHOW_HDR_ATTACH=N+P_SHOW_LINE_ATTACH=N+P_SHOW_HDR_SALESUPP=N+P_SHOW_LN_SALESUPP=N+TOLERANCE=0+DESFORMAT=RTF+DESNAME=Quote.rtf
    Does it mean that the profile in our case is set to call the rdf since it has reference to ASOPQTEL.rdf in the above url?
    3) When you click on submit button do we have something like this in the jsp code: On click call ASOPQTEL.rdf. Is the report called using a concurrent program? I want to know how the report is getting invoked?
    4) If we want to customize the jsp pages can you please let me know the steps involved in making the customizations and testing them.
    Thanks and Appreciate your patience
    -PC

    1) We have a requirement to customize the Print Quote report. I searched these forums and found that this report can be defined either as a XML Publisher report or an Oracle Reports report depending on a profile option. Can you please let me know what the name of the profile option is?
    I think I posted it in one of the threads2) When I select the 'Print Quote' option from the Actions drop down in the quoting page and click Submit I get the report printed and see the following URL in my browser.
    http://<host>:<port>/dev60cgi/rwcgi60?PROJ03_APPS+report=/proj3/app/appltop/aso/11.5.0/reports/US/ASOPQTEL.rdf+DESTYPE=CACHE+P_TCK_ID=23731428+P_EXECUTABLE=N+P_SHOW_CHARGES=N+P_SHOW_CATG_TOT=N+P_SHOW_PRICE_ADJ=Y+P_SESSION_ID=c-RAuP8LOvdnv30grRzKqUQs:S+P_SHOW_HDR_ATTACH=N+P_SHOW_LINE_ATTACH=N+P_SHOW_HDR_SALESUPP=N+P_SHOW_LN_SALESUPP=N+TOLERANCE=0+DESFORMAT=RTF+DESNAME=Quote.rtf
    Does it mean that the profile in our case is set to call the rdf since it has reference to ASOPQTEL.rdf in the above url?
    Yes, your understanding is correct.3) When you click on submit button do we have something like this in the jsp code: On click call ASOPQTEL.rdf. Is the report called using a concurrent program? I want to know how the report is getting invoked?
    No, there is no conc program getting called, you can directly call a report in a browser window, Oracle reports server will execute the report and send the HTTP response to the browser.4) If we want to customize the jsp pages can you please let me know the steps involved in making the customizations and testing them.
    This is detailed in many threads.Thanks
    Tapash

  • Satellite P300D-10v - Question about warranty

    HI EVERYBODY
    I have these overheating problems with my laptop Satellite P300D-10v.
    I did everything I could do to fix it without any success..
    I get the latest update of the bios from Toshiba. I cleaned my lap with compressed air first and then disassembled it all and cleaned it better.(it was really clean insight though...)
    BUT unfortunately the problem still exists...
    So i made a research on the internet and I found out that most of Toshiba owners have the same exactly problem with their laptop.
    Well i guess this is a Toshiba bug for many years now.
    Its a really nice lap, cool sound (the best in laptop ever) BUT......
    So I wanted to make a question. As i am still under warranty, can i return this laptop and get my money back or change it with a different one????
    If any body knows PLS let me know.
    chears
    Thanks in advance

    Hi
    I have already found you other threads.
    Regarding the warranty question;
    If there is something wrong with the hardware then the ASP in your country should be able to help you.
    The warranty should cover every reparation or replacement.
    But I read that you have disasembled the laptop at your own hand... hmmm if you have disasembled the notebook then your warrany is not valid anymore :(
    I think this should be clear for you that you can lose the warrany if you disasemble the laptop!
    By the way: you have to speak with the notebook dealer where you have purchased this notebook if you want to return the notebook
    The Toshiba ASP can repair and fix the notebook but you will not get money from ASP.
    Greets

  • Question regarding NULL and forms

    Hi all, i have a survey that im working on that will be sent via email.
    I'm having an issue though. if i have a multiple choice question, and the user only selects one of the choices, all the unselected choices return as NULL. is there a way i can filter out anytihng that says "NULL" so it only shows the selected options?
    thanks.
    here is the page that retrieves all the data. thanks
    <body>
    <p>1) Is this your first visit to xxxxxxx? <b><%=request.getParameter("stepone") %></b>
    </p>
    <p> </p>
    <p>2) How did You Learn About xxxxxxx?</p>
    <p><b><%=request.getParameter("steptwoOne") %></b>
      <br>
        <b><%=request.getParameter("steptwoTwo") %></b>
      <br>
        <b><%=request.getParameter("steptwoThree") %></b>
      <br>
        <b><%=request.getParameter("steptwoFour") %></b>
      <br>
        <b><%=request.getParameter("steptwoOther") %></b>
    </p>
    <p> </p>
    <p>3) What was your main reason for visiting xxxxx?</p>
    <p><b><%=request.getParameter("stepthreeOne") %></b>
        <br>
          <b><%=request.getParameter("stepthreeTwo") %></b>
        <br>
          <b><%=request.getParameter("stepthreeThree") %></b>
        <br>
          <b><%=request.getParameter("stepthreeFour") %></b>
        <br>
          <b><%=request.getParameter("stepthreeOther") %></b>
    </p>
    <p>4) did you find the information you were looking for on this site?</p>
    <p><b><%=request.getParameter("stepfour") %>
    <br>
    <b><%=request.getParameter("stepfourOther") %></b>
    </b></p>
    <p>5) Do you plan on using this website in the future?</p>
    <p><b><%=request.getParameter("stepfive") %></b></p>
    <p>6) What is your gender</p>
    <p><b><%=request.getParameter("stepsix") %></b></p>
    <p>7) What is your age group</p>
    <p><b><%=request.getParameter("stepseven") %></b></p>
    8) Would you like to take a moment and tell us how we can improve your experience on xxxxxxxxxx?
    <p><b><%=request.getParameter("stepeightFeedback") %></b></p>

    i was messing around and came up with this. it doesnt remove the null, but if it is null it adds ABC beside it. so i think i might be getting close. i just need to figure out how to replace the null.
    code]
    <b><%=request.getParameter("steptwoFour") %></b>
         <% if (request.getParameter("steptwoFour") == null ) {
         %>
         <% out.print("abc"); %>
         <% }
         %>

  • Anyone know how to remove Overdrive books from my iphone that have been transferred from my computer? They do not show up on itunes. I see a lot of answers to this question but they all are based on being able to see the books in iTunes.

    How do I remove Overdrive books from the library that were downloaded onto my computer then transferred to my iphone? The problem is that they do not show up in iTunes.
    I see this question asked a lot when I google, but they always give answers that assumes you can find the books in iTunes either under the books tab, or the audio books tab or in the music. They do not show up anywhere for me. They do not remove from the app like the ones I downloaded directly onto my iphone.the related archived article does not answer it either.  I even asked a guy working at an apple store and he could not help either.   Anybody...?
    Thanks!

    there is an app called daisydisk on mac app store which will help you see exactly where the memory is focused and consumed try using that app and see which folders are using more memory

  • Basic question

    Hello, i have a basic question. if i have defined 2 fields in a cube or a dso:
    Name Quantity
    and from the external flat file i get some characters for my quantity field. would my load fail?  for standard dso and for write optimized?
    NOTE: quantity field is a keyfigure defined as numeric.
    and the load coming in has "VIKPATEL" for Quantity field and not numbers.
    thanks

    Hi Vik,
    Yes, the load will fail.
    May be you coud first load this data into BW (into PSA) and set both fields as characters fields. Then you can create DSO, do transformation from this PSA to the DSO, and put your logic as to what do you want to do with those Quantity that is not number (e.g. convert to 0, or 'Not assgined', etc).
    You can use transfer rule, or a clean up ABAP code in the start routine.
    Hope this helps.

  • Mid 2010 15" i5 Battery Calibration Questions

    Hi, I have a mid 2010 15" MacBook Pro 2.4GHz i5.
    Question 1: I didn't calibrate my battery when I first got my MacBook Pro (it didn't say in the manual that I had to). I've had it for about a month and am doing a calibration today, is that okay? I hope I haven't damaged my battery? The calibration is only to help the battery meter provide an accurate reading of how much life it has remaining, right?
    Question 2: After reading Apple's calibration guide, I decided to set the MacBook Pro to never go to sleep (in Energy Saver System Preference) and leave it on overnight so it would run out of power and go to sleep, then I'd leave it in that state for at least 5 hours before charging it. When I woke up, the light on the front wasn't illuminated. It usually pulsates when in Sleep. Expectedly, it wouldn't wake when pressing buttons on the keyboard. So, what's happened? Is this Safe Sleep? I didn't see any "Your Mac is on reserve battery and will shut down" dialogues or anything similar, as I was asleep! I've left it in this state while I'm at work and will charge it this afternoon. Was my described method okay for calibration or should I have done something different?
    Question 3: Does it matter how quickly you drain your battery when doing a calibration? i.e is it okay to drain it quickly (by running HD video, Photo Booth with effects etc) or slowly (by leaving it idle or running light apps)?
    Thanks.
    Message was edited by: Fresh J

    Fresh J:
    A1. You're fine calibrating the battery now. You might have gotten more accurate readings during the first month if you'd done it sooner, but no harm has been done.
    A2. Your machine has NOT shut down; it has done exactly what it was supposed to do. When the power became critically low, it first wrote the contents of RAM to the hard drive, then went to sleep. When the battery was completely drained some time later, the MBP went into hibernation and the slepp light stopped pulsing and turned off. In that state the machine was using no power at all, but the contents of your RAM were still saved. Once the AC adapter was connected, a press of the power button would cause those contents to be reloaded, and the machine would pick up again exactly where you left off. It is not necessary to wait for the battery to be fully charged before using the machine on AC power, but do leave the AC adapter connected for at least two hours after the battery is fully charged. Nothing that you say you've done was wrong, and nothing that you say has happened was wrong.
    A3. No, it does not matter.

  • Jabber/WebEx Connect SSO Questions

    I've got a few questions around exactly what needs to be done to get SAML working for our Connect accounts to successfully authenticate from Jabber for Windows, Mac, iPhone, and Android.
    We have both a Meeting Center and Connect account under WebEx using Loose Coupled Integration. Just this past week I enabled SAML for our Meeting Center accounts which went off without a hitch with the exception of Meeting Center integration with Jabber, which is now broken with a message about SSO enabled Meeting Sites not being supported (I think this would maybe be fixed if we had Tight Coupled Integration with our two account?).
    Anyway, my questions are...
    For Windows, I understand all clients will need to be reinstalled with the MSI argument for the SSO_ORG_DOMAIN switch I've read about, is that correct? Are there any other switches needed for the reinstall? 
    How will this work with the Mac and mobile clients? There's obviously no command line options to specify for the installations here, will they just know to kick over to my IdP for authentication once they see an email address that falls under an org with SSO enabled? If so, why does the Windows client need to be completely reinstalled and not just know to find the IdP from the Cloud Connect service like Meeting Center does with the Productivity Tools?
    We're just doing this for our Connect Web IM accounts, not attempting any sort of SSO with the phone accounts/UC integration yet.
    Any ideas on getting the Meeting Center integration into Jabber working again?

    I'd suggest posting your question over on the Jabber Pilot forum, as this forum is specific to Jabber Guest questions:
    https://supportforums.cisco.com/community/4551/jabber-pilot-support
    -jim

  • My iPad wont let me download apps bc security questions, but when I try to make them it freezes

    Every time I try to download an app it tells me I need to update my security questions, but once I click to make the questions the box goes white. So I'm not sure how to fix it

    The new questions show on your account on http://appleid.apple.com ? If they do then try logging out and back into your account on your phone (assuming that is where you are trying to purchase from) and see if the new questions then show on it.

Maybe you are looking for

  • IE7 Rendering Issue: Pushing Div Right

    Hello and Happy New Year to everyone, reallly hope its a goodun! I have a rendering issue with IE7 for this page: http://www.kowalskidesign.com/ocean/homepage/ocean31.html The problem is with the orange 'Opening Times' drop down  and that fact that t

  • Process to Migrate from FI-AR to FI-CA

    What is the process to Migrate from FI-AR to FI-CA? I can see that in FI-CA there is a Data Transfer option, do you use this? Do you use the data master sync to convert standard customers to BP's?

  • Asking for Serial Number after Apple Remote Desktop package installation.

    Hello guys, I just finish making a package of Sketchup 6, it works fine and everything but is asking me to enter the serial number and this is after i have already enter the serial number before i made the package......correct me if I'm wrong but i t

  • Doc lit wrapped

    Hi, i've created a doc lit wrapped web service and i use JAXB. But JAXB creates java classes for the wrapper classes, which is not wanted (Axis 1 for example doesn't create the wrapper classes if the wsdl is wrapped compatible). How can i avoid creat

  • Automatically accept VeriSign certs?

    Hi all. I'm pretty new to SSL so any help with this question would be appreciated. I have a web service app running on a WebLogic 10.3 server (let's call it ServerA). This web service app also contains a web service client to make calls to another we