New vlan creating problem in FWSM Context

Hi,
We need to add a new IP range in the Network. In my network there are lot of Context in FWSM. Now to add a new network, I have created a new vlan and allowed to FWSM and same created in Context. but the vlan is not getting up in FWSM and Context.
Please help me out on this.

All these process has been done and fine. in the context the new vlan is showing down. its not getting up.
What to do to make this vlan up.
find the output in RED.
FWSM-1/CDR# show int ip brief
Interface                  IP-Address      OK? Method Status                Prot
Vlan101                    172.19.60.4     YES CONFIG up                    up
Vlan112                    10.128.112.254 YES CONFIG up                    up
Vlan301                    172.16.11.254   YES CONFIG up                    up
Vlan302                    172.16.12.254   YES CONFIG up                    up
Vlan303                    172.16.13.254   YES manual down                  down

Similar Messages

Problem with MAC Pinning and new VLAN

[Cross posting to Nexus 1000V and UCS forums]
Hi all, I have a working setup of UCS 1.4 (3i) and Nexus 1000V 1.4 and as per the best practice guide am using 'channel-group auto mode on mac-pinning' on the Nexus uplinks. I am having trouble when adding a new VLAN into this environment, and it is a reproducable problem across two different installations.
I go through the usual VLAN creating process on the Nexus, the upstream network and within UCS itself. I create the new vethernet port profile and set it as an access port in the new VLAN. However when I attach a VM (either existing or new) to this new vethernet port profile within vCentre the VM cannot communicate with anything. However, if I disable MAC pinning with 'no channel-group auto mode on mac-pinning', the VM instantly starts to talk to the outside world and the new VLAN is up and running. I can then turn MAC pinning back on again and everything continues to work.
So the question is, is this behaviour normal or is there a problem? Disabling MAC pinning does have a brief interruption to the uplink so is not a viable long-term solution for the customer when they want to add new VLANs. Is there a way to add new VLANs in this scenario without any network downtime, however brief?
Thanks

Simon,
Let's gather some further outputs if you're able to recreate this (if this is prod, let me know and I'll whip this up in my lab).
Go through the process of setting up the new VLAN. Once you confirmed your VM has no connectivity when using a PP tied to the new VLAN, gather the following outputs into a text file and attach to this thread:
From the VSM:
show vlan
show int trunk
show log last 15
module vem x execute vemcmd show vlan y (x = module of VEM where VM is running, y is the VLAN ID)
module vem x execute vemcmd show bd y (y = VLAN ID)
module vem x execute vemcmd show pc
module vem x execute vemcmd show port
module vem x execute vemcmd show pinning
module vem x execute vemcmd show trunk
From the CLI of UCS Interconnect:
connect NXOS
show vlan
show int trunk
Also please highlight or Identify:
- Problem VLAN ID #
- VM veth # in question (1000v)
- vEth # for each Service Profile vNIC used for your VEM uplinks (UCS)
We'll start with this and work from here. Once I have these outputs I'll let you know if I need anything else.
Regards,
Robert
(I'll keep this as the main thread, and update the 1000v forum once we resolve)

What's the easiest way to create a new VLAN and then move all existing devices to it?

One of our locations was implemented using VLAN1 as the main (native) VLAN. My goal is to create a new sub-interface on the router and then move all the existing switches (all Layer 2) into the new VLAN, without disrupting the network (and remotely). I am trying to determine the best way to proceed. Thanks.

I wanted to shed a little more light on the situation. The "new" VLAN has actually been in existence since the network was initially setup. The network runs VTP and the new VLAN already has an interface on the router and already shows up on all the switches when you do a "sh vlan" command. We have about 10 VLANs in all. In reality, I am simply trying to migrate about 8 switches from VLAN1 (which they never should have been on) to the new VLAN. I know that I need to create an interface for the new VLAN on each of the switches and then swap the management IP to that interface. If I could connectly directly into each switch via the console port, this would be a simple task. However, the switches are in extremely remote locations with special circumstances, thus I have no physical access to them. This fact has me a little reluctant to making the changes, as we can't afford any mistakes that would potentially cause network downtime. I am looking for some guidance on exactly the steps to take to achieve my goal. Let's call the new vlan, VLAN2. During testing, I logged into a local switch that was on VLAN1 (that's where it had it's management address). It did have VLAN2-VLAN10 as well, via VTP. I created an interface for VLAN3 on the switch and then accessed it via VLAN3 to swap the main management interface from VLAN1 to VLAN2. The changes took, but I couldn't access it via VLAN2. I am assuming this is because the router still has VLAN1 listed as the native vlan and the VLAN2 IP address is still assigned to VLAN1 on the router. What would be the best way for me to make the required changes on the 8 switches that need swapped, without losing remote access? It wouldn't hurt if the network went down for 5 minutes or less, but we can't have a big outage. Thanks.

Can't create a new illustration. Problems occurred while saving the print file.

I can't open a new Illustrator file. It sends me this error: Can't create a new illustration. Problems occurred while saving the print file. ID:-1
I opened a previous document created in CC, but it will not allow me to copy and paste items from one doc to another.
I have rebooted with no avail.
System:
Adobe Creative Cloud CC
Mac Book Pro 2012
2.6 GHz Intel Core i7
8 GB 1600 MHz DDR3

Is a printer connected? Is it turned ON? Is the driver up to date?
Illustrator checks this every time and also writes information on the printer into the file.

Gmail on iphone was working fine until yesterday when it prompted me with the message cannot get mail user name or password for gmail is incorrect, i have tried deleting the account and re-created a new account, same problem, can anyone help?

gmail on iphone was working fine until yesterday when it prompted me with the message "cannot get mail user name or password for gmail is incorrect", i have tried deleting the account and re-created a new account, same problem, can anyone help?

paulcb, you're a genius, it worked, thank you so much, you don't know how much stress you have taken off my shoulders, I am constantly on my email in my iphone everyday. Thanks a million, take care. Robert.

The spanning-tree add strange value when I create new Vlans

Hi,
On all switchs access, the spanning-tree add strange value when I create new Vlans from Distrib Layer,
and no association is created with any interface with spanning-tree vlan 700, see below in this exemple,
until I reboot the switch.
somebody already saw this values ?
DSFDS112#sh span sum
Switch is in rapid-pvst mode
Root bridge for: none
EtherChannel misconfig guard is enabled
Extended system ID           is enabled
Portfast Default             is disabled
PortFast BPDU Guard Default is disabled
Portfast BPDU Filter Default is disabled
Loopguard Default            is enabled
UplinkFast                   is disabled
Stack port is StackPort1
BackboneFast                 is disabled
Configured Pathcost method used is long
Name                   Blocking Listening Learning Forwarding STP Active
VLAN0001                     0         0        0          3          3
VLAN0002                     0         0        0         22         22
VLAN0006                     0         0        0          3          3
VLAN0007                     0         0        0          8          8
VLAN0009                     0         0        0          4          4
VLAN0010                     0         0        0          3          3
VLAN0011                     0         0        0          3          3
VLAN0012                     0         0        0          3          3
VLAN0013                     0         0        0          3          3
VLAN0090                     0         0        0         15         15
VLAN0109                     0         0        0          3          3
VLAN0200                     0         0        0          4          4
VLAN0300                     0         0        0         26         26
VLAN0302                     0         0        0          4          4
VLAN0700               -   253 -1872756560 2087191206 -1872756549 2080375982
VLAN0702               -   253 -1872756560 2087191206 -1872756549 2080375982
VLAN0704                     0         0        0          4          4
VLAN0710               -   253 -1872756560 2087191206 -1872756549 2080375982
VLAN0816                     0         0        0          3          3
VLAN0820                     0         0        0          3          3
20 vlans               -   759 -1323302384 1966606322 -1323302237 1946160764
DSFDS112#sh span vlan 700
VLAN0700
Spanning tree enabled protocol rstp
Root ID    Priority    4796
             Address     0008.e3ff.fcbc
             Cost        10000
             Port        608 (Port-channel1)
             Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority    62140 (priority 61440 sys-id-ext 700)
             Address     885a.9213.6880
             Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec
             Aging Time 300 sec
Interface           Role Sts Cost      Prio.Nbr Type
Po1                Root FWD 10000     128.608 P2p
DSFDS112#sh run int Gi1/0/25
Building configuration...
Current configuration : 194 bytes
interface GigabitEthernet1/0/25
description Station12
switchport access vlan 700
switchport mode access
end
DSFDS112#sh span interface Gi1/0/25
no spanning tree info available for GigabitEthernet1/0/25
DSFDS112#sh int status interface Gi1/0/25
Port      Name               Status       Vlan       Duplex Speed Type
Gi1/0/25 Station12          connected    700          full    100 10/100/1000BaseTX
Thanks for your help,
Regards.

Venki,
The ORA-00942 is okay because there is no existing object. But what stuck me is the ORA-01921 error which may indicate that this might not be a new database.
CREATE ROLE exp_full_database
ERROR at line 1:
ORA-01921: role name 'EXP_FULL_DATABASE' conflicts with another user or role name
CREATE ROLE imp_full_database
ERROR at line 1:
ORA-01921: role name 'IMP_FULL_DATABASE' conflicts with another user or role name
Are there any existing databases on this server? Have you tried to create it on other machine?I searched on Metalink too and found Doc ID: 237486.1 ORA-29807 Signalled While Creating Database using DBCA which say that eroror could be ignored. You may want to review that as well.
Ittichai

File Sharing Permissions Problem When NEW Files Created

My wife & I have a home office network setup for our business, and are having trouble with shared files over the network. We're both on Macs, and all of our client files reside on an internal hard drive in my Mac Pro. I've set her up as a "Sharing Only" user on my computer (which matches the username & password of her account on her iMac), and have properly setup file sharing in both the System Preferences, and in the directory itself that we want shared. I've also applied the permissions to all files & folders below the main folder, and she can view, open and save whatever she needs and it works great.
*Here's where the problem comes in...* If either of us create a NEW file or folder, the other person doesn't have WRITE access to it (we can browse and open it fine). The second I go to update a file she created, it won't let me over-write it, and I have to go into the permissions for that specific file and give myself Read/Write access. I've experimented with "Groups", and assigned both of us a special group, and applied that group access to that directory, but it doesn't make any difference when a NEW file or folder is created - it doesn't copy the parent directory permissions to itself, it makes one of us the owner, and nobody else has access.
Is there any way around this? We're both constantly creating new files, and it really hampers our workflow to have to keep re-applying file permissions every time one of us creates something new. Ideally, any new files created within that main client folder would automatically have the same permissions as the parent directory. Any help would be greatly appreciated! Thanks!!

Here's how to do this with Access Control Lists.
1) Go to System Preferences -> Accounts. Unlock the padlock. Click the + button. Make a new group. Call this group "sharing" for the purposes of this exercise. Add the users you want to the group.
2) Make a new empty folder in /Users/Shared. Call it "sharefolder".
3) Log in to an admin account and paste all three of these lines at once into Terminal:
sudo chmod +a "sharing allow delete,chown,list,search,add_file,\
addsubdirectory,delete_child,file_inherit,directoryinherit" \
/Users/Shared/sharefolder
4) From now on, any files you create or copy to the sharefolder or to any of its subfolders will inherit read+write permission for all users in the group. If you have any existing files that you want to move into the sharefolder, a simple move by drag & drop won't cause the permissions to propagate. you need to hold down the option key while dragging them in. This will copy them over, ensuring that the ACL permission is properly inherited.
One other caveat: Files created by a small number of OS X apps won't inherit the permissions properly if saved directly into the ACL folder hierarchy. TextEdit is one such app. Save TextEdit files in a temporary location first, and then copy them in. Then they will have the correct permissions.

Create 2 new VLANs and Trunk

Hi
I am working with a service provider to segment inbound traffic for a client. Rather than creating a seperate fibre circuit, we have opted for two new VLANs and a trunk to the upstream router.
The equipment we are working on is a Cisco Catalyst 2900XL, IOS (tm) C2900XL Software (C2900XL-H-M), Version 11.2(8)SA2, RELEASE SOFTWARE (fc1)
Current configuration:
version 11.2
no service pad
no service udp-small-servers
no service tcp-small-servers
hostname
enable secret
ip subnet-zero
ip domain-name
ip name-server
interface VLAN1
ip address
no ip route-cache
interface FastEthernet0/1
speed 10
duplex full
spantree portfast
interface FastEthernet0/2
speed 100
duplex full
spantree portfast
interface FastEthernet0/3
spantree portfast
interface FastEthernet0/4
shutdown
spantree portfast
interface FastEthernet0/5
shutdown
spantree portfast
interface FastEthernet0/6
shutdown
spantree portfast
interface FastEthernet0/7
shutdown
spantree portfast
interface FastEthernet0/8
shutdown
spantree portfast
ip default-gateway
snmp-server community private
snmp-server community public
line con 0
exec-timeout 0 0
stopbits 1
line vty 0 4
password
login
end
I need to creat VLAN 2 and VLAN 3. Traffic currently running through VLAN 1 will be segmented between these two VLANs with a trunk to an upstream router.
vlan database commands don't appear to be working. At this stage I only want to create the VLANs. Can anyone recommend a command reference?

Hi Paresh!
Good to hear from you!
User Access Verification
Password:
>en
Password:
#sh vtp status
^
% Invalid input detected at '^' marker.
It doesn't accept the command.
Here are the results of a show ? from enable mode:
publicswitch#sh ?
access-lists
accounting
aliases
arp
boot
buffers
cdp
clock
configuration
controllers
debugging
file
forward
history
hosts
html
interfaces
ip
line
location
logging
mac-address-table
memory
port
privilege
processes
queue
queueing
registry
reload
rhosts
rmon
running-config
sessions
snmp
spantree
stacks
startup-config
subsys
tcp
tech-support
terminal
users
version
Thanks

New VLAN problem

Hello,
I have problem in configuring new VLAN in 2950, when ever i established a more than one VLAN previous one is shutdown.
Only one VLAN is up at the time
Thank You

Hi Mansoor,
Are you talking about the "interface vlan " i.e layer 3 SVI on the 2950. id yes, then as it is a layer 2 switch you can only enable one 1 interface vlan on this switch only to manage it. You can not have multiple Vlan SVI on this switch as it is on Layer 3 switches like 3550.
HTH, please rate if it does.
-amit singh

Problems trying to migrating ports to a new Vlan using an externar DHCP server

Hello, here is the thing. I have the following configuration in my Core Switch:
interface Vlan1
ip address 10.24.74.1 255.255.254.0 secondary
ip address 192.0.2.54 255.255.255.0
ip helper-address 10.24.86.22
no ip redirects
As you see, we are using an external DHCP server for the Vlan1 and it is working:
Internet 192.0.2.98 0 3c97.0e23.3d8d ARPA Vlan1
Internet 192.0.2.194 0 e89a.8f77.36a0 ARPA Vlan1
Internet 192.0.2.195 0 e89a.8f77.01ab ARPA Vlan1
Internet 192.0.2.198 2 001c.25de.acaa ARPA Vlan1
Internet 192.0.2.199 0 d8eb.97a6.30a4 ARPA Vlan1
Internet 192.0.2.196 0 f0de.f1f1.1e06 ARPA Vlan1
Internet 192.0.2.203 0 e89a.8f77.016f ARPA Vlan1
Internet 192.0.2.207 4 d0c7.89d6.3ba3 ARPA Vlan1
Internet 192.0.2.211 0 4437.e636.7ef7 ARPA Vlan1
But, when a try to migrate this port to a new Vlan (Vlan50), I got the following issue:
001290: Jul 23 08:27:44.705 GMT: DHCPD: DHCPREQUEST received from client 013c.970e.233d.8d.
001291: Jul 23 08:27:44.705 GMT: DHCPD: client has moved to a new subnet.
001292: Jul 23 08:27:44.705 GMT: DHCPD: Sending DHCPNAK to client 013c.970e.233d.8d.
001293: Jul 23 08:27:44.705 GMT: DHCPD: broadcasting BOOTREPLY to client 3c97.0e23.3d8d.
001294: Jul 23 08:27:44.725 GMT: dhcp_snooping_get_ingress_port: Interface src_index 0xF
001295: Jul 23 08:27:44.725 GMT: DHCPD: DHCPDISCOVER received from client 013c.970e.233d.8d on interface Vlan50.
001296: Jul 23 08:27:44.725 GMT: DHCPD: there is no address pool for 10.24.76.1.
001297: Jul 23 08:27:44.725 GMT: DHCPD: setting giaddr to 10.24.76.1.
001298: Jul 23 08:27:44.725 GMT: DHCPD: BOOTREQUEST from 013c.970e.233d.8d forwarded to 10.24.86.21.
Any suggestions,
Thank you in advance,

Just to help someone who has the same issue.
I found this on the web site:
When the server receives a DHCPREQUEST from a client in the RENEWING (or REBINDING) state, it normally grants the renewal only if the client has an unexpired lease with this server. Otherwise the server ignores the request; the server to which the client is bound should answer the client. (The only exception is normally that if a server is sure the IP address the client is asking for is inappropriate for the client, the server will send a DHCPNAK, which forces the client back to the INIT state.)
Thank you anyway

Connection has already been created in this tx context

Hi All,
I am experiencing this problem and I am not able to find the solution for this.
Please help.
I have stateless EJB ('REQUIRED') and within that I have many EJB's using 'SUPPORTS'
as transaction and in the flow I am also calling DAO object which invokes JDBC
( using TXDataSource) call from different Datasource from the one above EJB.
I get SQL EXception as
"SQLException while getting DB connection : Connection has already been created
in this tx context for pool named oraclePool. Illegal attempt to create connection
from another pool: sybPool "
I am not able to figure out why this error is coming. Any help will be appreciated!
Regards
SH

Hi all,
I am facing this same problem
i am using database for weblogic integrator
Pointbase
and oracle for my system.
I didn't get the what u meant by XA driver
Regards,
Cleophus Pereira
"Slava Imeshev" <[email protected]> wrote:
Hi Sanjeev,
Slava
"Sanjeev" <[email protected]> wrote in message
news:3d6f55bd$[email protected]..
Hi All,
I am experiencing this problem and I am not able to find the solutionfor this.
Please help.
I have stateless EJB ('REQUIRED') and within that I have many EJB'susing
'SUPPORTS'
as transaction and in the flow I am also calling DAO object which invokesJDBC
( using TXDataSource) call from different Datasource from the one aboveEJB.
I get SQL EXception as
"SQLException while getting DB connection : Connection has alreadybeen
created
in this tx context for pool named oraclePool. Illegal attempt to createconnection
from another pool: sybPool "
I am not able to figure out why this error is coming. Any help willbe
appreciated!
Regards
SH

Error while generating CW kin for the new BG created for Taiwan

HiAll,
Please provide your help to resolve this issue,
Iam getting error while generating CW kin for the new BG created for Taiwan, China.
Error : Value TW is not a Valid context for the Descriptive Flexfield Person Developer DF.
Please let me know, is there any step missed to create CW kins for new BG's.
Thanks-
Sowmya.
Edited by: user13419037 on Jul 2, 2012 3:41 AM

Hello ,
Your solution can be solved by enabling the displayed check Box in Location Address DFF
Thanks
Bindu

Populating marketing attribute of bp in new field created by eew in crm

Hi all,
    I have created new field in transaction types(lead opp, quotation and order) through eew.
    how do i populate a value of a marketing attribute that i have maintained for a business partner(TABLE for marketing attribute:- AUSP) in the new fields created in all the transaction types.
    Can anyone help me in how to achieve this as it is an high priority issue for me?
    I have tried doing by writing a code in pbo of the screen in which fields are created but it gives me a dump at item level if item is maintained otherwise it works but item is compulsary.
Regards,
Rahul

Hi Rahul,
Check the BADI 'CRM_CUSTOMER_H_BADI'
Implement the method 'CRM_CUSTOMER_H_MERGE'
First of all select the data from the table.
Fill in the appropriate corresponding field in the structure 'CS_CUSTOMER_H_BADI',of the method, with the data extacted. Finally(very important), In the table 'IT_INPUT_FIELD_NAMES', of the method, append a line with the field FIELDNAME containing the name of the field in the Customer_h structure and field CHANGEABLE containing space.
I think this should solve your problem.

Problems with external context mapping

Hi ,
I am having the following problems with external context mapping from one WD component to another.
Problem description:
In the <i>Component Interfaces</i> I have defined a WD interface "InfA".
In the <i>interface controller</i> of this compoenent,I have ContextA and attributeA(cardinality 1..1).The contextA is marked as an "Input Element".
Now my webdynpro componentB adds InfA as used component.In componentB I decalre a contextB with attributeB and map it to contextA to set up the external context mapping.
Now I expect that if any webdynpro component implements this WD interface InfA ,he has access to contextA with the data getting filled from contextB.
After i have created the component for the used component I try to fill values in the source node contextB thru this code:
wdContext.currentContextB.setB(value);
But in the runtime I keep getting error nullPointerException for nodeContextB,suggesting that the mapping has not been completed.
Can anyone suggest due to what the error can come ,and, if its a webdynpro bug ,is there a workaround??
Thanks in advance for your help.
Best regards
Sourav

HI,
Valery : I personally checked by doing the example, if the names of value attribute are different in the child's interface and parents component controller then it throws the exception.
Sourav: NullPointer Exception is thrown when something is not properly initialised, if in the main component the cardinality of mapped origin is 1.1 then you need to access it element directly like:
wdContext.currentParentNodeElement().setFname("Abhijeet");
wdContext.currentParentNodeElement().setLname("M");
i will suggest just check out if you are declaring some element of value node and without initialising taking its use or what?
if this doesnt solve your problem, please post the expanded exception.
hope it helps
let me know if you face nay problem
regards

New VLan can't talk to DHCP server

We have just created a new vlan (172.18.1.0/24 vlan 3) on our network and we are trying to use an exsisting DHCP server (192.168.0.1 vlan 8) But the clients on the 172.18.1.0 network can't connect to this DHCP server on vlan 8. My questions are.
1. Do we need to specify vlan 3 on the switchport that the DHCP server is plugged into?
2. Is there something @ L3 we need to enable to pass these DHCP server messages too across these vlans?
Has any used DHCP servers on different subnets?
Any info would be great.

You need to configure an IP helper on the appropriate VLAN interface(s). Routers, by default, will not forward broadcast packets. Since DHCP client messages use the destination IP address of 255.255.255.255 (all Nets Broadcast), DHCP clients will not be able to send requests to a DHCP server on a different subnet unless the DHCP/BootP Relay Agent is configured on the router. The DHCP/BootP Relay Agent will forward DHCP requests on behalf of a DHCP client to the DHCP server. The DHCP/BootP Relay Agent will append its own IP address to the source IP address of the DHCP frames going to the DHCP server. This allows the DHCP server to respond via unicast to the DHCP/BootP Relay Agent. The DHCP/BootP Relay Agent will also populate the Gateway IP address field with the IP address of the interface on which the DHCP message is received from the client. The DHCP server uses the Gateway ip address field to determine the subnet from which the DHCPDISCOVER, DHCPREQUEST, or DHCPINFORM message originates.
See more at the following document, with configuration steps and examples:
http://www.cisco.com/warp/public/473/100.html#configdhcpbootpciscoios

New vlan creating problem in FWSM Context

Similar Messages

Maybe you are looking for