Not pinging virtual interface

Dear All,
I have got new cisco ASA 5580 running 7.2(4) on it when i am trying to configured Virtual interface on vlan 400 in Gi0/0.400 to LBASE.now the problem is
from my MZ zone 10.242.107.17 to Lbase virtual interface 10.242.103.1 iam not able to ping.
Please suggest.
Many Thanks
Srini

Hi Varun,
Thanks for reply
iam configuring SNMP on my serverload balancer and my SLB v-lan is 400 and igiven virtual interface ip 10.242.105.1 on my ASA.
In my asa my snmp server is 10.242.103.42 now iam unable to ping from my snmp server to ace virtual ip 10.242.105.1 to discover ace on my snmp server.
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
interface Management0/1
description LAN Failover Interface
management-only
interface GigabitEthernet3/0
nameif OUTSIDE
security-level 0
ip address 223.27.122.19 255.255.255.240 standby 223.27.122.20
interface GigabitEthernet3/1
nameif DMZ
security-level 50
ip address 10.242.104.1 255.255.255.0 standby 10.242.104.2
interface GigabitEthernet3/2
nameif INSIDE
security-level 0
no ip address
interface GigabitEthernet3/2.200
vlan 200
nameif MZ
security-level 80
ip address 10.242.103.1 255.255.255.0 standby 10.242.103.2
interface GigabitEthernet3/2.300
vlan 300
nameif NOC
security-level 79
ip address 10.242.101.100 255.255.255.0 standby 10.242.101.101
interface GigabitEthernet3/2.310
vlan 310
nameif DB-NETW-1
security-level 75
ip address 10.242.110.1 255.255.255.0
interface GigabitEthernet3/2.400
vlan 400
nameif LBACE
security-level 90
ip address 10.242.105.1 255.255.255.0 standby 10.242.105.2
interface GigabitEthernet3/2.500
vlan 500
nameif DC-USERS
security-level 60
ip address 10.242.109.1 255.255.255.0
interface GigabitEthernet3/2.800
vlan 800
nameif DMZ-ACC
security-level 48
ip address 10.242.107.1 255.255.255.0 standby 10.242.107.2
interface GigabitEthernet3/2.900
vlan 900
nameif MZ-ACC
security-level 49
ip address 10.242.108.1 255.255.255.0 standby 10.242.108.2
interface GigabitEthernet3/3
shutdown
no nameif
no security-level
no ip address
2) ACE conf:
snmp-server community nglsnmp group Network-Monitor
snmp-server host 10.242.103.42 traps version 2c nglsnmp
snmp-server host 10.242.103.43 traps version 2c nglsnmp
snmp-server host 10.242.103.44 traps version 2c nglsnmp
snmp-server host 10.242.103.45 traps version 2c nglsnmp
snmp-server enable traps slb serverfarm
snmp-server enable traps snmp coldstart
snmp-server enable traps slb vserver
snmp-server enable traps slb real
snmp-server enable traps syslog
snmp-server enable traps snmp authentication
snmp-server enable traps snmp linkup
snmp-server enable traps snmp linkdown
please help me
srini

Similar Messages

Can not add virtual interface on VirtualBox (SOLVED)

Hi guys , as tittle says ,
While trying to add an "host only" netwkork interface I get the following message:
VBoxNetAdpCtl: Error while adding new interface: failed to open /dev/vboxnetctl: No such file or directory
Im not sure if it is a kernel/modules related problem or permission ... anyway , there is no /dev/vboxnetctl device.
What should I do ?
Thanks
Last edited by leostereo (2013-08-08 14:00:46)

Have you tried this: https://wiki.archlinux.org/index.php/Vi … _interface

ABAP Web service - Virtual Interface Not Found

Hi,
I have created a ABAP web service based on RFC. I changed the authentication to "Basic username/password" from SOAMANAGER. Also tested the web service from WSNAVIGATOR (of different portal) using WSDL url. Web service successfully returned response.
Now, I have a AJAX client where I have hardcoded the request (from wsnavigator) and trying to call this web service in SAP BW web template (from HTML/JavaScript). But its not giving error as "Virtual Interface Not Found". Also, i get 500 error. But the end point of the web service if looked up from browser gives response. The SICF service is active and upon tests gives valid response.
Found couple of discussions regarding this:
http://wiki.sdn.sap.com/wiki/display/VC/VirtualInterfacenotfounderror
But i'm not finding the setting to activate virtual interface in SE80. ALso, we have created many such web services and they used to work fine prior to upgrade to Ehp1 SP05 (BI) but the newly created web service is not working.
Any inputs?
Abhijeet

Hi can you please let me know how you resolved this issue?

Why virtual interfaces added to ManagementOS not visible to Cluster service?

Hello All,
I"m starting this new thread since the one before is answered by our friend Udo. My problem in short is following. Diagram will be enough to explain what I'm trying to achieve. I've setup this lab to learn Hyper-V clustering with 2 nodes. It is Hyper-V
server 2012. Both nodes have 3x physical NIcs, 1 in each node is dedicated to managing the Node. Rest of the two are used to create a NIC team. Atop of that NIC team, a virtual switch is created with -AllowManagementOS
$False. Next I created and added following virtual interfaces to host partition, and plugged them into virtual switch created atop of teamed interface. These virtual interfaces should serve the purpose of various networks available.
For SAN i'm running a Linux VM which has iSCSI target server and clustering service has no problem with that. All tests pass ok.
The problem is......when those virtual interfaces added to hosts; do not appear as available networks
to cluster service; instead it only shows the management NIC as the available network to leverage.
This is making it difficult to understand how to setup a cluster of 2x Hyper-V Server nodes. Can someone help please?
Regards,
Shahzad.

Shahzad,
I've read this thread a couple of times and I don't think I'm clear on the exact question you're asking.
When the clustering service goes out to look for "Networks", what it does is scan the IP addresses on each node. Every time it finds an IP in a unique subnet, that subnet is listed as a network. It can't see virtual switches and doesn't care about
virtual vs. teamed vs. physical adapters or anything like that. It's just looking at IP addresses. This is why I'm confused when you say, "it won't show virtual interfaces available as networks". "Networks" in this context are IP subnets.
I'm not aware of any context where a singular interface would be treated like a network.
If you've got virtual adapters attached to the management operating system
and have assigned IPs to them, the cluster should have discovered those networks. If you have multiple adapters on the same node using IPs in the same subnet, that network will only appear once and the cluster service will only use
one adapter from that subnet on that node. The one it picked will be visible on the "Network Connections" tab at the bottom of Failover Cluster Manager when you're on the Networks section.
Eric Siron Altaro Hyper-V Blog
I am an independent blog contributor, not an Altaro employee. I am solely responsible for the content of my posts.
"Every relationship you have is in worse shape than you think."
Hello Eric and friends,
Eric, much appreciated about your interest about the issue and yes I agree with you when you said... "When the clustering service goes out to look for "Networks",
what it does is scan the IP addresses on each node. Every time it finds an IP in a unique subnet, that subnet is listed as a network. It can't see virtual switches and doesn't care about virtual vs. teamed vs. physical adapters or anything like that. It's
just looking at IP addresses. This is why I'm confused when you say, "it won't show virtual interfaces available as networks". "Networks" in this context are IP subnets. I'm not aware of any context where a singular interface would be treated
like a network."
By networks I meant to say subnets. Let me explain what I've configured so far:
Node 1 & Node 2 installed with 3x NICs. All 3 NICs/node plugged into same switch.
Node1: 131.107.0.50/24
Node2: 131.107l.0.150/24
A Core Domain controller VM running on Node 1: 131.107.0.200/24
A JUMPBOX (WS 2012 R2 Std.) VM running on Node 1: 131.107.0.100/24
A Linux SAN VM running on Node 2: 10.1.1.100/8
I planed to configured following networks:
(1) Cluster traffic: 10.0.0.50/24 (IP given to virtual interface for Cluster traffic in Node1)
Cluster traffic: 10.0.0.150/24 (IP given to virtual interface for Cluster traffic in Node2)
(2) SAN traffic: 10.1.1.50/8 (IP given to virtual interfce for SAN traffic in Node1)
SAN traffic: 10.1.1.150/8 (IP given to virtual interfce for SAN traffic in Node2)
Note: Cluster service has no problem accessing the SAN VM (10.1.1.100) over this network, it validates SAN settings and comes back OK. This is an indication that virtual interface is
working fine.
(3) Migration traffic: 172.168.0.50/8 (IP given to virtual interfce for
Migration traffic in Node1)
Migration traffic: 172.168.0.150/8 (IP given to virtual interfce for
Migration traffic in Node2)
All these networks (virtual interfaces) are made available through two virtual switches which are configured EXACTLY identical on both Node1/Node2.
Now after finishing the cluster validation steps (which comes all OK), when create cluster wizard starts, it only shows one network; i.e. network of physical Layer 2 switch i.e. 131.107.0.0/24.
I wonder why it won't show IPs of other networks (10.0.0.0/8, 10.1.1.0/8 and 172.168.0.0/8)
Regards,
Shahzad

Can not ping oracle linux vm in Virtual Box from my host

Hy
I have setup oracle linux 7 on virtual box including vboxadditions.
But I can not ping this maschine from outside ( it works for my other vm oel 5.8 )
I did systemctl stop filewall.service
Here my Network konfiguration inside my oel7 vm:
/etc/sysconfig/network-scripts/ifcfg-enp0s8
TYPE=Ethernet
BOOTPROTO=none
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=no
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
NAME=public
UUID=388ee413-55e9-45e1-be1d-4f5eedc402f3
ONBOOT=yes
IPADDR0=10.20.50.101
PREFIX0=24
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
HWADDR=08:00:27:5F:87:91
Can anyone help?
Thanks
Peter Schlaeger

Hi,
Before discussing the network configuration of Oracle Linux 7 (By the way; it seams correct), lets talk about the VirtualBox network configuration, So the Network adapter of your VM can be attached to {NAT, Bridged Adapter, Internal Network, Host-only Adapter, ...}, what is the Adapter attached to your NIC?
Make sure the Network Adapter is the same as the your other VM (OL 5.8).
Best regards

WLAN Controller learning IP/MAC on wrong virtual interface

Hello
I believe since I upgraded my WiSM to 7.0.250.0 is it learning a MAC address on the wrong virtual interface.
The setup:
- a Linux server with 2 virtual interfaces, both use the same MAC address, one is the gateway of VLAN 116 and one is the gateway of VLAN 240
- a WiSM with several virtual interfaces, including one in 116 and one in 240
Here the arp table with the problem:
    MAC Address        IP Address     Port   VLAN   Type
00:50:56:BD:32:92   172.16.240.9     29     240    Host
00:1E:4A:FA:87:8B   172.16.102.12    29     0      Permanent
00:1E:4A:FA:50:0B   172.16.102.13    29     0      Permanent
00:1E:4A:FA:81:2B   172.16.102.14    29     0      Permanent
00:50:56:BD:32:92   172.16.116.9     29     240    Host
00:1D:E0:31:55:23   172.16.116.185   29     116    Client
58:94:6B:68:50:E8   172.16.118.201   29     116    Client
1C:B0:94:B7:38:08   172.16.118.234   29     116    Client
And here after I made a PING from the controller to the listed ip address:
    MAC Address        IP Address     Port   VLAN   Type
00:50:56:BD:32:92   172.16.240.9     29     240    Host
00:1E:4A:FA:87:8B   172.16.102.12    29     0      Permanent
00:1E:4A:FA:50:0B   172.16.102.13    29     0      Permanent
00:1E:4A:FA:81:2B   172.16.102.14    29     0      Permanent
00:50:56:BD:32:92   172.16.116.9     29     116    Host
00:1D:E0:31:55:23   172.16.116.185   29     116    Client
38:E7:D8:D3:7C:FA   172.16.118.92    29     116    Client
58:94:6B:68:50:E8   172.16.118.201   29     116    Client
1C:B0:94:B7:38:08   172.16.118.234   29     116    Client
18:AF:61:12:E9:FB   192.168.1.59     29     117    Client
Has anybody else the same problem?
The host 172.16.116.9 is also the configured DHCP server on VLAN 116.
Is there a way to statically configure this IP address on that VLAN? Because it causes every few days a service outage on that VLAN (which is bound to an SSID).

Yup, I'd say still valid. Seeing as it is the gateway, if it had different mac addresses per interface, it might still work.
No, clients in the same subnet can communicate, but it is not recommended to 'bridge' wired and wireless with a WLC. The WLC doesn't like to bridge the communication by default, though there are work arounds.
I might also say that as it uses the same MAC address for both virtual interfaces L2 is going to be messed up as each time there were an ARP the entry would change.
Take a look and see if you can manually change the mac for one of the interfaces and test again.
HTH,
Steve

Ability to ping redundant interface IP address

Hi,
I have this setup for our content switches.
Primary F/W --> Primary CSS --> Local Switches
| |
| |
Secondary F/W --> Secondary CSS --> Local Switches
This is the relevant configuration.
Primary CSS
circuit VLAN4
ip address 192.168.76.4 255.255.255.0
ip virtual-router 4 priority 101 preempt
ip redundant-interface 4 192.168.76.254
Secondary CSS
circuit VLAN4
ip address 192.168.76.5 255.255.255.0
ip virtual-router 4 priority 90
ip redundant-interface 4 192.168.76.254
The problem is that the Secondary F/W can not ping the redundant interface IP address via the secondary path when all devices are in normal mode.
Is this normal?
The ping is occuring for firewall failover checking.
Thanks,
Ben

it should work.
Your diagram does not display very well, so I don't know where are the | links.
What should be the path of traffic from secondary firewall redundant-interface ?
Is the traffic going to 1 CSS and being bridge to the 2nd CSS ?
If that's the case, you need the command 'ip uncond-bridging' on both CSS to force CSS to bridge first and then route.
Regards,
Gilles.

EZVPN Virtual Interface Setup

Hi All,
I currently have an 857 router (IOS 12.3(14)YT1) connected via EZVPN to an ASA Box (5510, ASA Vers 7.2). My question is this- Everything behind the router can access the local LAN the other side of the ASA box, but i would like the router itself to be able to access the local LAN the other side of the ASA box, currently at the minute if i try and ping anything on the ASA side LAN from the router it goes out to the internet, i need it to be able to access the local LAN to monitor it though. How would i go about this? i have read a few things about virtual interfaces but have no experience of these and am not sure where to start?
Any Help is greatly appreciated
I have attached a very quick Viso diagram to try and show what i'm trying to achieve

Hi,
Refer
1.http://help.sap.com/saphelp_nw04/helpdata/en/e9/ae1b9a5d2cef4ea4b579f19d902871/frameset.htm
2.http://help.sap.com/saphelp_nw04/helpdata/en/37/12dd95a22831469a2363d98b19506b/frameset.htm
Regards,
P.Manivannan

Virtual Interface generation bug in NetWeaver ?

I use the Web Service generation wizard to generate a virtual interface which exposes methods in an EJB. As one of the parameters I pass a simple java bean, lets say:
public class StatusCode
private String name;
private boolean buggy;
public String getName() {...}
public void setName(String newName){...}
public boolean isBuggy() {...}
public void setBuggy(boolean trueOrFalse){...}
When I look at the virtual interface generated, especially at the Types tab, my boolean attribute is not included.
If I change the getter to "getBuggy()", the attribute is included in the VI. The only problem is that the typical Java Bean framework, say from sun or ibm, always map 'boolean' getters to 'isSomething()' and not 'getSomething()'.
Is this a bug with NW? Is there a fix or workaround for this ?
My version of NW:
Version: 2.0.7
Build id: 200407270250
Thanks in advance,
Mark
I posted this question also in the NW development forum, but so far no replies.

I try to login by use:
username : Administrator
password : <master password> (at least 1 number)
I try to login many times but it always fails.
(I am very sure about my password since i also try to reinstall many times - 10th. both J2EE 1.4 and Java EE 5)
Ivaylo Ivanov, do you sure that you test with this new edition. (Not the previous edition)
I see the other persons get the result like me:
Telnet Administration
SAP J2EE Engine v7.100
User name: Administrator
Password:
The user account is either expired, or not valid yet.
Login failed. Reason: The user account is either expired, or not valid yet.
Connection to host lost.
if my login is not correct, it will tell the other messags.
Telnet Administration
SAP J2EE Engine v7.100
User name: f
Password:
Cannot authenticate the user.
Login failed. Reason: Cannot authenticate the user.

Virtual Interface generation bug with NetWeaver ?

I use the Web Service generation wizard to generate a virtual interface which exposes methods in an EJB. As one of the parameters I pass a simple java bean, lets say:
public class StatusCode
    private String name;
    private boolean buggy;
    public String getName() {...}
    public void setName(String newName){...}
    public boolean isBuggy() {...}
    public void setBuggy(boolean trueOrFalse){...}
When I look at the virtual interface generated, especially at the Types tab, my boolean attribute is not included.
If I change the getter to "getBuggy()", the attribute is included in the VI. The only problem is that the typical Java Bean framework, say from sun or ibm, always map 'boolean' getters to 'isSomething()' and not 'getSomething()'.
Is this a bug with NW? Is there a fix or workaround for this ?
My version of NW:
Version: 2.0.7
Build id: 200407270250
Thanks in advance,
Mark
(If this is not the right forum, could someone suggest where I can post this question?)

Hi. As of Netweaver 2004s, the virtual interface piece has be absorbed into the creation of the web service definition, so there is no need to create it as well.   When you are getting the 403, how are you trying to run this, using the Web Service Homepage? If so, you will need to configure what j2e engine that you want to use to use. You can do this in WSADMIN under the Administration settings.   Check that this is set. YOu must know the URL of your j2e engine.
Regards,
Rich Heilman

Virtual Interface IP address

Hi,
In all Cisco documentation 1.1.1.1 is always specified as Virtual Interface IP address.
Here is my concern. When wireless client gets an IP address (through DHCP), 1.1.1.1 is entered as DHCP server which means that at 50% lease time client will attempt DHCP Request to 1.1.1.1
1.1.1.1 is not routable on the wired network, but controller makes sure that it is accessible on the wireless network.
The problem is if you have both wired and wireless connected, default gateway through wired connection wil have less cost, so client will attempt to send traffic to 1.1.1.1 using wired interface and will obviously fail.
At 83.5% of lease time client will attempt full DHCP process starting from Discovery and I guess this is when the IP on wireless NIC will be renewed, cause those Discovery messages are to 0.0.0.0....
Is my understanding correct?
Thanks!
David

Hi,
With both wired and wireless active at the same time (when laptop is docked for example)DHCP Request to 1.1.1.1 will fail cause it will be sent using wired interface and not wireless (default route metric in the host's routing table). This will cause this DHCP Request to fail at 50% lease time.
Next step is DHCP Discover at 83.5% of lease time. Destination IP will be 255.255.255.255 and it will be generated specifically on wireless interface, since this in the interface that needs to renew the IP.
This is exactly my question. Will this Discover to 255.255.255.255 go through wireless interface, cause this is the interface that needs IP addresses renewed. If so, I assume it will succeed and client's IP address will be renewed.
A bit worse than renewing at 50% lease time as a normal DHCP process, but better than loosing the IP at all when 100% lease time hits. 83.5% is somewhere in between...
Comments?
Can you also advise how do you disable DHCP Relay function on the controller? Do you need to remove DHCP IP addresses in WLAN configs?
Another question is about needing WLAN for Management interface. Is it needed for any reason? WLANs are always documented to be bound to Dynamic Interfaces and not Management, however Management interface does appear in the drop down menu under WLAN configuration. Thoughts?
Thanks!
David

Transaction code to create virtual interface.

I want to create a web service from a RFC. For that first, virtual interface needs to be created which will be linked to the RFC. Can u please tell me what is the transaction code to create a virtual interface.

Thankx for ur reply.
Now I have created the Web service. To do this I have done the followings-
1. created one RFC enabled Function Module.
2. Created one virtual interface
3. Created Web service defination.
4. Released Web service from the wsconfig transaction.
Then from The transaction wsadmin I have opened the browser by clicking Web Service > Web Service Homepage (from menu)
After logging in it , shows the web service and RFC with in it. Now after clicking the Test link from the browser it asks for the parameter of the RFC. But After populating the parameters and clicking send button. it gives NullpointerException.
exact err message is --
An error has occurred. Maybe the request is not accepted by the server:
java.lang.NullPointerException

WLC Virtual Interface config for a public SSL cert for Web Authentication

I'm trying to get a cert loaded on my 5508 WLC running 7.6.130.0 so when a Web-Auth users tries to authenticate they don't get the SSL cert error.
In the document "Generate CSR for Third−Party Certificates and
Download Chained Certificates to the WLC"
Document ID: 109597 it states the following
"Note: It is important that you provide the correct Common Name. Ensure that the host name that is
used to create the certificate (Common Name) matches the Domain Name System (DNS) host name
entry for the virtual interface IP on the WLC and that the name exists in the DNS as well. Also, after
you make the change to the VIP interface, you must reboot the system in order for this change to take
effect.
Here are my questions.
1. I have always had 1.1.1.1 as the address of the Virtual interface, should that change or can I leave it as 1.1.1.1?
2. In the "DNS Host Name" Field do I simply put the domain or the FQDN? Example. Company.com or hostname.company.com

Hi,
1) You can change that if you want. Normally it is non-Public and non-routable in your network.
2) Put the Host name for which you are going to give in your company DNS server where that Host name would be mapped to the Virtual ip address.
Regards
Dhiresh
** Please rate helpful posts**

CSS- traffic orignating from real server + Virtual interface

Hi all,
I am designing a solution at the moment, in which I shall have 2 servers behind a pair of CSS & their default gateway will be the Virtual Interface ip address of CSS.
Is there any problem forseen in traffic getting initiated from the server to any other subnet in the network and the return traffic to the server.
Servers shall connect to a pair of 3750 being used as L2 in stack .
The Stacked 3750's shall be placed below the CSS pair & the CSS pair shall further connects to a single 6509 upstream....
Each 3750-L2 connects single port to each CSS
(3750-L2-1 to CSS1 &
3750-L2-2 to CSS 2)
Both CSS connect to the SINGLE 6509 on diff blades. for better redundency.
The CSS shall not be connected to each other directly.
Both 3750-L2 connect to each other as well
IIS-1---L2_Sw1---CSS1---6509---Othr_Subent
IIS-1---L2_Sw2---CSS2---6509---Othr_Subent
Note: I shall have VIP/Virtual Interface config on my CSS's.
Appreciate validation and recomendations on this design.
Many Thanks,
gagan

Hi Gilles,
Many thanks for the confirmation.
Request verification on the below as well~
1. With the above scenario; I do not require any group (NAT) configuration, either for my servers initiating traffic for going out or for clients hitting the VIP to reach servers. The client & server shall be in diff VLAN?s of course.
2. With VIP & Virtual Interface configuration & couple of server VLAN's below on server side, I should be able to use both the gigabit interfaces on the 11503 to connect up and down stream as TRUNK. I mean to ask Virtual intf. & VIP has no problems working on the same TRUNK interface?
3. I understand that Fate sharing and critical service helps full failover (client & server side).
As an upstream router or L3 switch fails or the upstream connecting gigabit interface on CSS fails, the failover happens.
Will the same be applicable to downstream L2 switch & CSS interface failure? If any of these on the downstream fails will the CSS failover to the standby unit.
I think this above should work, just need confirmation coz I have not done this before.
Thanks a lot again,
Gagan

ABAP web service/ Virtual Interface

Hi all,
I'm trying to create a webservice for a ZRFC,when using the wizard in SE37>utilites>more utilities>create web service> from function module ,it's creating only the Webservice ,not prompting for a "virtual interface" .Same thing happens in se80,in create,under enterprise services node,i'm getting options only for web service and proxy object. Is there some thing missing.when excuting the webservice created from WSADMIN i'm getting 403 error ,page not found.
how do i create virtual interface ??.
we have version ECC 6.0,with software component SAP_BASIS 700 and java stack acitivated.How do i know what SAP Netweaver version we have ??.
any help !
Thanks
Bvan

Hi. As of Netweaver 2004s, the virtual interface piece has be absorbed into the creation of the web service definition, so there is no need to create it as well. When you are getting the 403, how are you trying to run this, using the Web Service Homepage? If so, you will need to configure what j2e engine that you want to use to use. You can do this in WSADMIN under the Administration settings. Check that this is set. YOu must know the URL of your j2e engine.
Regards,
Rich Heilman

Not pinging virtual interface

Similar Messages

Maybe you are looking for