PPPoE circuit-id tag processing with NAS-port-ID feature in 7200VXR problem

We faced the following problem when we configured both vendor-tag circuit-id service and radius-server attribute nas-port format d command in our 7200VXR.
When finishing configuration we did a debug radius and received the "AAA Unsupported Attr: circuit-id-tag". Circuit-id-tag as you can see in the sniffer traces has a format of access-node-identifier atm slot/module/port/vpi/vci.
However we never got this value as a NAS-Port-Id in our debug radius command. Instead we received in specific NAS-Port-Id the format Access-Node-Identifier eth slot/subslot/port:vlan tag (? I guess so).
The above described situation occurs when we run 12.2(31)SB2 IOS version. However we received different (probably better) results when we run on the router 12.3(7)XI7a IOS version. In this latter case as you can see in the debug radius output log the NAS-Port-Id field is filled with the correct circuit-id-tag : 10.112.0.227 atm 1/6:8.35.
Shall we try another configuration than the nas-port format d command for radius?
Thanks in advance for any answer provided.
Kind Regards
Dimitris Elefsiniotis

Hello,
thank you for your prompt response.
You can find additional information in the attached files (BRAS show tech/run, sniffer traces, debug radius commands in BRAS).
We are talking for normal sessions and as you can easily track yourself the NAS-Port-Id is different than the circuit-id-tag inserted by access device (DSLAM)(IOS 12.2(31)SB2. However, the DHCP snooping is used in aggregation 7600 router and option 82 is set by DSLAM as well.

Similar Messages

Wifi problem: I have a airport wifi the small one with one port for modem. My Problem is airport wifi works fine however when I power off my IMac then power it up later on It does not show a connection I then have to manual do it my self it's a pain and n

I have a airport wifi the small one with one port for modem. My Problem is airport wifi works fine however when I power off my IMac then power it up later on It does not show a connection I then have to manual do it my self it's a pain and never happened before I have tried resetting the airport unit but still no luck please help.
Thank you
Roy from malden

Hi Roy, this has worked for a few...
Make a New Location, Using network locations in Mac OS X ...
http://support.apple.com/kb/HT2712
10.7 & 10.8…
System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.
10.5.x/10.6.x/10.7.x instructions...
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list.
Instead of joining your Network from the list, click the WiFi icon at the top, and click join other network. Fill in everything as needed.

Nas port=0

hi all
I configured VXR7206 to terminate PPPOE sessions using VPDN GROUP and every thing is ok.
but when the user get access to VXR7206
I found the nas port = 0 for each online session ,is it any problem with nas port!!??
Note: all online sessions have access to the internet,I mean the authentication and acconting are working.

Unfortunately its not uncommon for VPN servers to either not send the nas-port or stick rubbish in it. Even though it doesnt have real physical ports for every session you would have thought a session id or other value could have been used.

Third party process with Valuated sales order stock

Hi All,
We have third party sales order process with valuated sales order stock. The problem is that in the theird party PR which is triggered directly from the sales order it determines a stock account which is assigned to the BSX key in OBYC.
But since this is third party processing as per my understanding a consumption account assigned to key GBB-VAX (since account assignmnt category is X) should get determined, so that when the GR is done against the PO a consumption posting is done in the background.
I am not able to understand if the system is determining the stock account due to the fact that it is valuated sales order stock and if so, what should happen after GR. Should we have a stock created for the material which is physically directly delivered to the customer?
Regards,
V S

Hi,
Check GBB-VKA which is defined in OME9 for your ''E'' Account Assignment Category that SAP will debit upon GR posting
Also check "X" GBB-VAX and the G/L account assignment in OBYC
The posting on GR should be debit KBS -Credit GR-IR
Thanks
Diwakar

What is the weblogic process or file opened with udp port?

I'm running weblogic 8.1 on linux AS 3.0, whenever I bring it up, there is a process that listens on udp, although my weblogic runs on default tcp port 7001. What file or process opened with up port (32770)? I'm curious to know whats running with udp..
Thanks

Does anyone know why weblogic opens udp port/ which process maps to the port?
Thanks

RV220W - Wrong NAS Port-Type using RADIUS for 802.11

Hi everyone
I am attempting to configure the RV220W (Firmware 1.0.6.6) for dot1x authentication over a Windows 2008 based RADIUS Server (using Remote Access Services).
The RADIUS settings on the RV220W are pointing towards that W2008 Server. The SSID has been set up for "WPA2 Enterprise" Security.
All the authentication attempts arrive at the server, but they fail to get authenticated because the Cisco RV220W is not transmitting a "NAS Port-Type" and therefore, the RADIUS Server will reject the requests.
This is what the request from the RV220W looks like on the server:
And this is a request from a similar Zyxel Router:
How can I enable the Cisco RV220W to send a NAS Port-Type (19, Wireless 802.11)?
Thank you for your support!

The RADIUS server in OS X Server is a standard FreeRADIUS implementation with Apple's own custom GUI frontend for configuring it and which only allows adding AirPort base-stations. In Mountain Lion Server it is even limited to a specific configuration for the AirPort base-station.
However if you follow the normal command-line instructions and steps for configuring FreeRADIUS then it will be possible to add any type of RADIUS client.
While as far as I can see by manually configuring the FreeRADIUS server in OS X Server should enable you to do what you want, most people chose to configure Squid to use either a PAM or the LDAP modules for Squid to in this case authenticate directly to Open Directory (which is of course based on LDAP).
I myself have used a PAM in the past with Squid to successfully configure Squid to authenticate users via Open Directory. I was even able to specific an Open Directory group and only allow members of that group access via the Squid Proxy Server. I then went a bit OTT and set up another open-source tool (which was discontinued and I had to fix to get working) to process the Squid logs and store them in MySQL, and then setup FileMaker Pro to connect to the MySQL database via ODBC to allow producing reports.
Unfortunately the AFP458 website had a major redesign a while ago and many previous technical articles on it are now hard to find. I had used two articles on that site to guide me through setting up Squid and the PAM on a Mac server. I believe the two articles I used are the ones listed below.
http://afp548.com/2004/09/08/using-os-x-open-directory-to-authenticate-squid-pro xy-server/
http://afp548.com/2004/12/13/squid-server-using-ldap-authentication/

Cannot deploy BPEL process with SSO to BPELConsole activated

I cannot deploy BPEL process with SSO to BPELConsole activated. Here is the error I get from JDeveloper (sorry for the french error message):
Problème détecté lors de la connexion au serveur "ssdvoiagu.dev.local.csst.qc.ca" sur le port "7781" : java.security.AccessControlException: access denied (com.collaxa.security.DomainPermission generique read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
at java.security.AccessController.checkPermission(AccessController.java:427)
at com.collaxa.security.OC4JSecurityService.checkAccess(OC4JSecurityService.java:16)
at com.collaxa.security.SecurityService.checkDomainAccess(SecurityService.java:26)
at com.collaxa.cube.fe.util.ServletUtils.getLocatorWithoutUrlRewrite(ServletUtils.java:162)
at deployHttpClientProcess.jspService(_deployHttpClientProcess.java:332)
at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:462)
at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:65)
at oracle.security.jazn.oc4j.JAZNFilter$1.run(JAZNFilter.java:396)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:410)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:302)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:190)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)
Target BPEL process manager runs under SOA 10.1.3.3. When the SSO to BPELConsole is disabled, the deployment works just fine. Is there any way to make it work with SSO?

Please check:
http://blog.jpoot.com/category/oracle-appserver/oid-ldap/
We had some issues with SSO and SSL but everything is running now.
Marc

Best way to set up home network with NAS

I'm pretty novice with networking, but do have some knowledge and know what I am trying to accomplish, but the two just aren't clicking.
Here's what I'd like to do: Have a storage central to our home office, which consists of two iMacs, a MacBook Pro, iPad, two wireless printers, two iPhones. I just purchased a 6TB Lacie 2big NAS and the 6th gen AirPort Extreme. Currently, I am able to access the storage wirelessly just fine, which is great, but I am working with large files (10gb-60gb) and needing to move them a little quicker. Most of the time, these files are being dumped onto the one iMac by way of Compact Flash cards via a highspeed card reader. I need to be able to access those files from (most importantly) the iMacs and (not so importantly) the MBP, which again, I can right now, but the transfer from CF card to iMac to NAS takes way too long wirelessly. So, what are my options? Do I get two more gigabit Ethernet cables and run them from the iMacs directly into the other two ports on the AirPort Extreme or should I purchase a separate gigabit switch then connect that with NAS and two iMacs or is there another option that will give me optimal transfer speeds from either iMac (including external HD's attached to the iMacs) to the NAS?
Thank you so much in advance.

should I have the base station set to run bridge vs route or does that not affecting anything?
If you have the AirPort base station set to "bridge", then the signal will pass through the AirPort and on to your modem/router which will do the actual "routing".
That's OK, as long as the modem/router also has 1,000 Mbps Gigabit Ethernet ports.
However.....if the modem/router has slower 10/100 Mpbs ports, the Gigabit signal will slow down by a factor of 10 passing through your router, and file transfers will be much, much slower, as you can imagine.
Another way of saying the same thing is that to get faster Gigabit speeds, everything has to be Gigabit capable.
Unfortunately, Bridge Mode is the correct network setting for the AirPort Extreme if you have a modem/router "upstream" on the network. Then you may get caught in a Catch 22 situation.
if I opt to use a switch (so I can add another 2big NAS), will that result in slower sports vs going straight through the AirPort Extreme
No, speed will not be affected either way, since it makes no difference how things are set up....so choose the setup that is easiest to implement.
In other words, if it is easier to run a single Ethernet cable from the AirPort Extreme to the Gigabit switch and plug other devices into the switch, then that is the way to go. The performance will be the same as if you had run two separate Ethernet cables to the AirPort Extreme.

Please help me creating a new listener with different port#.

I have two instances in a server. both have different homes. I want to create a seperate listener for the second one i created.
But that is not happening.
here i tried to give name from LISTENER TO LISTENER1 & Port# from 1521 to 1524.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /apps2/oracle)
(PROGRAM = extproc)
LISTENER1 =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = aixth53)(PORT = 1524))
When I check lsnrctl status with LISTENER1 , it still shows the other instance home with port#: 1521
Please help me creating a new listener with different port#.
Thanks,

marist89 wrote:
sb92075 wrote:
marist89 wrote:
sybrand_b wrote:
The listener is a broker only and doesn't play any role in normal communications.
It just forks a process or a thread, and that's it.And the listener is a single point of failure. Listener goes down, you can't connect to the db. That's why you need two listeners.If listener one goes down, then listener two goes down for exact same reason since it is a single executable file.I'm not playing tit-for-tat with you. Fact is, there are situations where people who are not you might want to use more than one listener.Some folks might want to jab a sharp pencil into their eye, too.
Just because you can do something, it does not necessarily mean it should be done.

IP address allocation based on NAS port

Hi,
using ACS 4.2 and I can't find a way to bind an incoming NAS port to a specifc IP Pool:
When a user connects the request to auth comes from 2 possible NAS ports randomly (this cannot change).
Depending on which NAS makes the requests determines the IP range required, so I need 2 IP Pools.
There is no way to say 'if request comes from NAS1 give IP from Pool1 and if request comes from NAS2 give IP from Pool2'
I have gone around and around with NAFs and NARs, but cannot do this.
I can create 2 ACS groups with the specific NAS and specific IP pool within, but then I cannot have a single username bound to both groups.
I moved the auth to an AD group in the hope that I could bind that single AD group to the 2 ACS groups; and so have a single username, but no joy.
Has anybody come across the problem before? Is there simply no way to do it (surely not)?
To illustrate the problem better:
NAS_port1 - 10.1.1.1 uses only IP_pool1 - 10.10.10.0
NAS_port2 - 10.2.2.2 uses only IP_pool2 - 10.20.20.0
Single User1
Single Group1 (User1 cannot be in more than one group)
User 1 turns on device and connects to either NAS_port1 or NAS_port2 randomly
NAS_port1 makes the call to the ACS (on this occassion, it could have been #2)
USer 1 is seen within Group1 and permitted.
Group1 has both IP_pools available.
Which IP address does User1 get? Always the first pool until it is exhausted, regardless of NAS port making the request.
If NAS_port2 makes request but gets IP from IP_pool1 then the User1 will have the wrong IP address and so connectivity will not work.

the way around the dual NAS port issue is to create one group to point to AD and one to use LDAP. In this way you can have the single username in both groups and avoid the top down authentication problem of having 2 AD groups:
user 1 logs on. Auth request from NAS_port1. Uses Network Access profile(NAP) 1. References AD for group Radius_group_1. Gets put into Group 1. Receives IP address 1
user 1 logs on. Auth request from NAS_port2. Uses Network Access profile(NAP) 2. References LDAP for group Radius_group_2. Gets put into Group 2. Receives IP address 2.
And it works well.

Is it possible to create a tagged pdf with apple pages?

Not sure if possible and any tutorials would be appreciated.

> Is it possible to create a tagged PDF with Apple Pages?
Short answer: No, Apple chose at the introduction of Mac OS X to support only Adobe PDF 1.3 and those parts of Adobe PDF 1.4 that include device-independent transparency, but not those parts of Adobe PDF 1.4 that include Adobe XMP for XML markup of the page description program.
Long answer: Adobe PostScript is a page description programming language, unlike Xerox Interpress which is a page and document description programming language. In other words, Adobe PostScript is a streaming or sequential rendering model that cannot simulate the behaviour of a bound book where the user can turn from any one page to any other page arbitrarily. Adobe introduced Acrobat Distiller in 1993 in order to convert Adobe PostScript page description programs into Adobe PDF page and document description programs that share the same fundamental functionality as Xerox Interpress.
Conversion from Adobe PostScript to Adobe PDF buys one nothing but page-independent processing. Specifications published by Adobe in 1993 state how the SFNT Spline Font file format used by Apple and Microsoft for Unicode imaging has to be re-encoded into PostScript font program dictionary format (PostScript so-called simple fonts with less than 256 glyphs and PostScript so-called complex fonts (CID fonts) which are simple fonts tiled into a single superfont). All that is left is the glyph identifiers, and per Unicode Specification version 1.0 the glyph identifiers are private and font-dependent, so no character information can be inferred.
ISO 19005:2005 PDF/A is a superset of ISO 15930:2002 PDF/X-3. The problem with ISO 15930:2002 PDF/X-3 is the same as above, that is, Adobe PostScript cannot encode the file format of the International Color Consortium, which has to be re-encoded to PostScript CSA Color Space Arrays and PostScript CRD Color Rendering Dictionaries. It is possible to encode the ICC file format directly in PDF 1.3 and higher, as specified in ISO 15930 and ISO 19005, but because PDF encodes only the glyph identifiers that are the output of the SFNT file format, and not the UCS Universal Character Set input and the settings for the feature selectors in the font file, ISO 19005:2005 has come under criticism for failing to support search in complex scripts.
ISO 19005:2011 is supposed to address the shortcomings by saving the UCS input into the PDF itself, but in this case it is impossible to use Adobe PostScript and Adobe Acrobat Distiller as intermediates to Adobe PDF. So in order to drive ISO 19005:2011 Adobe would have to ditch Adobe Acrobat. I am not sure if there is software that implements ISO 19005:2011, but I noted that the Apple iBook Store does not accept PDF at all. Personally, I struggle to think of how to explain to endusers the overwhelming number of Adobe ISO PDF formats (there is PDF/E, PDF/UA and whatever else), and the overwhelming number of Adobe ISO PDF versions of these formats (there is ISO 19005:2005, ISO 19005:2011, ISO 15930 all the way back to 1999/2000 in God knows how many versions at this point).
Best wishes,
Henrik Holmegaard
would-be technical writer

NAS-PORT

Hi,
We have a problem with the format of the Nas-Port generation an Async Interface.
The format is different if the call arrive on the async interface or isdn interface.
the Nas-port is different :
1. for isdn:
NAS-Port [5] 6 20128
Cisco AVpair [1] 30 "interface=Async128*Serial1:0"
NAS-Port-Type [61] 6 ISDN-Async-V110 [4]
2. for Analogic:
NAS-Port [5] 6 130
Cisco AVpair [1] 30 "interface=Async130*Serial1:0"
NAS-Port-Type [61] 6 Async [0]
The problem is that the range of IP-ADDRESS that our radius server allocate for the client depends from the Nas port Value and if this is not calculated in the same way we have duplicate IP address.
We need an attribute defined uniquely to base our IP and to avoid their duplication. Is Cisco-Nas-port unique?
In attach you will find more explain.
Thanks
Ira

Every subscriber in a mobile network is uniquely identified by a mobile station ISDN or public switched telephone network (PSTN) number. The ISDN Type of Number to RADIUS Server feature provides information about the calling party for billing purposes. (Before the ISDN Type of Number to RADIUS Server feature was introduced, there was no way to derive the TON informationfrom either the caller identification [CLID] or other attributes.)
http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801a7a79.html#35710

Organizer 12 catalogs with NAS Drive

Does Elements/Organizer now work better with NAS drives? In Ver 11 you could not change out a drive in a network attached Storage (NAS) bay because Elements would not recognize the the new drive and could not use the catalog. It would not be able to reconnect the picture files with the catalog. It worked okay with a USB drive, but not with NAS drives. The fourms had many questions about this. Does Version 12 correct this problem?

I identified the problem as to why PSE 12 Organizer was freezing during backup procedures. The problem of freezing during backup calculation of the file size is caused by the existence of *.MOV file types. Both my Nikon camera and my Kodak digital cameras save video recordings in *.MOV file formats. This is likely a rare case, as only users who have Kodak or Nikon Cameras would be affected.
I had to select, filter, all files with *.MOV formats and delete them from my catalog. After the catalog was backed up successfully on my hard drive, same drive, different folder, I had to drag and drop the videos to get them back into the catalog. All tags and locations and people were lost. I could not search them and import from folder. So the catalog is backed up successfully. This is likely a rare case, as only users who have Kodak or Nikon Cameras would be affected.
Case Solved.
Elements 12 backup failPhotoshop ElementsProblem with backing up catalog in Elements Organizer 12 - help please@

How to integrate BPEL process with OSB?

HI,
I want to expose a web service from OSB and then after doing the initial validation of request,want the request xml to be forwarded to one of my BPEL process from where i would go for business processing with the request xml data.
Could any one help me here, what are the steps to be followed to integrate BPEL and OSB such that i'll be able to get rquest xml from OSB and reply back the final response to OSB .OSB will respond back to external world.
I have already exposed my webservice from OSB,but don't know how to forward this req xml to my BPEl process and finally fetch res from BPEL.

Hi Arik,
Thanks for Helping me out here. But my problem is when i m communicationg with the BPEl via default wsdl generated by my BPEl process, Through SAO-Direct from OSB.It's looking for binding tag in that WSDl which is not present when i created the BPEl process.
for eg.
In BPEl I have genarated a web service whose input and response is based on existing WSDL .This is the same WSDL which has been referred in OSB to intract with external world ( for upstream component who would be calling my web service).
The default WSDL geneareted by this BPEl does have portType,message,partenerLincType. But it doesnot have binding tag.
Now ,When i m trying to connect to this BPEl from OSB by creating new business service, while refering to this BPEl wsdl,It's looking for binding tag which is actually not present in default WSDL genarated by BPEL.
So considering my explained scenario,will you plz help me, where m i going wrong and in this case what are the correct steps i should follow to fullfill me requirement.

802.3x Flowcontrol on NAS Port(s)/LAG

Hi everyone,
on my network there are 4 Cisco SG300-10 switches connected to each other via a single uplink port. On one of these switches there is a LAG 802.3ad port configured that provides network access for a QNAP NAS. So far so good.
My problem is that I keep having connection issues with some Network Media players that don't support gigabit ethernet speed. These fast ethernet clients are connected to the mentioned switches and suffer from connection problems, "hickups" during video stream (via NFS-UDP). Now as this seems to be a known problem with my kind of setup I got the advice to configure the NAS ports (or the LAG in my case) to support 802.3x flowcontrol. But the advisors always assumed that the problematic fast ethernet clients were connected to the same switch as the NAS, but on my network this is not the case.
So my question is: Do I have to configure 802.3x Flowcontrol just on the NAS ports (LAG), or is it also necessary to configure it on the uplink ports between the switches and on the respective NMP ports in order to work as expected?
Thanks and best regards

Dear Christoph,
Thank you for reaching the Small Business Support Community.
It's been several days and nobody has answered/commented on your post and therefore I suggest you to inquire about these on a different support channel;
https://supportforums.cisco.com/community/netpro/small-business/sbcountrysupport
Thank you for your time and patience and please do not hesitate to reach me back if there is any further assistance I may help you with in the meantime.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

PPPoE circuit-id tag processing with NAS-port-ID feature in 7200VXR problem

Similar Messages

Maybe you are looking for