Required help on ASA basic setup and configuration

Hi,
I am very very new to Security/Firewall domain, As I have gone through lot of documents and understood there must be one outside interface and atleast one or multiple inside interfaces depends on the requirement.  I have attached a high level design, it shows how ASAs tobe connected to Aggre/Dist. Switches and how DMZ are conneccted to ASA via L2 Switches.  Could any one help me on this how to configure and what are basic configuration required to eastablish the network and it works. I need two inside networks one is for dmz servers and another one is other servers to be advertise to outside DC.            

When you say NK501 that it is a typo and that it should be N5K01 (for nexus 5000 switch 1?)
So if these are  nexus switches, and I assume you are looking for active/standby configuration on the ASA for HA.  Your configuration would be something like the following if you want full redundancy.
N5K01
feature vpc
vpc domain 1
  role priority 1000
  system-priority 1
  peer-keepalive destination 169.254.111.1 source 169.254.111.2 vrf default
  auto-recovery
interface Ethernet1/19
  description ASA01
  switchport mode trunk
  channel-group 2 mode active
interface Ethernet1/21
  description ASA01
  switchport mode trunk
  channel-group 2 mode active
interface Ethernet1/22
  description vpc-keepalive
  no switchport
  ip address 169.254.111.1/16
  no shutdown
interface Ethernet1/23
  description vpc-peerlink
  channel-group 1
  no shutdown
interface Ethernet1/24
  description vpc-peerlink
  channel-group 1
  no shutdown
interface port-channel1
  description vpc-peerlink
  vpc peer-link
interface port-channel2
  description ASA
  switchport mode trunk
  vpc 1
N5K02
feature vpc
vpc domain 1
  role priority 65535
  system-priority 1
  peer-keepalive destination 169.254.111.2 source 169.254.111.1 vrf default
  auto-recovery
interface Ethernet1/19
  description ASA02
  switchport mode trunk
  channel-group 2 mode active
interface Ethernet1/21
  description ASA02
  switchport mode trunk
  channel-group 2 mode active
interface Ethernet1/22
  description vpc-keepalive
  no switchport
  ip address 169.254.111.2/16
  no shutdown
interface Ethernet1/23
  description vpc-peerlink
  channel-group 1
  no shutdown
interface Ethernet1/24
  description vpc-peerlink
  channel-group 1
  no shutdown
interface port-channel1
  description vpc-peerlink
  vpc peer-link
interface port-channel2
  description ASA
  switchport mode trunk
  vpc 1
ASA01
interface TenGigabitEthernet0/6
description N5K01
channel-group 2 mode active
interface TenGigabitEthernet0/7
description N5K01
channel-group 2 mode active
interface TenGigabitEthernet0/8
description Failover
channel-group 3
interface TenGigabitEthernet0/9
description Failover
channel-group 3
interface Port-channel2
description N5K01
nameif NAME
security-level 60
ip address 10.10.10.1 255.255.255.240 standby 10.10.10.2
interface Port-channel3
description Failover link
interface Port-channel3.10
description State link
vlan 10
interface Port-channel3.20
description STATE Failover Interface
vlan 20
failover
failover lan unit primary
failover lan interface Failover_Link Port-channel3.10
failover key PASSWORD
failover replication http
failover link Stateful_Failover_Link Port-channel3.20
failover interface ip Failover_Link 10.8.4.145 255.255.255.240 standby 10.8.4.146
failover interface ip Stateful_Failover_Link 10.8.4.161 255.255.255.240 standby 10.8.4.162
ASA02
interface TenGigabitEthernet0/6
description N5K01
channel-group 2 mode active
interface TenGigabitEthernet0/7
description N5K01
channel-group 2 mode active
interface TenGigabitEthernet0/8
description Failover
channel-group 3
interface TenGigabitEthernet0/9
description Failover
channel-group 3
interface Port-channel2
description N5K01
nameif NAME
security-level 60
ip address 10.10.10.1 255.255.255.240 standby 10.10.10.2
interface Port-channel3
description STATE Failover Interface
interface Port-channel3.10
description Failover link
vlan 10
interface Port-channel3.20
description State link
vlan 20
failover
failover lan unit primary
failover lan interface Failover_Link Port-channel3.10
failover key PASSWORD
failover replication http
failover link Stateful_Failover_Link Port-channel3.20
failover interface ip Failover_Link 10.8.4.145 255.255.255.240 standby 10.8.4.146
failover interface ip Stateful_Failover_Link 10.8.4.161 255.255.255.240 standby 10.8.4.162
Please remember to rate and select a correct answer

Similar Messages

  • Need help for Disaster Recovery setup and configuration

    Hi Gurus.
    We are planning to have disaster recovery test plan. Normally we setup our network at another site and then restore data there and then do configuration and setup to run SAP system to new network.
    But this is little more time consuming. We are planning to do something which will might save our time.
    We want to create one Application instance on Central instance on current production server. This instance will be "deactivated" and will not run on production server.
    When we will do the disaster recovery, we will restore CI filesystem to Disaster recovery network. That time this new application instance  will aslo get copied. Once this is done, we just need to go to this instance and start SAP System. This way we will save our time of configuring the new instance and then starting it.
    e.g
    Production host -> prdhost1
    Central Instance -> /usr/sap/P01/DVEBMGS00
    and it's subdirectory: data, work, log, sec
    create new application instance -> /usr/sap/P01/D03
    and it's subdirectory: data, work, log, sec
    create new instance profile -> P01_D03_prdhost1, START_D03_prdhost1
    this configuration will be created but SAP instance will not be started. It will be copied to Disaster Recovery new site and in that new network , there we can start this new application instance.
    Please let me know if we can do that ? if yes, are we going to face any issue in production?
    Other than mentioned above, what FileSystem we need to take care for creating new instance?
    Any help will be highly appreciated.
    Thanks in advance
    Best Regards,
    Basis CK

    Hi!
    Sorry but your scenario is a little bit confusing.
    Let me guess if I understood, you want to configure a "virtual" instance to be able to use it in case of DR.
    I don't advise you to do things that way. Why not use virtual hosts and virtual instances like we do when implementing instances within a cluster or metrocluster.
    You must have the license from DR server installed. I you use virtual hosts all DR issues like printers, logon groups, RFC groups, etc... will be solved.
    If you use virtual hosts and virtual instances all you need to do is replicate the environment into DR site, restore the system and start production.
    Of course... you are using UNIX and within UNIX world all these things are much easier.
    Bear in mind that if you have JAVA instances then I think this is the only recommended procedure.
    Cheers,
    FF

  • How to setup and configure NI OPC Server to OMRON PLC (CJ2H model) using FINS Ethernet communication protocol?

    Hi,
    Could someone help me in the setup and configuration of NI OPC server to OMRON PLC (CJ2H model) using FINS Ethernet communication protocol? I already read some materials available in the web but it uses a different PLC and communication protocol. The OPC server is installed in my laptop and I'm using Windows 8 as my OS. I used a cross over RJ45 LAN cable and connected to the ETN21 module of the PLC. I was able to confirmed the communication of my laptop and PLC by pinging the ip address of the ETN21. I also tried to configure the OPC server based on the documents I just read online. I created a channel, device and tag to the OPC server. By the way, I just need to read the data from the tag I created. Can someone also tell me how to monitor the data on the tag? I hope that you could help me. Thank you in advance. 

    Good day,
    Try following the instructions on the driver’s help, take a look at the attach picture. It should be a good starting point. After the PLC is configured you can use this tutorial (Connect LabVIEW to Any PLC Using OPC » http://www.ni.com/white-paper/7450/en/) for a guide on how to monitor the tags.
    I hope this helps
    Alejandro | Academic Program Engineer | National Instruments
    Attachments:
    OPC Server Help.JPG ‏237 KB

  • CONCURRENT MANAGER SETUP AND CONFIGURATION REQUIREMENTS IN AN 11I RAC ENVIR

    제품 : AOL
    작성날짜 : 2004-05-13
    PURPOSE
    RAC-PCP 구성에 대한 Setup 사항을 기술한 문서입니다.
    PCP 구현은 CM의 workload 분산, Failover등을 목적으로 합니다.
    Explanation
    Failure sceniro 는 다음 3가지로 구분해 볼수 있습니다.
    1. The database instance that supports the CP, Applications, and Middle-Tier
    processes such as Forms, or iAS can fail.
    2. The Database node server that supports the CP, Applications, and Middle-
    Tier processes such as Forms, or iAS can fail.
    3. The Applications/Middle-Tier server that supports the CP (and Applications)
    base can fail.
    아래부분은 CM,AP 구성과
    CM과 GSM(Global Service Management)과의 관계를 설명하고 있습니다.
    The concurrent processing tier can reside on either the Applications, Middle-
    Tier, or Database Tier nodes. In a single tier configuration, non PCP
    environment, a node failure will impact Concurrent Processing operations do to
    any of these failure conditions. In a multi-node configuration the impact of
    any these types of failures will be dependent upon what type of failure is
    experienced, and how concurrent processing is distributed among the nodes in
    the configuration. Parallel Concurrent Processing provides seamless failover
    for a Concurrent Processing environment in the event that any of these types of
    failures takes place.
    In an Applications environment where the database tier utilizes Listener (
    server) load balancing is implemented, and in a non-load balanced environment,
    there are changes that must be made to the default configuration generated by
    Autoconfig so that CP initialization, processing, and PCP functionality are
    initiated properly on their respective/assigned nodes. These changes are
    described in the next section - Concurrent Manager Setup and Configuration
    Requirements in an 11i RAC Environment.
    The current Concurrent Processing architecture with Global Service Management
    consists of the following processes and communication model, where each process
    is responsible for performing a specific set of routines and communicating with
    parent and dependent processes.
    아래 내용은 PCP환경에서 ICM, FNDSM, IM, Standard Manager의 역활을 설명하고
    있습니다.
    Internal Concurrent Manager (FNDLIBR process) - Communicates with the Service
    Manager.
    The Internal Concurrent Manager (ICM) starts, sets the number of active
    processes, monitors, and terminates all other concurrent processes through
    requests made to the Service Manager, including restarting any failed processes.
    The ICM also starts and stops, and restarts the Service Manager for each node.
    The ICM will perform process migration during an instance or node failure.
    The ICM will be
    active on a single node. This is also true in a PCP environment, where the ICM
    will be active on at least one node at all times.
    Service Manager (FNDSM process) - Communicates with the Internal Concurrent
    Manager, Concurrent Manager, and non-Manager Service processes.
    The Service Manager (SM) spawns, and terminates manager and service processes (
    these could be Forms, or Apache Listeners, Metrics or Reports Server, and any
    other process controlled through Generic Service Management). When the ICM
    terminates the SM that
    resides on the same node with the ICM will also terminate. The SM is ?hained?
    to the ICM. The SM will only reinitialize after termination when there is a
    function it needs to perform (start, or stop a process), so there may be
    periods of time when the SM is not active, and this would be normal. All
    processes initialized by the SM
    inherit the same environment as the SM. The SM environment is set by APPSORA.
    env file, and the gsmstart.sh script. The TWO_TASK used by the SM to connect
    to a RAC instance must match the instance_name from GV$INSTANCE. The apps_<sid>
    listener must be active on each CP node to support the SM connection to the
    local instance. There
    should be a Service Manager active on each node where a Concurrent or non-
    Manager service process will reside.
    Internal Monitor (FNDIMON process) - Communicates with the Internal Concurrent
    Manager.
    The Internal Monitor (IM) monitors the Internal Concurrent Manager, and
    restarts any failed ICM on the local node. During a node failure in a PCP
    environment the IM will restart the ICM on a surviving node (multiple ICM's may
    be started on multiple nodes, but only the first ICM started will eventually
    remain active, all others will gracefully terminate). There should be an
    Internal Monitor defined on each node
    where the ICM may migrate.
    Standard Manager (FNDLIBR process) - Communicates with the Service Manager and
    any client application process.
    The Standard Manager is a worker process, that initiates, and executes client
    requests on behalf of Applications batch, and OLTP clients.
    Transaction Manager - Communicates with the Service Manager, and any user
    process initiated on behalf of a Forms, or Standard Manager request. See Note:
    240818.1 regarding Transaction Manager communication and setup requirements for
    RAC.
    Concurrent Manager Setup and Configuration Requirements in an 11i RAC
    Environment
    PCP를 사용하기위한 기본적인 Setup 절차를 설명하고 있습니다.
    In order to set up Setup Parallel Concurrent Processing Using AutoConfig with
    GSM,
    follow the instructions in the 11.5.8 Oracle Applications System Administrators
    Guide
    under Implementing Parallel Concurrent Processing using the following steps:
    1. Applications 11.5.8 and higher is configured to use GSM. Verify the
    configuration on each node (see WebIV Note:165041.1).
    2. On each cluster node edit the Applications Context file (<SID>.xml), that
    resides in APPL_TOP/admin, to set the variable <APPLDCP oa_var="s_appldcp">
    ON </APPLDCP>. It is normally set to OFF. This change should be performed
    using the Context Editor.
    3. Prior to regenerating the configuration, copy the existing tnsnames.ora,
    listener.ora and sqlnet.ora files, where they exist, under the 8.0.6 and iAS
    ORACLE_HOME locations on the each node to preserve the files (i.e./<some_
    directory>/<SID>ora/$ORACLE_HOME/network/admin/<SID>/tnsnames.ora). If any of
    the Applications startup scripts that reside in COMMON_TOP/admin/scripts/<SID>
    have been modified also copy these to preserve the files.
    4. Regenerate the configuration by running adautocfg.sh on each cluster node as
    outlined in Note:165195.1.
    5. After regenerating the configuration merge any changes back into the
    tnsnames.ora, listener.ora and sqlnet.ora files in the network directories,
    and the startup scripts in the COMMON_TOP/admin/scripts/<SID> directory.
    Each nodes tnsnames.ora file must contain the aliases that exist on all
    other nodes in the cluster. When merging tnsnames.ora files ensure that each
    node contains all other nodes tnsnames.ora entries. This includes tns
    entries for any Applications tier nodes where a concurrent request could be
    initiated, or request output to be viewed.
    6. In the tnsnames.ora file of each Concurrent Processing node ensure that
    there is an alias that matches the instance name from GV$INSTANCE of each
    Oracle instance on each RAC node in the cluster. This is required in order
    for the SM to establish connectivity to the local node during startup. The
    entry for the local node will be the entry that is used for the TWO_TASK in
    APPSORA.env (also in the APPS<SID>_<HOSTNAME>.env file referenced in the
    Applications Listener [APPS_<SID>] listener.ora file entry "envs='MYAPPSORA=<
    some directory>/APPS<SID>_<HOSTNAME>.env)
    on each node in the cluster (this is modified in step 12).
    7. Verify that the FNDSM_<SID> entry has been added to the listener.ora file
    under the 8.0.6 ORACLE_HOME/network/admin/<SID> directory. See WebiV Note:
    165041.1 for instructions regarding configuring this entry. NOTE: With the
    implementation of GSM the 8.0.6 Applications, and 9.2.0 Database listeners
    must be active on all PCP nodes in the cluster during normal operations.
    8. AutoConfig will update the database profiles and reset them for the node
    from which it was last run. If necessary reset the database profiles back to
    their original settings.
    9. Ensure that the Applications Listener is active on each node in the cluster
    where Concurrent, or Service processes will execute. On each node start the
    database and Forms Server processes as required by the configuration that
    has been implemented.
    10. Navigate to Install > Nodes and ensure that each node is registered. Use
    the node name as it appears when executing a nodename?from the Unix prompt on
    the server. GSM will add the appropriate services for each node at startup.
    11. Navigate to Concurrent > Manager > Define, and set up the primary and
    secondary node names for all the concurrent managers according to the
    desired configuration for each node workload. The Internal Concurrent
    Manager should be defined on the primary PCP node only. When defining the
    Internal Monitor for the secondary (target) node(s), make the primary node (
    local node) assignment, and assign a secondary node designation to the
    Internal Monitor, also assign a standard work shift with one process.
    12. Prior to starting the Manager processes it is necessary to edit the APPSORA.
    env file on each node in order to specify a TWO_TASK entry that contains
    the INSTANCE_NAME parameter for the local nodes Oracle instance, in order
    to bind each Manager to the local instance. This should be done regardless
    of whether Listener load balancing is configured, as it will ensure the
    configuration conforms to the required standards of having the TWO_TASK set
    to the instance name of each node as specified in GV$INSTANCE. Start the
    Concurrent Processes on their primary node(s). This is the environment
    that the Service Manager passes on to each process that it initializes on
    behalf of the Internal Concurrent Manager. Also make the same update to
    the file referenced by the Applications Listener APPS_<SID> in the
    listener.ora entry "envs='MYAPPSORA= <some directory>/APPS<SID>_<HOSTNAME>.
    env" on each node.
    13. Navigate to Concurrent > Manager > Administer and verify that the Service
    Manager and Internal Monitor are activated on the secondary node, and any
    other addititional nodes in the cluster. The Internal Monitor should not be
    active on the primary cluster node.
    14. Stop and restart the Concurrent Manager processes on their primary node(s),
    and verify that the managers are starting on their appropriate nodes. On
    the target (secondary) node in addition to any defined managers you will
    see an FNDSM process (the Service Manager), along with the FNDIMON process (
    Internal Monitor).
    Reference Documents
    Note 241370.1

    What is your database version? OS?
    We are using VCP suite for Planning Purpose. We are using VCP environment (12.1.3) in Decentralized structure connecting to 3 differect source environment ( consisting 11i and R12). As per the Oracle Note {RAC Configuration Setup For Running MRP Planning, APS Planning, and Data Collection Processes [ID 279156]} we have implemented RAC in our test environment to get better performance.
    But after doing all the setups and concurrent programs assignment to different nodes, we are seeing huge performance issue. The Complete Collection which takes generally on an avg 180 mins in Production, is taking more than 6 hours to complete in RAC.
    So I would like to get suggestion from this forum, if anyone has implemented RAC in pure VCP (decentralized) environment ? Will there be any improvement if we make our VCP Instance in RAC ?Do you PCP enabled? Can you reproduce the issue when you stop the CM?
    Have you reviewed these docs?
    Value Chain Planning - VCP - Implementation Notes & White Papers [ID 280052.1]
    Concurrent Processing - How To Ensure Load Balancing Of Concurrent Manager Processes In PCP-RAC Configuration [ID 762024.1]
    How to Setup and Run Data Collections [ID 145419.1]
    12.x - Latest Patches and Installation Requirements for Value Chain Planning (aka APS Advanced Planning & Scheduling) [ID 746824.1]
    APSCHECK.sql Provides Information Needed for Diagnosing VCP and GOP Applications Issues [ID 246150.1]
    Thanks,
    Hussein

  • Difference between 'setup' and 'configuration' in Oracle Apps

    Hi,
    Thank in advance.
    I want to know Difference between 'setup' and 'configuration'(Oracle Apps ). Could you provide the details with an example, please?
    Regards,
    Raghavendra Rao

    Business Requirement:-
    ===============
    A company may want to allow all of its employees to make purchases up to $10 without having such purchases approved. Another company may have a business rule that each employee’s approval limit depends on his or her position within the organization.
    Question:-
    =======
    How to reach the above requirement?
    Is it thorugh configuration or setup?
    It must be through configuration and not set up.
    Set up is something like one time.. Configuration can be changed depends on your business needs.
    Like if your company wants to increases the limit from 10 to 100$, then change in configuration is needed.
    Hope you got the answer.. if you want more explanation, please be specific....

  • Setup and Configure IM Components SSO and DAS on Replica RMS Node

    Dear All,
    I was trying the step
    Step 5: How to Setup and Configure IM Components SSO and DAS on Replica RMS Node In Multimaster Replication (MMR) with Identity Management (IM) Cluster in High Availability Env
    But, at the stage to connect to OID, it is not connecting to the RMS database.
    When I checked login through ODM, it is connecting fine. also, ldapbind is also binding fine.
    How to solve this ? What will be the issue and where to check it ?
    Also, from the RMS, when I am connecting through EM console, I am not getting any output on Infrastructure link to change the passwords. its showing
    Identity Management
    Error retrieving information of default metadata repository.
    Unable to establish secure connection to Oracle Internet Directory Server ldap://devportal.paaf.gov.kw:636/ Base Exception : javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
    If there is any experts, pls reply. Because, last time I created a TAR and it took months to resolve and ultimately nothing happened they closed the TAR after some time as I was busy with some other works and not able to proceed with the synchronization.
    Thanks in advance,
    With Regards,
    Sheeja Anil

    Rule [ 47 ]: fuser link
    ~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the fuser symbolic link /sbin/fuser -> /bin/fuser exists or
    not. This is required for Suse 8.0 and Suse 9.0.
    Test [ PASSED ] :
    Not required =~ Exists|Not required
    Action:
    fuser link exists or not required.
    Rule [ 48 ]: orarun package
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the orarun package is installed and if the oracle user
    environment need to be reset. This is only required for Suse 8.0 and
    Suse 9.0.
    Test [ PASSED ] :
    Not applicable =~ Not installed|Installed correctly|Not
    applicable|Environment reset not required
    Action:
    orarun is not installed or installed correctly.
    Rule [ 49 ]: semmsl
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if semmsl kernel parameter is 256 or higher. For more details on
    how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    semmsl kernel parameter is 256 or higher.
    Rule [ 50 ]: semmns
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if semmns kernel parameter is 32000 or higher. For more details
    on how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    semmns kernel parameter is 32000 or higher.
    Rule [ 51 ]: semopm
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if semopm kernel parameter is 100 or higher. For more details on
    how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    semopm kernel parameter is 100 or higher.
    Rule [ 52 ]: semmni
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if semmni kernel parameter is 142 or higher. For more details on
    how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    semmni kernel parameter is 142 or higher.
    Rule [ 53 ]: shmall
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if shmall kernel parameter is 2097152 or higher. For more
    details on how to configure this parameter, refer to Oracle
    Application Server 10.1.2 Installation Guide - Chapter 4 - Section
    4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    shmall kernel parameter is 2097152 or higher.
    Rule [ 54 ]: shmmax
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if shmmax kernel parameter is 2147483648 or higher. For more
    details on how to configure this parameter, refer to Oracle
    Application Server 10.1.2 Installation Guide - Chapter 4 - Section
    4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    shmmax kernel parameter is 2147483648 or higher.
    Rule [ 55 ]: shmmni
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if shmmni kernel parameter is 4096 or higher. For more details
    on how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    shmmni kernel parameter is 4096 or higher.
    Rule [ 56 ]: msgmax
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if msgmax kernel parameter is 8192 or higher. For more details
    on how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    msgmax kernel parameter is 8192 or higher.
    Rule [ 57 ]: msgmnb
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if msgmnb kernel parameter is 65535 or higher. Refer to Oracle
    Application Server 10g Installation Guide 10g - Chapter 4 - Section
    4.3.3 Configuring the Kernel Parameters on Linux for more details on
    how to configure this.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    msgmnb kernel parameter is 65535 or higher.
    Rule [ 58 ]: msgmni
    ~~~~~~~~~~~~~~~~~~~
    Description:
    Check if msgmni kernel parameter is 2878 or higher. For more details
    on how to configure this parameter, refer to Oracle Application Server
    10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
    Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    msgmni kernel parameter is 2878 or higher.
    Rule [ 59 ]: file-max
    ~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if file-max kernel parameter is 131072 or higher. For more
    details on how to configure this parameter, refer to Oracle
    Application Server 10.1.2 Installation Guide - Chapter 4 - Section
    4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    file-max kernel parameter is 131072 or higher.
    Rule [ 60 ]: ip_local_port_range
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if ip_local_port_range kernel parameter is between 10000 and
    65000 or higher. For more details on how to configure this parameter,
    refer to Oracle Application Server 10.1.2 Installation Guide - Chapter
    4 - Section 4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    ip_local_port_range kernel parameter is between 10000 and 65000 or
    higher.
    Rule [ 61 ]: limit processes
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the limit of max processes is set to 16384 or higher. For
    more details on how to configure this parameter, refer to Oracle
    Application Server 10.1.2 Installation Guide - Chapter 4 - Section
    4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    The limit of max processes is set to 16384 or higher.
    Rule [ 62 ]: limit descriptors
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the limit of file descriptors is set to 65536 or higher. For
    more details on how to configure this parameter, refer to Oracle
    Application Server 10.1.2 Installation Guide - Chapter 4 - Section
    4.3.2 Configuring the Kernel Parameters on Linux.
    Test [ PASSED ] :
    Adequate = Adequate
    Action:
    The limit of descriptors is set to 65536 or higher.
    Rule [ 63 ]: Port 1521
    ~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if port 1521 is free or not. If port 1521 is used by an Oracle
    listener version 10.1.0.2 or later, then the existing listener will be
    used by the existing database and the Oracle Application Server 10g
    Metadata Repository. The installer will perform this configuration
    automatically. If port 1521 is used by an Oracle listener version
    earlier than 10.1.0.2, then the existing listener need to be stopped.
    After the installation is complete, the new 10.1.0.2 listener can be
    configured to listen to the existing (pre 10.1.0.2) databases. If port
    1521 is used by non-oracle programs, then this program need to be
    configured to listen to ports other than 1521. Refer to Installation
    Guide, section 4.4.4 for more details.
    Test [ PASSED ] :
    TNS Listener 10.1.0.2 or higher is running =~ TNS Listener 10.1.0.2 or
    higher is running|Free
    Action:
    Port 1521 is not used, or is used by TNS*Listener version 9.0.1 or
    higher.
    Rule [ 64 ]: Environment Variables
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the following environment variables are not set: TNS_ADMIN,
    ORA_NLS, and LD_BIND_NOW. In addition, the following environment
    variables must not references to any existing Oracle Home: PATH,
    CLASSPATH and LD_LIBRARY_PATH.
    Test [ FAILED ] :
    Has reference to existing Oracle Homes = Properly defined
    Action:
    Refer to the following table for the necessary action to take:
    <PRE>
    Return Value          Action
    Has reference to existing     Remove any reference to existing
    Oracle Homes          Oracle Homes from PATH, CLASSPATH
                        and LD_LIBRARY_PATH.
    Some variables are set     Unset TNS_ADMIN, ORA_NLS, and
                        LD_BIND_NOW.
    Cannot access /etc/oratab     Grant read permission on
                        /etc/issue to the current user.
    </PRE>
    Rule [ 67 ]: DNS Lookup
    ~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the host is properly registered in the DNS.
    Test [ FAILED ] :
    nslookup IP_address = Host correctly registered in DNS
    Action:
    Refer to the following table for the necessary action to take:
    <PRE>
    Return Value          Action
    nslookup host.domain     The DNS server failed to resolve the
                        nslookup using host.domain.
    nslookup IP_address     The DNS server failed to resolve the
                        nslookup using IP address.
    Cannot determine IP address Fix any problem with host IP address.
    Cannot access          Grant execute permission on
    /usr/bin/nslookup      /usr/bin/nslookup to the current
                        user.
    </PRE>
    Rule [ 68 ]: /etc/hosts format
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if /etc/hosts file contains a line with "ip_address
    fully_qualified_hostname short_hostname".
    Test [ PASSED ] :
    Contains host.domain = Contains host.domain
    Action:
    The Fuly Qualified Domain name has been set correctly.
    Rule [ 69 ]: Oracle Home length
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check that the path to the Oracle home directory is not longer than
    127 characters.
    Test [ PASSED ] :
    Less than 127 char = Less than 127 char
    Action:
    Oracle Home directory is not longer than 127 characters.
    Rule [ 70 ]: Memory for Dev Kit
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the machine has enough memory to install Developer Kits
    install type. The minimum requirements is 256 MB.
    Test [ PASSED ] :
    Available = Available
    Action:
    The machine has enough memory to install J2EE & Webcache install type.
    Rule [ 71 ]: Memory for BI&Forms
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the machine has enough memory to install Business
    Intelligence & Forms install type. The minimum requirements is 1 GB.
    Test [ PASSED ] :
    Available =~ Available|Install type not available
    Action:
    The machine has enough memory to install Business Intelligence & Forms
    install type.
    Rule [ 72 ]: Space for BI&Forms
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the machine has enough disk space to install Business
    Intelligence & Forms install type. The minimum requirements is 2 GB.
    Test [ PASSED ] :
    Available =~ Available|Install type not available
    Action:
    The machine has enough disk space to install Business Intelligence &
    Forms install type.
    Rule [ 73 ]: control-center
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the minimum required control-center package version is
    installed. For RedHat AS/ES 4.0: control-center-2.8.0-12.
    Test [ PASSED ] :
    Adequate =~ Adequate|Not required
    Action:
    The required compat-db package version or higher is installed.
    Rule [ 74 ]: xscreensaver
    ~~~~~~~~~~~~~~~~~~~~~~~~~
    Description:
    Check if the minimum required xscreensaver package version is
    installed. For RedHat AS/ES 4.0: xscreensaver-4.18-5.rhel4.2.
    Test [ PASSED ] :
    Adequate =~ Adequate|Not required
    Action:
    The required compat-db package version or higher is installed.

  • Starting slow... Basic installation and configuration

    Let me preface by saying that I took the AM class last year about this time... Between the class materials and the online documentation, though, I'm finding that there isn't a single clear and concise "getting started" document out there. There are a lot of good things available but I'm looking for one doc that walks through the installation & configuration process from top to bottom. The best I've come across is http://www.javapassion.com/handsonlabs/IdentityWebServices/ but that appears to have been written for an older version than what is currently available.
    So, I appeal to the community wisdom. Does anybody have or know of a cookbook or howto document that would walk take someone who has never seen Access Manager and walk them through the basic installation and configuration process for a Windows platform? I realize there is a lot more to be done after these steps but that'll come later.
    Thanks,
    James

    This is for Access Manager 7.0
    http://docs.sun.com/app/docs/doc/819-6258
    I've used it, found it on this page. http://docs.sun.com/app/docs/coll/1292.1

  • Setup and configuration for system monitoring and IT Reporting for Java sys

    Hi all,
    How to setup and configuration for system monitoring and IT Reporting for Java system ?
    How to connect Java system to Solman system?
    Regards,
    Neni

    HI,
    What is your OS? You can use SAPCCMSR.exe to monitoring  IT Reporting Java system on Solman.
    Go to solman rz21 create a csmreg user. and configuration fil for agent. copy configuration fil on usr/sap/ccms/..
    Go to comman line cd ../user/sap/xxx/sys/exe/.../ wite SAPCCMSR.00 -R pf=< ...../sys/profile/instans profile> .
    You can se agent on rz10 and use this connaction on rz20 to monitoring and IT Reporting Java system on Solman.
    I hope this help

  • Steps to setup and configure Node Manager on local and remote machine

    Hello,
    I am using WLS 10.3 on Windows.
    I have two machines, One cluster and two managed servers (one on each machine) created under a domain. I have used configuration wizard to create the domain.
    I have gone through documents on Node Manager and found what to configure. But I have not found when to configure. In other words I want to know what is the sequence of steps if I have to set Node Manager on my local machine (in which domain exists) and on remote machine.
    Please let me know the sequence of steps I need to follow to set and configure the Node Manager on local and remote machine. I want to use Java Node Manager (not the Script node manager).
    Thanks,
    Sanjay

    Hello,
    Ok, let me tell you what I have done till now.
    1) Installed WebLogic 10.3 on machine A (local machine, on which I have created domain and my Admin Server is running. Also Managed Server 1 is created on this machine).
    2) Installed WebLogic 10.3 on machine B (remote machine, on which Managed Server 2 will be created).
    3) On machine A I used the configuration wizard and create a domain. While creating the domain I did the following:
    i) Created two managed servers.
    ii) Created a cluster
    iii) Assigned Servers to cluster.
    iv) Created two machines.
    v) Assigned servers to machines (Admin Server and MS_1 to machine A and MS_2 to machine B).
    4) Sarted Admin Server.
    5) On the Admin Console I made some configurations for the Node Manager on Machines -> Machine A -> Node Manager. Assigned the values:
    i) Type (SSL)
    ii) Listen Address (IP_Address of machine A)
    iii) Listen Port (5556)
    6) Similarly did for Machine B.
    So till now phsically the managed server (MS_2) directory and configuration is not there on Machine B (its only configured on machine A because I created the domain on Machine A).
    Now I want install/configure/setup NM on both the machines. Start my both the managed servers using Admin Console (which will use the node managers).
    What are the sequence of steps I need to follow my task?
    Any help and suggestions are welcome with warm regards.
    Thanks,
    Sanjay

  • MM - Basic Settings and configurations

    Hi Folks,
    Please tell me what are all the Basic(General) settings and configurations to be made during a Standard SAP Implementation, as a MM Consultant. Please give them in order.
    -Pallu

    hi for basic setting u canrefer first thread of the MM forum
    New to Materials Management / Warehouse Management?
    now for the settings u can also refer the building block notes
    for MM refer following
    http://help.sap.com/bp_bblibrary/600/html/J05_EN_IN.htm
    for CIN use following link
    https://www.sdn.sap.com/irj/scn/wiki?path=/display/erplo/cin%252bconfiguration
    More useful for CINwill be following
    http://www.scribd.com/doc/2527809/CINcustomizing-1
    regards
    KI

  • How difficult is it to setup and configure Sophos SG230 device?

    They are fairly straight forward. I am in the middle of deploying eight of their units. 
    About half way done. It has been fairly easy so far.
    The online knowledge base has been great.
    Super happy with them.
    Also Sophos offers training hours. I didn't get any of the training hours but they are reasonable.
    If you have any questions Kim would be a great resource.

    We are looking to replace our Cisco Pix 515. I have been speaking to a local Network Solutions company and they have suggested the Sophos SG 230. I did a bit of research and it seems like a reputable device and it will fulfill our needs. The only problem is their quote for setting up and configuring the device is astronomical!I am no network engineer, and I didnt setup the Cisco Pix 515. But I am capable of getting in there in getting it to do what I want it to. I am wondering should I give it a go at setting up this device myself? I saw on the Sophos site you can download the a free home version. I was thinking of playing around with this first to see how difficult/easy it is. But I am not sure if this will anyway compare to the setup of the SG 230?The other option is I got a quote from another company for a Cyberroam Cr100iNG. Their...
    This topic first appeared in the Spiceworks Community

  • Business Object BI Widget Setup and Configuration

    Hello
    We have installed BO on our side. And these days we want to install BI Widgets. So after that we can see some report and other information with desktop widgets. But i could not find any technical document for widegt install and setup.
    Could you give andy document informantion for Install and Setup for BI Widget?
    Thanks in Advance,

    Hi Nevin Hürdogan ,
    Here is the Link below which might help you to understand Install and Setup for BI Widget.
    SAP BusinessObjects BI Widgets User Guide

  • Setup and Configure Steps?

    I have tried to find documentation on how to set up and configure to use LCDS but I can't find anything. I am new to LC products and I don't think the Adobe installation doc is of much help.
    Does anyone have any docs or steps they would like to pass on? We have it installed but aren't using it and I have heard it's a pain to set up but once you do it's an awesome product.
    Thanks,
    John

    Hopefully this link will help:
    http://blogs.adobe.com/flexdoc/2007/06/livecycle_data_services_docume.html
    Have you already seen the developer guide?
    - Mike Peterson

  • Lync 2013 Setup and configure HELP

    Hi,
    i am having some trouble with my lync 2013 setup. i have configured lync to a stage were all users can connect to lync being inside or outside my network, we can send chats messages to each other but only if we are on the same LAN can we use the video, audio
    and app sharing and desktop sharing. also i need to know how do i get my lync to communicate with other companies.
    ok here is my setup.
    ISP Cisco 877 router with 5 Static ips connects to my TMG 2010 (external Nic) internal nic connects to my LAN. all other devices plug into same LAN my TMG is forwarding ports to my exchange and helpdesk system. i have created all internal and external dns
    entries. if i need an egde server were do i place this server. 
    network details below:
    5 X ip: X.X.92.2
    internal ip: X.X2.1 /24
    please could someone assist me. 
    Kind Regards
    Clemy
    Cell : +27 72 864 0529

    Hi There,
    indeed your TMG Server should be equipped with 32 Network Interfaces as follows :
    External 
    DMZ 
    Internal
    the Lync Edge Server should be equipped with 2 Network Interfaces, usually the Edge server is placed inside a perimeter network which consists in 2 edge firewalls, one External and another one is Internal. please check the following link for detailed information
    about the various Edge topology that are supported.
    However you can always have a DMZ like your scenario which consists in a single firewall and connect the Edge server ends as follows
    one interface to the TMG DMZ interface and one interface to the Internal Interface although this way you will be only protecting traffic from the DMZ interface.
    kindly note that in case you chose to implement a secondary firewall take into consideration that the network relation from the the Edge internal interface to the internal LAN via the secondary firewall should be a route relation. since this is only the
    supported scenario.
    as for the reverse proxy you can still use the existing TMG as a reverse proxy since all published web components are actually located on the lync front-end server located on company LAN.
    Regards,
    Charbel Hanna
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

  • HS-1000 USB headset setup and configuration

    I recently purchased an HS-1000 USB headset and, firstly, I'd like to say that I am very pleased with many things about them. The sound quality is great, they are quite comfortable, and I like the mic features. Creative has done an excellent job with these.
    I am confused though about the general setup, configuration, and features of this wonderful headset. And apparently I am not the only one. I understand from the response in another thread that the HS-1000 does not have a "game mode" that is configurable in the console. That still leaves many questions about the HS-1000's and, unfortunately, the Help files are not very helpful with this particular model of headset. Any general guidelines would be very much appreciated. For instance;
    Is the "game mode" for this headset somehow automatic and therefor does not need any configuration?
    Do any of the settings in the "entertainment mode" console do anything with regards to gaming? Or are they strictly for video, music, etc.?
    Is the ALchemy software what makes the headset function with 3D audio in a game? (Assuming of course that the game has 3D audio to begin with.)
    What if the ALchemy software does not find or "see" an installed game on the system? (ALchemy did not find my installations of Call of Duty 4 or America's Army even though they are installed in their default installation directories.)
    Is manually "adding" a game's executable directory to ALchemy the correct way to help it work with the game? (This is what I did with COD4 and America's Army but it doesn't seem to have helped.)
    Do current versions of games "see" the ALchemy software and headset as being a surround sound 3D capable speaker system? Or are there any settings anywhere in either the Creative software or the game itself that need to be checked?
    As you can see there are many questions about how to fully enjoy these wonderful headsets that the Help files just don't help with. Can someone please give some basic guidance for correctly using this fantastic product? Anything at all would be very much appreciated.
    Thank you.

    Hello M_Squared,
    The settings on the entertainment mode should also be applicable for gaming. Most of the sound settings should be available on the game itself. The rest of your questions can be answered by this link. Under Documents, you can find the alchemy quick start (how to guide) and alchemy FAQ's. Under Lists, you should find the tested games that works with the alchemy software.
    Hope this helps.

Maybe you are looking for