Service Port Address

I'm asking this question just to be safe.
Can I change the Service port address on my controllers during working hours without any disruption to the client connections?
Thanks, Pat.

Yes you can. The service port is for out of band management, so no client traffic should be flowing through it.
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Similar Messages

HA on 5508 and service ports

Hi everybody.
Two 5508 WLCs running 7.4.100.60. I had to activate HA
I decided to configure Service ports: following HA conf guide, I used DHCP. That's because static IPs on service ports are often cleared and forgot during switchover. HA went up perfectly; tests were positive: by rebooting the active unit, standby was immediately ready, and so on.
I decided to test maintenance mode: by shutting down the mgt ports of the active unit, the standby one was activated, and the active went into maintenance mode (because it did not reach the standby). This again is correct.
Issue: when the unit is in this status (maintenance), its service port IS NOT reachable! I have to open again its mgt ports: the unit does not change tha maintenance status (and this is fully correct), but becomes reachable through its service port.
This is not enough: the active unit remembers the peer service port address, but the standby one does not.
Moreover, after some time, when I try to contact the latter, I jump on the former (I am always talking of Service ports).
This is really diffcult for me to explain.... Any suggestion?
Thanks
Davide

Hi
In my 5508 WLC i have exactly the same problem as you gsutherland
I tried apply this command config 802.11b 11nSupport a-mpdu tx priority all disable
and i get message
"802.11b network not disabled"
Why i must turn off b standard ?
Thanks for respons

WLAN controller 4400 series, use service-port for initial configuration, IP address?

Hi, Everyone,
I just got a new Cisco Wlan controller 4402 from somebody else but I can't find a suitable console cable( DB-9 console on the controller) , I googled everywhere and I read I could use service port to do the initial configuration, the CISCO FAQ says initial IP for service port is 192.168.1.1, I tried use Cross-over cable to connect a PC to the service port directly and use a normal cable with a switch to connect the service port and a PC, both of the connections do not work out: from the PC, I can't ping 192.168.1.1 ( PC IP changed to 192.168.1.20) , nor can I go http://192.168.1.1 . The service port Link is solid GREEN and ACT is solid GREEN, the PC NIC says Connected with 100 Mbps , so I'm wondering the IP address of service port is not 192.168.1.1? Please help.
Any sussgestions and advices are greatly appreciated.

Hi,
plz connect service port to the switch port that should be configured as access.
connect a pc (ip address - as u mentioned) to the other port of the switch. both wlc and pc should be in same vlan (create a temperary vlan).
try https to access the wlc.
Thanks

Logon Error Message - Enterprise Services Builder address not maintained

Hi Experts,
I'm about to start the configuration on PI PROD (PI 7.1) server, but I keep encountering an error, saying "Service cannot be reached"
Service cannot be reached
What has happened?
URL http://hostname:port/nwa call was terminated because the corresponding service is not available.
Note
The termination occurred in system PIP with error code 404 and for the reason Not found.
The selected virtual host was 0 .
What can I do?
Please select a valid URL.
If it is a valid URL, check whether service /nwa is active in transaction SICF.
If you do not yet have a user ID, contact your system administrator.
ErrorCode:ICF-NF-http-c:000-u:SAPSYS-l:E-i:XXXXX_PIP_00-v:0-s:404-r:Notfound
HTTP 404 - Not found
Your SAP Internet Communication Framework Team
What's more weird is that I can't launch sxmb_ifr because 'Enterprise Services Builder address not maintained'.
I already made some RFC Destination such as AI_DIRECTORY_JCOSERVER, AI_RUNTIME_JCOSERVER, LCRSAPRFC, and SAPSLDAPI and when I test the connection, here's the error message said 'Error when opening an RFC connection (CPIC-CALL: 'ThSAPOCMINIT' : cmRc=2 thRc=67'
Thanks for the reply.

Hello,
Check if you have more than one system. If so, check whether host, port and URL of startpage are maintained on the correct one.
Also, please follow the MANUAL steps of the SAP Help link below:
http://help.sap.com/saphelp_nw2004s/helpdata/en/a0/40084136b5f423e10000000a155106/content.htm
Ensure you have created the RFC Destinations in the ABAP and Java Environment
You need to create the following RFC destinations in transaction SM59
(ABAP) and the Visual Administrator (Java):
AI_RUNTIME_JCOSERVER
AI_DIRECTORY_JCOSERVER
LCRSAPRFC
SAPSLDAPI
Last, please check whether, In tcode SM59, the destination INTEGRATION_DIRECTORY_HMI.
The user maintained in the Logon tab should be PIISUSER
and ensure he password is correct,and check if the destination will test successfully.
All of those will solve this issue
Regards,
Caio Cagnani

Static nat and service port groups

I need some help with opening ports on my ASA using firmware 9.1.2.
I read earlier today that I can create service groups and tie ports to those. But how do I use those instead of using 'object network obj-ExchangeSever-smtp' ?
I have the ACL -
access-list incoming extended permit tcp any object-group Permit-1.1.1.1 interface outside
Can this statement
object network obj-ExchangeSever-smtp
nat (inside,outside) static interface service tcp smtp smtp
reference the service port groups instead?
Thanks,
Andrew

Hi,
Are you looking a way to group all the ports/services you need to allow from the external network to a specific server/servers?
Well you can for example configure this kind of "object-group"
object-group service SERVER-PORTS
service-object tcp destination eq www
service-object tcp destination eq ftp
service-object tcp destination eq https
service-object icmp echo
access-list OUTSIDE-IN permit object-group SERVER-PORTS any object
The above would essentially let you use a single ACL rule to allow multiple ports to a server or a group of servers. (Depending if you use an "object" or "object-group" to tell the destination address/addresses)
I am not sure how you have configured your NAT. Are they all Static PAT (Port Forward) configurations like the one you have posted above or perhaps Static NAT configurations?
You can use the "object network " created for the NAT configuration in the above ACL rule destination field to specify the host to which traffic will be allowed to. Using the "object" in the ACL doesnt tell the ASA the ports however. That needs to be configured in the above way or in your typical way.
Hope this helps
- Jouni

Wism Controller 2 doesn't get service port IP but Controller 1 does

I followed the documentation for setting up the WiSM. Controller 1 is up and fine. I see in dhcp bindings, that Controller 2 is getting a DHCP address and when I "session slot 9 pro 2" it tries to connect to that dhcp address, but on a "show wism status" the service-port of controller 2 is 0.0.0.0
Has anyone encountered this problem?
Thanks

Hi..
What about the connectivity?? do we still have the access to the WLC 2?? either from telnet or the GUI?? or will the session to the WLC work?
Regards
Surendra

Issue on Service Ports for outgoing connection

Hi,
My question is regarding to my desktop Mac making outgoing connection to an external IP address 184.84.124.244 using TCP protocol destination port 443 but using 40 Service Ports between 49170 through 49217. This is an automatic outgoing connection by OS X 10.7.3 (I assumed as I did not make that connection). Why such connection required 40 ports to be opened at the same time? Anyone have any idea what might have caused that? Thanks.

There could be lots of outgoing connections when you fire up Safari, as an example, because by default it has many favourites that are RSS feeder. You could have added some new yourself.
How do I find out if those connections stay up indefinitely?
By the way just curious, how did you look up the IP address as who they are?
If you are "Terminal aware" there are some commands that can help you in this direction
host
host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. When no arguments or options are given, host prints a short summary of its command line arguments and options.
netstat
show network status
whois
The whois utility looks up records in the databases maintained by several Network Information Centers (NICs).
nslookup
query Internet name servers interactively
dig
dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity of output. Other lookup tools tend to have less functionality than dig.
just to name a few.
netstat in particular let you know which connections and their relative status are going on between your computer and the rest of the world

Service port interface Question

I have a customer that wants to use the service port interface as a backup entry door to its WLCs in the event of a network failure or misconfiguration. I have configured the WLC's mgt and ap-manager interface in a 10.50.x.x network and the service interface in a 10.103.x.x network, which are 2 completely separate networks. Cisco's documentation is unclear as to how to configure the service interface. Should I have the service interface completely separate from the 10.x.x.x network class (e.g 172.16.x.x or 192.168.x.x) or I am okay in using the 10.103.x.x. network?
The WLC can be configured with static routes. Are those, when configured, reserved for the service interface? Should I configure the WLC with a static route? And if yes what should it be?
Your help would be greatly appreciated
Thanks

You can use the service port, but make sure you configure it correctly. Here is from a Cisco doc:
By default, the physical service port interface has a DHCP client installed and looks for an address via DHCP. The WLC attempts to request a DHCP address for the service port. If no DHCP server is available, then a DHCP request for the service port fails. Therefore, this generates the error messages.
The workaround is to configure a static IP address to the service port (even if the service port is disconnected) or have a DHCP server available to assign an IP address to the service port. Then, reload the controller, if needed.
The service port is actually reserved for out-of-band management of the controller and system recovery, and maintenance in the event of a network failure. It is also the only port that is active when the controller is in boot mode. The service port cannot carry 802.1Q tags. Therefore, it must be connected to an access port on the neighbor switch. Use of the service port is optional.
The service port interface controls communications through and is statically mapped by the system to the service port. It must have an IP address on a different subnet from the management, AP-manager, and any dynamic interfaces. Also, it cannot be mapped to a backup port. The service port can use DHCP in order to obtain an IP address, or it can be assigned a static IP address, but a default gateway cannot be assigned to the service port interface. Static routes can be defined through the controller for remote network access to the service port.
Hope this helps.

[Tuxedo 9.1 - SALT 2.0] Web service Endpoint address

I'm working on SALT 2.0 feature with Tuxedo 9.1.
I have to expose one Tuxedo service as a web service.
I followed the online documentation and this works fine.
I just have one problem concerning the Web service exposition address (Endpoint). In my wsdf config file, I have the following AccessingPoints node :
<AccessingPoints>
<Endpoint id="GWWS_STAR_HTTP" address="http://servername:65002/STAR" />
</AccessingPoints>
Once the TMMETADA and GWWS configured, I started Tuxedo with the tmboot command and I made a test with a classical web browser thanks to get the wsdl.
I first tried with http://servername:65002/STAR/wsdl? but I got an error.
I made a test with http://servername:65002/wsdl? and I got a successful answer.
Is anyone can explain to me how to expose the service with the following URL : http://servername:65002/STAR (as defined in the wsdf file) ?
Is there another configuration to place in the SALTDEPLOY file ?
Thanks in advance.
With my best regards,
Edited by: [email protected] on 5 mars 2009 07:20

Hi Sebastien,
The config of "<Endpoint id="GWWS_STAR_HTTP" address="http://servername:65002/STAR" />" specifies the SOAP address in WSDL, for example ,
<wsdl:port binding="tns:simpapp_Binding" name="simpapp_GWWS1_HTTPPort">
<soap11:address location=""http://servername:65002/STAR"/>
</wsdl:port>
You can not use web browser to access this address because it requires SOAP request message. The address http://servername:65002/wsdl is to retrieve the WSDL of your web service. The WSDL can be used to program or test for your exposed web services.
If you want to test the web services directly, I would suggest you trying soapUI (http://www.soapui.org/) which is a very useful SOAP test utility. The most important is it is free:-). The steps sounds like,
1. New a project
Supply your WSDL address, such as http://servername:65002/wsdl to the "Initial WSDL..." box.
2. Following the wizard steps you can create testsuite
3. In the TestSuite, you can edit the SOAP request body directly and get the reply from GWWS.
Hope some help.
Wayne

Assigning static port address

Hello All,
We are having a standalone BOE server. I have a doubt about assigning static port addresses to servers. We had a standard deployment of BusinessObjects 4.0 SP2. Our admin has assigned static request port address to APS, CMS, FRS, Crystal report servers and Dashboard server instead of using "Auto assign".
Does it necessary to assign static port address to these servers and does it necessary to open these ports on firewall?
What are the advantages of assigning static port address instead of using "Auto assign"?
As per my understanding, request port of APS, FRS and other servers are used to communicate those with CMS. And CMS and all other servers are hosted on the same server. Then why do we need to open those ports on firewall in a server.
Appreciate your help and suggestions.
Thanks and Regards,
Aashutosh

Hi,
if you dont have a Firewall in between your Client PCs and the BOE Server you dont need to assign static ports. You only need this if a Firewall is controlling the communication between these two parts.
Most of the Services communicate only with the CMS - thats correct.
But if you use the BI LaunchPad only for vieweing and creating Reports like WebI you need to open the Port 8080 for the Application Server.
If you are using Front- End Clients for viewing and or editing Reports you need to open the CMS Port 6400 and assign a static Port to the IFRS and OFRS and open these ports too.
Regards
-Seb.

JAX-WS generated WSDL on Sun Application Server 9: strange port address

I have deployed web service to Sun System Application Server 9, using JAX-WS 2.0. Server runs on virtual Ubuntu machine in VMware on Windows host. Then I try to connect from Windows to that webservice. When I point browser to
http://192.168.215.156:8090/X/XService?wsdl
I get WSDL with such line:
<soap:address location="http://ubuntu:8090/X/XService"/>
(instead of expected 192.168.215.156 there is host name "ubuntu")
And then calling Web Service throws UnknownHostException: ubuntu.
I thought that port name should be generated based on request URL - but it is not. I tried to change manually generated file (in domain1/generated/.. etc) - but still, even after that change and server restart, I get "ubuntu" host when access wsdl.
How to solve this problem, so that returned port address were "192.168.215.156"?

I'm 100% not sure on this, but from what I can tell, SJSAS processes the WSDL file on the fly before serving it to the browser/client. It appears to modify the soap:addess location with a seemingly random domain name.
This domain name appears to be the result of a reverse lookup on the machine's own ip address. If you have access to your dns server, you can manipulate the value that way. Or just modify the HOSTS file on that machine.
I don't know any way to configure the WSDL emitter directly to use specific domain names.

5508 WLC service-port

Is it possible to connect to the WLC GUI through the service-port on the 5500 series controllers?
Or is this just for SSH?

Hi Colin,
Yes you can access the GUI using the service port IP Address.
Connect your laptop using service port and assign a static ip address of the same subnet as Service port IP of your Controller.

WISM Service Ports Down

I am walking into a site that already has the WISMs setup. There are 2 switches setup with VSS and there are a total of 4 WISMs. When I do a show wism status there are 3 of the service ports that show down. One port down on one of the WISMs and both ports down on another. The managment addresses are setup and I can mange the WISMs and when I do a show int on any of the interfaces they show as 'notconnect'.
I don't think you can go in and do a "no shut" on the ports so not sure what to do in order to get the service ports up.

I guess when in doubt reboot....I booted the controllers in question and the ports came up.

Service port

What is the main function of the service port in the 4400 series WLC?

Hi Alejandro,
Hope all is well with you :) Here is an explanation;
The Service-port Interface is statically mapped by the system only to the physical service port. The service port interface must have an IP address on a different subnet from the Management, AP Manager, and any dynamic interfaces. The service port can get an IP address via DHCP or it can be assigned a static IP address, but a default-gateway cannot be assigned to the Service-port interface. Static routes can be defined in the WLC for remote network access to the Service-port. The Service-port is typically reserved for out-of-band management in the event of a network failure. It is also the only port that is active when the controller is in boot mode. The physical service port is a copper 10/100 Ethernet port and is not capable of carrying 802.1Q tags so it must be connected to an access port on the neighbor switch.
From this excellent WLC doc;
http://www.cisco.com/en/US/products/ps6366/prod_technical_reference09186a00806cfa96.html#wp1052072
Hope this helps!
Rob

RVL200 Port Address Translation

Hi,
Does the RVL200 offer Port Address Translation and it so where do I find the feature in the web interface. So far I have only found Port Forwarding and Port Triggering. The RVL200 has got the latest firmware installed (1.1.12.1).
Thankyou,
Robin Horn

The port address translation rule can be configured at Setup>UPnP page. You would have to add a Service that specifies the External port and Internal port. Note that the UPnP checkbox does not need to be checked. (The feature is known as Asymmetric forwarding, as opposed to the regular port forwarding.)

Service Port Address

Similar Messages

Maybe you are looking for