Show commands not showing - ACE module.

Hello
After a few days of working fine the systems stopped answering SNMP and then the CLI began having problems with some commands. The easiest to see being "show running-config". At this point it shows nothing. It just waits and does nothing. I have to hit Ctrl-C to bring back the prompt.
The applications being balanced are working fine but the management is not.
The resources were allocated this way:
resource-class ADMIN
limit-resource all minimum 6.00 maximum equal-to-min
resource-class CLA
limit-resource all minimum 46.00 maximum unlimited
resource-class MAS
limit-resource all minimum 24.00 maximum equal-to-min
resource-class OL
limit-resource all minimum 24.00 maximum equal-to-min
The version running is A2(1.3) and the same thing happened with an earlier release.
It's a HA scenario and the problem appeared so far only in the CLA context which was active on different modules and did the same on both. That was just a test to discard hardware problems.
One of the messages we saw was:
ACE-CER/Admin# show resource usage summary
Error: Called API timed out
We are unable to show resources, running-config, etc. for the active context CLA.
Do you have a suggestion? Is it healthy to allocate âunlimitedâ as the upper limit? Could this be the problem?
Thanks a lot.
Guido

Gilles
If you mean a âgetâ for a probe, in this context I only have one and it's not that big. It goes like this:
request method get url http://www.3x.6x.com/diario/hoy/index.html
On the other hand, in a different context I have nine of these:
request method get url http://nap10.16x.int.6x.com/buscar/juguete
3x, 6x and 16x mean that amount of letters.
Are these long enough?
To your knowledge, is this condition going to spread further and disrupt production traffic?
So once you have reached this condition whether caused by "gets" or not, would you recommend opening a TAC case?
Thanks a lot!
Guido

Similar Messages

Can not import ACE module to ANM

Hello,
Good day.
I recently facing an interesting problem.
We are running ANM 5.1.0 to manage our LB contexts, those contexts are configured on ACE20-MOD-K9 module which installed in Catalyst6500 switch. Our installation is like this, two ACE20-MOD-K9 modules installed into same Catalyst6513 different slots. And those two ACE modules serves different Data Halls, contexts configured on those modules are completely seperated, different VLAN, different subnet no relation at all.
I'm able to import the catalyst chassis into ANM and under Config>Guided Setup>Import Device>Modules, I'm able to see both ACE modules but only one module able to be imported, another one I can not even choose it. There are slightly difference those two modules show themselves in that page. The one I'm able to import shows exactly it's module type and version number but another one is showing someting strange.
Slot#      Model                     Type            Serial #      State                 Version                Description                                      #VC
3            ACE20-MOD-K9      ACE v2.3      XXXXXX      up                     A2(3.5)                Application Control Engine Module      28
9            ACE20-MOD-K9      Module         XXXXXX      Not Imported      ace2t_main_d      Application Control Engine Module      N/A <---problem module
Does any was facing samiliar problem?
Thanks

I think I found something related to my issue.
In ANM operating Guidance,section"Importing ACE Modules after the Host Chassis has been Imported" mentioned some restriction. The module in slot 9 actually has samiliar situation, show module commands shows that Catalyst chassis doesn't really recognize the software version that might caused ANM not able to figure out if that module is supported or not so it makes a simple decision deny import. I will try to reboot that module see if we can fix this issue.
"Guidelines and Restrictions
ANM 3.0 and greater releases do not support the importing of an ACE module that contains an A1(6.x) software release or an ACE appliance that contains an A1(7.x) or A1(8.x) software release. If you attempt to import an ACE that supports one of these releases, ANM displays a message to instruct you that it failed to import the unrecognized ACE configuration and that device discovery failed.
However, if you perform an ANM upgrade (for example, from ANM 2.2 to ANM 3.0), and the earlier ANM release contained an inventory with an ACE module that supported the A1(6x) software release or an ACE appliance that supported the A1(7.x) or A1(8.x) software release, ANM 3.0 (and greater) allows the A1(x) software release to reside in the ANM database and will support operations for the release. ANM prevents a new import of an ACE module or ACE appliance that contains the unsupported software version.
We strongly recommend that you upgrade your ACE module or ACE appliance to a supported ACE software release, and that you instruct ANM to recognize the updated release. See the "Instructing ANM to Recognize an ACE Module Software Upgrade" section.
See the Supported Device Tables for the Cisco Application Networking Manager for a complete list of supported ACE module and ACE appliance software releases."
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/5.2/user/guide/UG_manage_devices.html

Sticky resource not available - ACE Module

hi,
I am getting the below error on defining stickiness. Please assist.
switch/Admin(config)# sticky ip-netmask 255.255.255.255 address both ACE-CKH-STICKY
Error: sticky resource not available
Thanks.

Note The syslog message statistics do not include the syslogs generated from the dataplane when you enable the logging of connection setup and teardown syslog messages through the logging fastpath command.
â¢regexp-Limits the amount of regular expression memory.
â¢sticky-Limits the number of entries in the sticky table. You must configure a minimum value for sticky to allocate resources for sticky entries, because the sticky software receives no resources under the unlimited setting.
â¢xlates-Limits the number of network and port address translations entries.
â¢minimum number-Specifies the lowest acceptable value. Enter an integer from 0.00 to 100.00 percent (two-decimal places of granularity). The number argument specifies a percentage value for all contexts that are members of the class. When used with the rate keyword, the number argument specifies a value per second.
â¢maximum {equal-to-min | unlimited}-Specifies the maximum resource value: either the same as the minimum value or no limit.
Note The limit that you set for individual resources when you use the limit-resource command overrides the limit that you set for all resources when you use the limit-resource all command.
If you lower the limits for one context (context A) in order to increase the limits of another context (context B), you may experience a delay in the configuration change because the ACE will not lower the limits of context A until the resources are no longer being used by the context.
For example, to allocate 20 percent of all resources (minimum and maximum) to all member contexts of the resource class, enter:
(config-resource)# limit-resource all minimum 20% maximum equal-to-min
System Resource Maximum Values
Resource Maximum Value
Application Acceleration Connections
10000 connections
ACL Memory
34123184 bytes
Buffer Memory (Syslog)
1048576 bytes
Concurrent Connections
1,000,000 connections (Layer 4),
100,000 connections (SSL)
HTTP Compression
100 megabits per second (Mbps). You can upgrade the ACE maximum HTTP compression rate to 1 Gbps by purchasing a separate license from Cisco Systems. For more information, see the Cisco 4700 Series Application Control Engine Appliance Administration Guide.
Management Connections
5000 connections
Proxy Connections (Layer 7)
256,000 connections
Rate
Bandwidth
1 gigabits per second (Gbps). You can upgrade the ACE maximum bandwidth to 2 Gbps by purchasing a separate license from Cisco Systems. For more information, see the Cisco 4700 Series Application Control Engine Appliance Administration Guide.
Connections (any kind)
120,000 connections per second (Layer 4), 40, 000 connections per second (Layer 7)
MAC miss
2000 packets per second
Management traffic
125,000,000 bits per second
SSL connections
1000 transactions per second (TPS). You can upgrade the SSL bandwidth to a maximum of 7500 TPS with a separate license. For more information, see the Cisco 4700 Series Application Control Engine Appliance Administration Guide.
syslog
For traffic going to the ACE (control plane), 3000 messages per second
For traffic going through the ACE (data plane), 120,000 messages per second
Regular Expression Memory
1,048,576 bytes
Sticky Entries
800,000 table entries
Xlates (network and port address translation entries)
64,000 Xlates (network entries),
1,000,000 Xlates (port address translation entries)
Kind Regards,
Sachin Garg
Senior Specialist Security
HCL Comnet Ltd.
http://www.hclcomnet.co.in
A-10, Sector 3, Noida- 201301
INDIA
Mob: +91-9911757733
Email: [email protected]

ACE Module not supporting

Hi,
We have migrated CSM to ACE Module recentlym all the applications are working fine. But one of our real server , Hosting team did NIC Teaming (Active-Active) which was working fine but not with ACE Module (Briding Mode).
My assumtion is because of ACE in Bridge mode all the non-loadbalancing traffic has to go through ACE Module, So we couldnt access the server directly. If ACE is in One-armed mode i think it should be fine.
But with bridge mode do we have any option to make it working.

there is a restriction regarding NIC teaming in active/active mode.
The ACE uses an hardcoded mac-to-IP mapping with ARP. As with active active nic teaming you'll have 2 different mac addresses, the one which is not present in the ARP cache of the ACE is considered as a security violation.

CSM - show run module # - diagnostic not supported

Hi, I´d like to know why show run module # (where is CSM) doesn´t show anything that I´ve configured before. I have CSM 3.1(5) and IOS 12.1(19)E1 with SUP2 MSFC2. Is this supported or a Bug ?
I also would like to know if it´s normal to appear not supported CSM module (6) when I use the command show module. This is because I can use CSM without problems. Is this supported or a Bug ?
Router#show module
Mod Online Diag Status
1 Pass
3 Pass
4 Pass
6 Not Supported
Thank you !!

Hi Joerg,
There´s no problem with show run if you want to see CSM configuration, but if you use IOS 12.2(14)SX1 with SUP720 you can use the command show run module # (where is CSM) and appears what you want.
I ´d like to know if this command is not supported with SUP2 and IOS 12.1(19)E1 or if it is a cosmetic Bug. I was searching in the Bug Toolkit and Release Notes and I didn´t find anything about it.
Could you give me a link where I can see "online diagnostics are not supported for CSM" ?.
Thank you.

Why does default keyboard shortcut for show/hide baseline grid (opt+command+') not work?

Why does default keyboard shortcut for show/hide baseline grid (opt+command+') not work?

Here's where you need to change the settings: System Preferences > Keyboard > Keyboard Shortcuts:

ACE modules not syncing up

Hi,
I was adding logging and snmp to my ACE modules this weekend. I first made the changes to the primary ACE module and did a wr mem; I then went to my secondary module and noticed that the modules did not sync.
After some troubleshooting; I decided to reboot the secondary module, when the module came back, it was in sync.
As anyone run into this issue before? What is the command that will show me who is my primary module and the state of the modules?
I am running ACE code: A2.1.2
Regards,
John...

Thank you for your reply; I think that this was my problem:
14:1007 => Feb 01 07:57:27: ha_process_message:1818 Running sync info: mode 0, s
tatus 0, reason Detected license mismatch with peer, disabling running-config au
to sync
14:1008 => Feb 01 07:57:27: ha_process_message:1822 Startup sync info: mode 0, s
tatus 0, reason Detected license mismatch with peer, disabling running-config au
to sync
I first upgraded the license on my primary and made my changes, then tried to sync. The only problem I see here is that when I did the wr mem the module starting to sync and said that the sync process was complete.
John...

ACE module not load balancing across two servers

We are seeing an issue in a context on one of our load balancers where an application doesn't appear to be load balancing correctly across the two real servers. At various times the application team is seeing active connections on only one real server. They see no connection attempts on the other server. The ACE sees both servers as up and active within the serverfarm. However, a show serverfarm confirms that the load balancer sees current connections only going to one of the servers. The issue is fixed by restarting the application on the server that is not receiving any connections. However, it reappears again. And which server experiences the issue moves back and forth between the two real servers, so it is not limited to just one of the servers.
The application vendor wants to know why the load balancer is periodically not sending traffic to one of the servers. I'm kind of curious myself. Does anyone have some tips on where we can look next to isolate the cause?
We're running A2(3.3). The ACE module was upgraded to that version of code on a Friday, and this issue started the following Monday. The ACE has 28 contexts configured, and this one context is the only one reporting any issues since the upgrade.
Here are the show serverfarm statistics as of today:
ACE# show serverfarm farma-8000
serverfarm     : farma-8000, type: HOST
total rservers : 2
                                                ----------connections-----------
       real                  weight state        current    total      failures
   ---+---------------------+------+------------+----------+----------+---------
   rserver: server#1
       x.x.x.20:8000      8      OPERATIONAL 0          186617     3839
   rserver: server#2
       x.x.x.21:8000      8      OPERATIONAL 67         83513      1754

Are you enabling sticky feature? What kind of predictor are you using?
If sticky feature is enabled and one rserver goes down, traffic will leans to one side.
Even after the rserver retuns to up, traffic may continue to lean due to sticky feature.
The behavior seems to depend on the configuration.
So, please let me know a part of configuration?
Regards,
Yuji

C6513 Ace Module Pair not syncing

Hi,
I have a failover pair of Ace Modules that have stopped syncing - Active not syncing with Standby. I have checked the config and it seems that recent additions of contexts in the Admin Context to resource groups and fault tolerant additions of ft groups have not synced across to the standby unit. All other config checks out as okay.
Can anyone point me in a good direction to restart the sync?
Thanks
Adrian

Adrian-
To see the error - login to the context that isn't syncing and issue "show ft config-error"
Scripts and SSL keys/certs are not synced over, they will cause an FT sync error. If that was what happened, then upload the files to the context, then toggle "ft auto-sync running-config" on the active context and it will re-try the sync.
If the issue was not key/cert or script related, get a TAC case open, it is extremely likely there is a bug involved.
Regards,
Chris

ACE MODULE IN BRIDGE MODE NOT LOADBALANCING

Hi,
I setup an ace module in bridge mode as follows:
mfsc(vla80) > (vla80)outside fwsm, fwsm inside(vla40) > (vla40)ace-clientside, aceserverside(vla41)
and the servers have the fwsm svi(vla40) as their gateway. But, the ace is not loadbalancing.
The config script is attached. Is their anything I am missing?
Attach

Check my troubleshooting guide on this forum.
There are few things to do to narrow down the issue.
Gilles.

Xorg: module "glx" and commands not found???

Hello, all.
I'm fairly new to Linux but I'm not a total noob. I have FC6 on my laptop and am currently trying to get a GUI working for Arch on my desktop.
I pacman-ed hwd, and ran it to create a Xorg.conf, and upon running it I get the following errors:
(EE) Failed to load module "glx" (module does not exist, 0)
/etc/X11/xinit/xinitrc: line 28: twm: command not found
/etc/X11/xinit/xinitrc: line 29: xclock: command not found
/etc/X11/xinit/xinitrc: line 30: xterm: command not found
/etc/X11/xinit/xinitrc: line 31: xterm: command not found
/etc/X11/xinit/xinitrc: line 32: exec: xterm: not found
waiting for X server to shut down FreeFontPath: FPE "/usr/share/fonts/misc:unscaled" refcount is 2, should be 1; fixing.
The last comment it makes I know isn't critical, so I'm not worried about that. But I need help with the "glx" part and the commands not found.
Thanks in advance.

Did you installed libgl-dri? If not install it, and it will fix glx problems.
For the command not found, you need to create a ~/.xinitrc file. Before, you'll need to install the WM/DE that you want to use.
There is a sample file in the wiki: http://wiki.archlinux.org/index.php/Sta … ents_HOWTO

Safari 5.0.5 wont show Youtube modules, RSS feed, Adsense and Facebook module

Safari 5.0.5 wont show Youtube modules, RSS feed, Adsense and Facebook module for my wesbite http://savingtherepublic.com I also have an audio track that autoplays when you visit the site the "player" doesnt appear on top left of my page under a speaker icon and audio doesnt play.
BUT let me be clear everything works fine in Firefox?
Anyone have any idea whats going on?
I have done nothing but the system update for security that auto updater popped up for to do yesterday and today I did some Java update... again these 2 updates are for the Mac. I also did a flash player update. Everything was working fine yesterday absolutely no problems

Just for further confirmation that the installation went through succesfully multiple times:

[SOLVED] virtualbox-modules: dkms: command not found

$ makepkg -s
==> Making package: virtualbox-modules 4.2.6-4 (Tue Jan 29 15:42:01 EET 2013)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving Sources...
==> Extracting Sources...
==> Removing existing pkg/ directory...
==> Starting build()...
-> Host modules
/home/yuri/builds/virtualbox-modules/PKGBUILD: line 26: dkms: command not found
==> ERROR: A failure occurred in build().
Aborting...
$ which dkms
which: no dkms in (~/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/vendor_perl:/usr/bin/core_perl)
$ su - -c 'which dkms'
/usr/sbin/dkms
Since makepkg uses fakeroot (and should never be run as root), ...
https://wiki.archlinux.org/index.php/AUR
What is the proper way to make it work? Thank you.
Last edited by x-yuri (2013-01-29 19:33:44)

It's not my PKGBUILD. It's PKGBUILD, downloaded by abs (community/virtualbox-modules):
# $Id: PKGBUILD 82593 2013-01-21 11:10:44Z tpowa $
# Maintainer: Ionut Biru <[email protected]>
# Maintainer: Sébastien Luttringer <[email protected]>
pkgbase=virtualbox-modules
pkgname=('virtualbox-host-modules' 'virtualbox-guest-modules')
pkgver=4.2.6
pkgrel=4
arch=('i686' 'x86_64')
url='http://virtualbox.org'
license=('GPL')
makedepends=('linux-headers'
"virtualbox-host-dkms>=$pkgver"
"virtualbox-guest-dkms>=$pkgver"
'expac'
'bc')
build() {
_kernver=$(expac -Q '%v' linux-headers)-ARCH
# dkms need modification to be run as user
cp -r /var/lib/dkms .
echo "dkms_tree='$srcdir/dkms'" > dkms.conf
# build host modules
msg2 'Host modules'
dkms --dkmsframework dkms.conf build "vboxhost/$pkgver" -k "$_kernver"
# build guest modules
msg2 'Guest modules'
dkms --dkmsframework dkms.conf build "vboxguest/$pkgver" -k "$_kernver"
package_virtualbox-host-modules(){
_kernver=$(expac -Q '%v' linux-headers)-ARCH
_extraver=extramodules-${_kernver%.*}-ARCH
pkgdesc='Host kernel modules for VirtualBox'
depends=("linux>=${_kernver%.*}" "linux<$(echo "${_kernver%.*}+0.1"|bc)")
replaces=('virtualbox-modules')
conflicts=('virtualbox-modules')
install=virtualbox-host-modules.install
install -dm755 "$pkgdir/usr/lib/modules/$_extraver"
cd "dkms/vboxhost/$pkgver/$_kernver/$CARCH/module"
install -m644 * "$pkgdir/usr/lib/modules/$_extraver"
find "$pkgdir" -name '*.ko' -exec gzip -9 {} +
sed -ie "s/EXTRAMODULES='.*'/EXTRAMODULES='$_extraver'/" "$startdir/virtualbox-host-modules.install"
package_virtualbox-guest-modules(){
_kernver=$(expac -Q '%v' linux-headers)-ARCH
_extraver=extramodules-${_kernver%.*}-ARCH
pkgdesc='Guest kernel modules for VirtualBox'
license=('GPL')
depends=("linux>=${_kernver%.*}" "linux<$(echo "${_kernver%.*}+0.1"|bc)")
replaces=('virtualbox-archlinux-modules')
conflicts=('virtualbox-archlinux-modules')
install=virtualbox-guest-modules.install
install -dm755 "$pkgdir/usr/lib/modules/$_extraver"
cd "dkms/vboxguest/$pkgver/$_kernver/$CARCH/module"
install -m644 * "$pkgdir/usr/lib/modules/$_extraver"
find "$pkgdir" -name '*.ko' -exec gzip -9 {} +
sed -ie "s/EXTRAMODULES='.*'/EXTRAMODULES='$_extraver'/" "$startdir/virtualbox-guest-modules.install"
# vim:set ts=2 sw=2 et:
Could it possibly be that this time makepkg must be run as root?

Wr mem gives error on ACE module

Hi,
I am not able to save the configuration on the ACE module.
Admin# wr mem
Generating configuration....
Error in generating running config..copy aborted
"Write memory failed for context Admin"
Any help would be appriated.
Thanks
Neha

Hi Neha,
Kindly check the current system resource usage for each context by entering the #show resource usage
command .
If the resource usage percentage is high, the ACE is overloaded .
Use the copy running-config startup-config command instead of the write memory command. May be it can solve your issue for now.
Write back if it does not sovle your issue.
Sachin Garg

ACE module - end-to-end SSL

Hello,
I'm in the process of setting up an end to end SSL configuration but it doesn't work and I'm getting a bit confused at this stage.I imported a cert using the terminal (copy/paste) then I imported a key using the same method and the tftp. The TFTP failed and the terminal was displaying a message telling me there was topo many lines.
I checked with the crypto verify command and it failed telling me "Error: invalid or unsupported key".
Is there any clear documentation on how to configure an end to end SSL ?
I used the ACE ssl guide, but it is not really accurate and looks more like a reminder to me rather than a guide.
I attached the existing config to this post although it does not show the cert and key I imported to the ACE module, it gives a better understanding of what the idea is.
Did anybody came across the same issues on the first time configuring end-to-end ssl with ACE?

just don't know where to start.
I feel like you do not have the right key/cert.
This would be the very first thing to verify.
Where did you get your key and cert ?
What certificate authority signed your certificate ?
The creation of the session key requires the use of an RSA key pair (private/public).
Every server must have a public and a private key associated with a certificate signed by a certificate authority.
If you're not familiar with those concepts, configuring an SSL offloaded like ACE won't be easy.
Maybe you should start be reading on the subject from various article available on the WEB.
openssl is a great tool to generate keys and certficates.
I would suggest maybe to get this free tool and start by creating your own RSA key pair and a self signed certificate.
Then import everything into ACE.
Once you have valid key/cert we can continue with the configuration.
Gilles

Show commands not showing - ACE module.

Similar Messages

Maybe you are looking for