Smart call home - HTTPS transport from the Nexus 7000 to Cisco

hi
i try configured call home on nexus 7000 with https transport and proxy server
i follow this guide -
http://www.cisco.com/en/US/docs/switches/lan/smart_call_home/QuickStart_NX7000.pdf
and configured this :
callhome
email-contact XXXXXXXXXXX
phone-contact XXXXXXXXXXX
streetaddress XXXXXXXXXXXXXXXX
destination-profile CiscoTAC-1 transport-method http
destination-profile CiscoTAC-1 http https://tools.cisco.com/its/service/oddce/services/DDCEService
transport http use-vrf management
transport http proxy server XXXXXXXXXX port 8080 --------- XXXXXXXXX = my proxy server
transport http proxy enable
enable
periodic-inventory notification interval 30
i have a problem to install the security certificate , i follow thw guide but i get the error :
failed to load or parse certificate
could not perform CA authentication
when i try test call home eith the command : callhome test
trying to send test callhome message
warning:no callhome message sent
email configuration incomplete for destination profile:full_txt
email configuration incomplete for destination profile:short_txt
Error in transporting http message for CiscoTAC-1
http: Received HTTP code 407 from proxy after CONNECT
i guess the problem is because i didnt install the certificate , how can i install the certificate ?
is this the real problem ?

I agree with Bryan that the easiest proxy server to setup for the nexus 7000 is the Transport Gateway. The documentation (certificates) is setup to allow you to connect to a Cisco Transport Gateway or directly into tools.cisco.com. Both have a Cisco certificate.
But that doesn't explain your issue. To answer your issue, you need to look here
http://www.cisco.com/en/US/docs/switches/lan/smart_call_home/SCH31_Ch6.html#wp1039385
except you need your proxy server's chained certificate in PEM format since the Nexus 7000 is going to terminate at your proxy server. Take a look at this line in the documentation.
Input (cut & paste) the CA certificate (chain) in PEM format
The error code 407 you indicated makes sense and indicates "Proxy Authentication Required". You need the certificate installed first. NX-OS uses the openssl crypto library to implement the cert-pki feature if that helps. A complete certificate chain is required. Also, you might make sure the CRL (certificate revocation list) is set to none so it doesn't do that first.
revocation-check none
The 4 chained certificates given in the documentation are tools.cisco.com.cer, Verisign-G3-SSCA.cer, Verisign-G3-PRCA.cer, Verisign-Root-CA.cer. The non-nexus 7000 devices just use the last one. Most likely you need a certificate that looks like
your proxy server.cer,Verisign-G3-SSCA.cer, Verisign-G3-PRCA.cer, Verisign-Root-CA.cer
If you are using your own root CA (which typically are taken off-line after authorizing subordinate CAs for security reasons) , then make sure that their certificates are in the correct order to be processed so each can be authenticated.
Now you can see why a Cisco proxy server (Transport Gateway) is easier to setup.

Similar Messages

How to test Smart Call Home in cisco router?

Hi ,
I have done basic configuration n cisco router for Smart call Home.Please help me out on testing SCH if its proper or requres more configuration.Below is the configuration;
call-home
contact-email-addr [email protected]
mail-server 10.0.0.59 priority 1
mail-server "" priority 2
mail-server "" priority 3
mail-server"" priority 3
profile "CiscoTAC-1"
active
profile "Test"
destination preferred-msg-format long-text
destination address email ""
destination address email ""
subscribe-to-alert-group environment severity critical
subscribe-to-alert-group syslog severity minor pattern ".*"
subscribe-to-alert-group configuration periodic weekly Tuesday 17:00
subscribe-to-alert-group inventory periodic monthly 30 20:30

hi bryan,
But how will i know the cisco is receiving the alerts for the devices.Is there any way for checking that.
Profile Name: CiscoTAC-1
    Profile status: ACTIVE
    Preferred Message Format: xml
    Message Size Limit: 3145728 Bytes
    Transport Method: email
    Email address(es): [email protected]
    HTTP address(es): https://tools.cisco.com/its/service/oddce/services/DDCEService
    Periodic configuration info message is scheduled every 13 day of the month at 10:03
    Periodic inventory info message is scheduled every 13 day of the month at 09:48
    Alert-group               Severity
    diagnostic                minor
    environment               warning
    inventory                 normal
    Syslog-Pattern            Severity
    .*                        major
Please suggest..

Smart call-home setup in ASA with contexts

Hello,
I have a problem configuring Smart call home service in an ASA 5500 having contexts.
The DNS config is available on contexts, however the service is enabled to system.
At the moment, following all the cisco's documentations, seems it doesn't work.
Any suggestion?
Thanks.
Notis

Let separate what the Cisco back-end can process and what the end device can do. What your document above indicates is, "What call home messages can the Cisco backend evaluate, and what processed call home messages will raise a TAC case automatically?" The Call Home process on the end device sends in Call Home messages to the Cisco backend (aka Smart Call Home) from many sources or triggers. When it says "Alarm type" in the document, it means the source or trigger for the Call Home message.
But the ASA supports adding syslog matching patterns to the alert group syslog. But it still triggers the same call home message containing "show log" and "show inventory". You can also rate limit the call home messages triggered via syslog with the rate-limit command.
subscribe-to-alert-group syslog [severity {catastrophic | disaster | fatal | critical | major | minor | warning | notification | normal | debugging} [pattern string]]
Remember that a profile specifies the transport method and alert group selection. And that multiple profiles can be configured on the device at the same time.
When you want human readable call home messages, you use the long text message format in the profile. On the other hand, the Cisco backend requires Call Home messages in a certain format (XML), hence the CiscoTAC-1 restrictive profile.Typically people will copy the CiscoTAC-1 profile into a new unrestrictive profile and then add an additional email address besides [email protected] so they, too, can see the "unprocessed" call home messages.
Of course, after the Cisco backend processes one of these Call Home messages, depending on the Call Home message, it sends a notification email to the admin for the device telling them it processed a message.

2013 Exchange, Can't connect to Exchange Management Shell. It cannot determine the content type of the HTTP response from the destination computer.

The following error occurs.
         Welcome to the Exchange Management Shell!
Full list of cmdlets: Get-Command
Only Exchange cmdlets: Get-ExCommand
Cmdlets that match a specific string: Help *<string>*
Get general help: Help
Get help for a cmdlet: Help <cmdlet name> or <cmdlet name> -?
Show quick reference guide: QuickRef
Exchange team blog: Get-ExBlog
Show full output for a command: <command> | Format-List
Tip of the day #0:
Did you know that the Identity parameter is a "positional parameter"? That means you can use:
Get-Mailbox "user" instead of: Get-Mailbox -Identity "user"
It's a neat usability shortcut!
VERBOSE: Connecting to mail1.dorothy.local.
New-PSSession : [mail1.dorothy.local] Connecting to remote server mail1.dorothy.local failed with the following error
message : The WinRM client cannot process the request. It cannot determine the content type of the HTTP response from
the destination computer. The content type is absent or invalid. For more information, see the
about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : -2144108297,PSSessionOpenFailed
Exception calling "GetComputerSite" with "0" argument(s): "The Specified directory object cannot be found."
At C:\Program Files\Microsoft\Exchange Server\V15\bin\ConnectFunctions.ps1:164 char:2
+     $localSite=[System.DirectoryServices.ActiveDirectory.ActiveDirectorySite]::GetC ...
+    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : ActiveDirectoryObjectNotFoundException
Failed to connect to an Exchange server in the current site.
Enter the server FQDN where you want to connect.: mail1.dorothy.local
VERBOSE: Connecting to mail1.dorothy.local.
New-PSSession : [mail1.dorothy.local] Connecting to remote server mail1.dorothy.local failed with the following error
message : The WinRM client cannot process the request. It cannot determine the content type of the HTTP response from
the destination computer. The content type is absent or invalid. For more information, see the
about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
   gTransportException
    + FullyQualifiedErrorId : -2144108297,PSSessionOpenFailed
Randy Cheek

Good Morning,
Log into the server with an account that has appropriate Exchange rights, not a local account.
Note: By default - Domain Admins don't have Exchange rights.
Dame Luthas, ITILv3, MCSE Messaging 2013, MCSA, MCITP
My Technical Blog: http://thelifestrategist.wordpress.com
Discipline is the Difference between Goals and Accomplishments
If this post is useful, please hit the green arrow on the left & if this is the answer hit "mark as answer"

How to call external http client from abap system

Hi All,
I have browsed through sdn and google but not found any helpful document ,
Here my requirement is to call external http client from ecc ,
Pl suggest..,
Regards,
Lokeswar .

Hi Deepak,
I have followed the below Reference links :
Example Program: Executing an HTTP Request - Components of SAP Communication Technology - SAP Library
http://scn.sap.com/thread/2035765
but while executing get http responce i'm facing 'HTTP_COMMUNICATION_FAILURE' error
    CALL METHOD L_HTTP_CLIENT->RECEIVE
      EXCEPTIONS
        HTTP_COMMUNICATION_FAILURE = 1
        HTTP_INVALID_STATE         = 2
        HTTP_PROCESSING_FAILED     = 3.
Pl suggest ,

Difference between Call home and smart call home.

To my understanding -
Call home - I configure the SMTP server and I do few other configuration, which can enable be to send emails to desired recepients for any severity.
Smart call home - Striving to achieve auto TAC case registry for a severity.
Is this correct ?
I just read the config guide and didn't understand the importance of switching priority..

Keny,
Just a clarification -
I can go ahead with the call home configuration , without smart call home being configured, isn't it ? ( just as an alerting system local to UCS for few recepients )

How can I access my home security DVR from the internet?

My Time Capsule (as a router and not a bridge) blocks me from accessing my home security DVR from the internet. I can access it from other computers connected to my LAN but not from the internet. I guess it's a firewall setting issue. I can't add the home security application to the list of firewall allowed incoming connections since it's a Windows app that I cannot install on my Mac. On the other hand, the app is installed on my old PC but I can't access the Mac firwall settings from the PC and add the security app (If that's the problem).
My DVR is connected to a Netgear switch which is connected to the Time Capsule which is connected to a Cisco modem provided by Comcast. I thought one of the modem ports had to be opened by Comcast. That was not the issue. After spending 2 hours on the phone with Comcast going in circles talking to 10 different overseas agents, they concluded the Netgear switch was blocking me from accessing the DVR. I think they are wrong and that it's a Mac firewall problem. HELP!!! Does anyone know what could be the problem and how to solve it?

Did you forward the required ports in the TIme Capsule? If not it won't work.. it has nothing to do with firewall unless the DVR is plugged into the Mac. If it is plugged into a switch you need to lock the IP of the DVR and find out what ports are required.. usually just port 80, ie html.. but it could be some others.
Since Apple do not use upnp to open ports.. the TC will have to manually be provided with the ports.. Apple use PMP-NAT that is not used by the rest of the known world.. Just to ensure you stay in the camp.

I want to call External Java class from the PL/SQL

Hi,
I am using Oracle Apps R11i (11.5.7), I wanted to call external Java class from the PL/SQL. This external Java class is residing in another application server.
How do I do this.
I know one way. Develop C routine in Oracle Apps to call external java class and call this C routine from the PL/SQL.
Is there any simple method available? or any other method?
Thanks in advance.
-Venkat

First of all, this is a Java application you're talking about, right (i.e. it has a main() function)? It's not just a class that you're trying to instantiate is it? If it's an application, you obviously have to start a new virtual machine to run it (rather than using the virtual machine built into the database like stored java). I'm a little leary of your mention of an "application server" as this would more commonly mean that a virtual machine is already over there running with access to this class. In which case, you'd typically interface with SOAP or some other RPC API.
All that aside, as long as you have physical disc access (through NFS or whatever) to the class file, you could use a java wrapper class with a system call to do this. In fact, there is a thread in just the last day or so on this very forum that has the code to do just that (see " Invoking OS Commands from PL/SQL"). However, it's worth noting that the virtual machine will be running on the database server in this case and not the application server.

How do you call a java class from the main method in another class?

Hi all,
How do you call a java class from the main() method in another class? Assuming the two class are in the same package.
Thanks
SI
Edited by: okun on May 16, 2010 8:40 PM
Edited by: okun on May 16, 2010 8:41 PM
Edited by: okun on May 16, 2010 8:47 PM

georgemc wrote:
To answer your impending question, either the method you're calling has to be static, or you need an instance of that other class to invoke it against. Prefer the latterAnd to your impending question after that: no, don't use the Singleton pattern.

Having trouble calling my work voicemail from the iphone - it doesnt recognize the dtmf tones

i am having trouble calling my work voicemail frome the iphone - it does not recognize the DTMF tones from the dialpad. we have justgone to a new IP voice system at work

we use a remote dialling code to divert our office landlines to mobiles, we have had awful trouble with the iphones in doing this with the number stored as a contact, We also have trouble dialling the number direct from the keypad it still comes up with error and says the number has not been recognised.
I have managed to sort out how to remedy this for us on this end and i will give an example below, the 'p' represents a pause
(numbers changed for security)
original phonebook contact stored, please notice the pauses 'p' only the first single pause
01223495684p*65*4530*01223456456*07555456456#
the new number now stored in the phonebook with the extra pauses 'p'
01223495684pp*65p*4530p*01223456456p*07555456456# as you can see we dial a landline number and then give a pause for the next tone to cut in, then we enter the overall divert code, after this we enter the pin code followed by the landline number to divert and finally the mobile number that will be taking the calls and finishing off with hash.
all our other phones except the iphone will dial this number and work correctly with one pause at the beginning, I have now tried thios with two pauses at the beginning and one pause between each section and it now works fine,
This has cured our problem using the io5 iphones 4s. we could not dial these numbers with the iphones for nothing, all other phones work fine. When you have a bluetooth headset connected the problem is even worse.
this has cured our problem and hope this helps you all also

Is there any way to remove a released transport from the SE10 display?

Is there any way to remove a released transport from the SE10 display or change the owner of a released transport?

Hi Joe
Transport Request once released can not be deleted. We can ignore sending the release request for further systems.
Kind Regards
Eswar

I was lookin for a song from will.i.am called drop it low from the moive rio

I was lookin for a song from wiil.i.am called drop it low from the moive rio i think

I wanted this too.
There was no commercial version of it that I could find.
It exists on youtube as a clip (with good audio).
I used a free software to rip the audio file from youtube & make it into an mp3. worked great, play it for my kids & dance regularly!

NAT support on the Nexus 7000?

Hi
I've been trying to determine if the Nexus 7000 supports NAT. I've had a look around but can't find anything definitive, if anybody can confirm whether the 7K supports NAT it'd be much appreciated.
Thanks
Malc

Page 20-21 of this switch guide has a chart that says h/w NAT isn't supported. The NX-OS config guides I've seen that mention NAT do so in the context of IPv6 saying IPv6 eliminates the need for NAT/PAT, so I wouldn't count on seeing NAT in the 7k's. Grab a 6500 dedicate a router to that purpose.

Calling an PC-Application from the CUSTOM.PLL

We are moving from Oracle Financials 10.7 (Smart Client) to Oracle Financials 11.3
In Oracle Financials 10.7 we call a PC-Application from within the CUSTOM.PLL
Can anyone tell me if this is still possible in 11.3 when the forms are running on a formsserver and not on the PC anymore.

If "outside of network" is over NAT (for example from Internet) you can access to Apex.
1. You can set public IP for your APEX server and call http://public_ip:PORT/apex/
2. You can redirect port on your router. (if call on 8080 redirect to -> local ip and port
Also you have to open remote access:
exec dbms_xdb.setListenerLocalAccess
(l_access => FALSE);

Hello, bought a used Mac and I'd like to change the home file name from the previous owner having someone elses name on the home icon is driving me nuts thanks!

Hello - new to mac - bought a used Mac OS X 10.6.8 - I'm set up as admin yet can't seem to remove or edit the home file (john's computer with the home icon). Anyone know how to do this?
Message was edited by: macmom7

Before following these steps, you may wish to back up your important data.
For Mac OS X v10.5 or later
Enable the root user.
Log in as root.
Navigate to the /Users folder.
Select the Home folder with the short name you want to change, and rename it just like you would rename any folder. Keep in mind that the shortname must be all lowercase, with no spaces, and only contain letters.
Use the Users & Groups pane (Accounts pane in Mac OS X v10.6.8 or earlier) in System Preferences to create a new user with the Account name or Short Name that you used in the previous step.
Click OK when "A folder in the Users folder already has the name 'account name'. Would you like to use that folder as the Home folder for this user account?" appears. Note: This will correct the ownership of all files in the Home folder, and avoid permissions issues with the contents.
Choose Log Out from the Apple menu.
Log in as the newly created user. You should be able to access all of your original files (on the desktop, in Documents, and in the other folders of this Home).
After verifying that your data is as expected, you can delete the original user account via the Users & Groups pane (Accounts pane in Mac OS X v10.6.8 or earlier).
Disable the root user
http://support.apple.com/kb/HT1428

Smart call home - HTTPS transport from the Nexus 7000 to Cisco

Similar Messages

Maybe you are looking for