Static ipaddress for guest vm.

How do I figure out the network bridge configuration required for making a connection from ovab studio 11.1.1.4 to ovm manger? I have a static ip that I need to assign to the guest vm. I also know the bridge names available on the server pool.
I tried to fill it by just giving the bridge name but I get this exception on deployment.
Deployment of myWc to DefaultConnection::Server695 failed!
CAUSE: oracle.as.assemblybuilder.wloc.deployer.DeploymentException: Appliance /myOHS in assembly myWc cannot be deployed due to static ipaddress requirement. Resource pool DefaultConnection:Server695 does not define gateway in the network bridge xenbr1.
Any info on this will be helpful.
Thanks.
M.

Hi Philipp,
Referring to the Metalink Note 727190.1 (Oracle VM Manager and Server Capacity), you can find out that the maximum tested memory for PV guest is 128GB at this time. I'd be interested to find out the reasons to have such a large memory configuration. e.g. underlying hardware platform, what type of workload/applications, etc.
Please feel free to contact me offline (honglin dot su AT oracle dot com).
Thank you.
Honglin

Similar Messages

2504 with new-architecture enabled breaks MAC auth for guest access

Hello,
We have (2) 2504 WLC running version 7.6.120. WLC1 is the local controller and WLC2 is an achor controller for guest-access. We need to incorporate a 3850 for use with the WLC2 anchor. The guest access is currently working with Mac-Auth and Mac-Auth-Fail to Web-Auth.
When converged access is enabled on the WLC1 and WLC2, the MAc-Auth no longer works. That is, the previously authenticated user is now redirected to the Web-Auth page. The local controller shows the user as authenticated but the Anchor controller shows the state as WEb-Auth-REQD.
Rolling back using "config mobility new-architecture disable" and rebooting resolves the issue.
Does anyone what changes from the old to the new that would break this mac-auth/web-auth configuration?

You should reach TAC for these sort of issues. Not many people deploying this CA setup yet & you may not get direct feedback immediately.
HTH
Rasika

I am trying to allow guests on windows to connect to shares on my Lion server but it keeps asking for a password for guest. I have allow guest users to access this share enabled but it still does not work.

I am trying to allow guests on windows to connect to shares on my Lion server but it keeps asking for a password for guest. I have allow guest users to access this share enabled but it still does not work.

Ditto. Guest accounts shouldn't have a password. No way to enter one in System Prefs...

BO Webi: How to populate a variable with the set of static values for Graph

Hi All,
I have the data: Order number, Order Date, processing time coming from the SAP Bex query in the below format:
Order No    Order Date    Processing time (Days)
1                 Jan-2011      4
2                 Jan-2011      5
3                 Feb-2011      6
In BO webi report, I have to report the number of orders which were processed in <1day, <2days, <3days,...<10days in a graphical view. i.e., X-Axis: <1day, <2days, <3days,...<10days(10 static buckets for the processing days)
Y-Axis: Number of Orders.
The graphical output should be like below:
X-Axis: <1day, <2days, <3days,<4days,<5days,<6days,<7days,<8days,<9days,<10days
Y-Axis: 0, 0,0,0,1,2,3,3,3,3 (count(Order No)) (Cumulative count)
I am able to calculate the number of orders individually for each of the 10 buckets. But the problem i am facing is that I am not able to hold the 10 static bucket values in a variable to use it for the x-axis in the Graph, as these 10 static bucket values are not coming from the backend source.
I would like to know if there is way to populate a variable(to use it for the X-Axis in the graph) with the set of 10 static values.
Any help would be highly appreciated.
Thanks,
Leela

Hi ,
I think we can use the variable as X-axis in chart.. but Variable Qulaification should be Dimension.
can you try this?.
Using efasion universe
1) Select month and Sold at (unit price) , then run the query
2) create the variable V_Month ==If [Month]=1 Then "Month1" Else "Month2" (Note = Variable Qulaification should be Dimension)
3) Create the variable V_Sum= sum (Sold at (unit price))
4) create another variable V_Cumulative_Sum==[V_Sum]+Previous([V_Sum])
Now add V_Month and V_Cumulative_Sum in table , then convert to chart.. now you can add the variable V_Month as X-axis of the chart.
Hope this will help:)
Thanks
Ponnarasu K

ISCSI connections for guests: how to set up?

A couple of questions:
1. If we wanted to set up iSCSI connections for guests such as SQL servers, what is the best way to handle this? For example, if we had four 10-Gb NICs and wanted to use as few of them as possible, is it common to turn two of the NICs into Virtual Switches
accessible by the OS, then use these to connect both the host and the SQL guests? Or would the best option be to use two 10-Gb NICs for the Hyper-V Host's iSCSI connections only, and use the other two 10-Gb NICs as virtual switches which are dedicated
to the SQL server iSCSI connections?
2. I know MPIO should be used for storage connections instead of teaming; if two NICs are teamed as a virtual switch, however, does this change anything? For example, if a virtual switch is created from a NIC team of two 10-Gb NICs, is it acceptable to create
an iSCSI connection on a network adapter created on that virtual switch?

" If we wanted to set up iSCSI connections for guests such as SQL servers, what is the best way to handle this?"
Don't. Use VHDX files instead. A common reason for using iSCSI for SQL was to allow for shared storage in a SQL cluster. 2012 R2 introduces the capability to use shared vhdx files. It is much easier to set up and will likely
give you as good, or better performance, that iSCSI.
But, if you insist on setting it up, set it up the same as you would on the host. Two NICs on different subnets configured with MPIO. (Unless using Dell's software which forces a non-standard configuration of both NICs on the same subnet). Teamed
NICs are not supported. For a purely best practice configuration, yes, it makes sense to have separate NICs for host and guest, but it is not an absolute requirement.
.:|:.:|:. tim

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is SMS notifications are supported for Guest self−registration

I want to integrate SMS gateway to Cisco ISE 1.2 and my question is
SMS notifications are supported for Guest self−registration Services ? or it should be done by Sponsor

I'm not sure I understand the question. Do you want to log in to the Sponsor Portal using AD credentials?
Create an Identity Source Sequence using AD as an Authentication Source. Go to Administration > Identity Management > Identity Source Sequences. Either Edit or +Add a Sequence and choose from the Authentication Sources shown.
Then choose that Identity Source Sequence by going to Administration > Web Portal Management > Settings. Double-click Sponsor from the Left Menu and click Authentication Source. Choose the Identity Source Sequence. Click Save.
I hope this helps.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

WLC to ISE authentication for Guest

Hi Experts,
Hope if you could guide me with our setup for Guest users. Below is what we are doing
a)     Guest connects to SSID
b)     WLC is being used to redirect Guest HTTP to WLC internal Portal
c)     WLC forwards guest authentication details to cisco ISE [ISE and WLC radius]
The guest connects to SSID and does get WLC portal for authentication, when the username and password entered on Cisco ISE i see error message as
'User Identity not found in any of Identity Store' though it is going through correct Store and the Guest name is certainly configured on Cisco ISE. ISE version is 1.2 and WLC is 7.4, please let me know if i am missing anything here.
Appreciate your help

The first method is local web authentication. In this case, the WLC redirects the HTTP traffic to an internal or external server where the user is prompted to authenticate. The WLC then fetches the credentials (sent back via an HTTP GET request in the case of external server) and makes a RADIUS authentication. In the case of a guest user, an external server (such as Identity Services Engine (ISE) or NAC Guest Server (NGS)) is required as the portal provides features such as device registering and self-provisioning. The flow includes these steps:
Please follow below guide for step by step configuration:
http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml

Controllers in the same WISM module in the 6500, i'm trying to make one of them anchor controller for guest internet

I have 2 controller in the same WISM module and I'm trying to make one of them Anchor controller for guest WLAN, but when I give put the anchor controller in a separated non-routed VLAN and connect it to an outside switch by creating VLAN 192 on the core. ( the Internet router is connected to the same switch).-it is showing path down... ( VLAN 192 visitor Internet and VLAN 224 my internal controller management VLAN are not talking)
there is no routing between these 2 VLAN ( because of security), but i can't get the controller to communicate.
-if I connect my laptop to this switch I'm able to go out on Internet but my visitor WLAN is not able to get IP address from the router connected to this switch.
- I called Cisco and one the guys told me that i can leave the management in VLAN 224 for the controller to communicate ( which they did), but the issue I'm having right now is that my visitors are not getting IP addresses from this VLAN at all
some one please advise
vlan192   4/1 vlan 192              int g0/0 192.168.2.201
6500 ----- switch ---- router--------- (outside)
    |         |   |
    |        DHCP server
   WLC

A couple of questions, is VLAN 192 allowed across the trunk link to the wlc? Do you have an interface tagged for vlan 192, with a valid address? What is providing the DHCP?
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

How to change "No Password required" for Guest to "Yes"account under Somarsoft Dumpsec

Check Content:
Verify all accounts require passwords.
Run the DUMPSEC utility.
Select "Dump Users as Table" from the "Report" menu.
Select the following fields, and click "Add" for each entry:
UserName
SID
PswdRequired
AcctDisabled
Groups
If any accounts have "No" in the "PswdRequired" column, this is a finding.
Some built-in or application-generated accounts (e.g., Guest, IWAM_, IUSR, etc.) may not have this flag set, even though there are passwords present. It can be set by entering the following on a command line: "Net user <account_name> /passwordreq:yes".

Hi Malik,
How to change "No Password required" for Guest to "Yes"account under Somarsoft Dumpsec
Please contact SystemTools Technical support to get more efficient support regarding this matter:
http://www.systemtools.com/support.htm
http://www.systemtools.com/toolboard/
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Regional Settings for Guest User

I am trying to display an Excel spreadsheet stored in SharePoint (via OneDrive for Business) using Excel online. I want the dates displayed in UK format (DD/MM/YY). The SharePoint site settings are set for English UK and the correct date is displayed
for a user defined in SharePoint. However, if a guest user accesses the spreadsheet, the dates are displayed in MM/DD/YY format. How do I change this so that it is displayed correctly for Guest Users?
Many thanks

what is the web application date time settings? as they are anonymous then they don't have an individual
regional setting. I don't think you can do what you want without a lot of custom programming.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

ISE 1.3 Guest API - using custom fields for guest creation?

I am currently working with the new ISE 1.3 guest api, i have most everything working, i can create guests fine, with the basic information entered into the guest account like first name, last name, company, email, phone and so on. Now i need some more fields to enter other information in for that guest, and i have created 5 extra custom fields called option1-option5, and enabled them for the "Known Guests" page on my sponsor portal. I can however not figure out how they should be adressed in the xml input sent in the api request...anyone tried this ?
Regards
Jan

Hi Johan,
Sure i can lead on the way, the stuff i am doing is part of a complete system i build and sell, that integrates with ISE to give customers the ability to create guest accounts using a number of different social media facebook, google and so on, to self-provision accounts for guest acces (and many other things :-)
I mainly use PHP for this, and for simplicity you can use a curl command line executed by any scripting you prefer, or use any curl library you might have available to you.
So, you need an ise sponsor account that has the "api usage flag" allowed in the sponsor group it is a member of. Then you need to know a few things about the ise setup, that needs to be sent with your request to ise, to allow the creation of a guest account.
If you need some code examples, send me a pm and we can figure something out
API Reference :
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/api_ref_guide/api_ref_book/ise_api_ref_guest.html

Using ISE for guest access together with anchor controller WLC in DMZ

Hi there,
I setup a guest WLAN in our LAB environment. I have one internal WLC connection to an anchor controller in our DMZ. I'm using the WLC integrated web-auth portal which works fine.
To gain more flexibility regarding guest account provisioning and reporting my idea is to use Cisco Identity Services Engine (ISE) for web-authentication. So the anchor controller in the DMZ would redirect the guest clients to the ISE portal.
As the ISE is located on the internal network while the guest clients end up in the DMZ network this would mean that I have to open the web-auth portal port of ISE for all guest client IPs in order to be able to authenticate.
Does anyone know of a better solution for this ? Where to place the ISE for this scenario, etc ?
Thx
Frank

So i ran into a similar scenario on a recent deployment:
We had the following:
WLC-A on private network (Inside)
ISE Servers ISE01 and ISE02 (Inside)
WLC-B Anchor in DMZ for Guest traffic (DMZ)
ISE Server 3 (DMZ)
ISE01 and ISE02 are used for 802.1X for the private network WLAN.
Customer does not allow guest traffic to move from a less secure network to a more secure network (Compliance reasons).
The foreign controller (WLC-A) must handle all L2 authentication and it must use the same policy node that the clients will hit for web auth. Since we want to do CWA, we use Mac Filtering with ISE as the radius server. If you send this traffic RADIUS authentication for Mac Filtering to ISE01/ISE02, it will use https://ise01.mydomain.com/... to redirect the client to. Since we don't allow traffic to traverse from the DMZ with the anchor in it back inside to the network where ISE01 and ISE02 are, client redirection fails. (This was a limitation of ISE 1.1. Not sure if this persists in 1.2 or not.
So what now? In our deployment we decided to use a 3rd ISE policy node (ISE03 in the DMZ) for guest authentiction from the Foreign controller so that the client will use a DNS of https://ise03.mydomain.com/... to redirect the client to. Once the session is authenticated, ISE03 will send a CoA back to the foreign which will remove the redirect for the session. Note, you do have to allow ISE03 to send a CoA.
In summary, if you can't allow guest traffic to head back inside the network to hit the CWA portal, you must add a policy node in a DMZ to use for the CWA portal so they have a resolvable and reachable policy node.

ISE DNS Question For Guest Users

Before I ask the question, let me explain our environment.
We have an internal 5508 controller. We also have a 5508 DMZ controller that acts as an anchor controller. Guest traffic is piped to the DMZ controller which provides the DHCP address, and DNS server information. The DNS that we provide is our ISP provider DNS server information, to our guest wireless users. There's no need to provide them with our internal DNS server information, since they're only going to the internet.
Here's my dilema. We are now implementing the ISE appliances so that we can better control our guest users. Currently, our guest SSID is wide open. With the ISE, we're going to initially only do self-registration for guest users. They will connect to our broadcasted SSID, when they connect to it, they will be presented with the guest portal. There will be a link that allows them to go to a self-registration page. The dilema is that the ISE appliances are a part of our internal 10.x.x.x network. Since the guest users will have our ISP's DNS servers, our ISE devices will not be able to be found for the redirection to the portal.
Would anyone have any suggestions on this? I don't want to advertise our internal DNS servers to guest users. Thanks for any help!

I haven't tried this before but ISE does actually allow you to assign physical ports to the Guest HTTP portal. You can see this under Administration > Web Portal Management > General > Ports. Perhaps you can:
1. Take a physical port from your appliance and connect it to the DMZ
3. Give it an IP address that is resolvable from the public DNS server
3. Assign that physical port only to the guest HTTP service
On the other hand, you could also build a DNS server just for the guest users and stick in the DMZ :)
Not sure if this helps but just some food for thought.
Thank you for rating helpful posts!

Generate one time authentication for Guest on Cisco WLC

Hi All
Sorry for my question, because I just started to work with Cisco WLC.
I have created some WLAN for local users with authentication by 802.1x + Radius by certificate.
For Guest I used PSK with MAC-filtering.
But I see that is not comfortable for Guests, each time they come and want to access our wireless, we have to come and get their MAC.
I checked on Internet and find that the wireless solution for Hotel, Resorts are very easy.
I also googled and see that Cisco WLC support Lobby Ambassador to generate Guest username/password. But as I checked, this username/password might only use with Web-Auth, this method is not comfortable for Guest who don't know they have to go to Web-Auth to do authentication (e.g: when they only get pop3 email, or vpn, ... not use browsers)
Could I use this method (or another method) for creating one time Guest wireless username/password or Guest PSK that can be used for authentication when Guests click to Wireless-SSID name only (no need to open web browser to do Web-Auth).
Regards
Hai

Hi Choudhary
Thank you much for your information
Could I reconfirm about my concern.
With Cisco WLC, I can use WebAuth with Guest user only
If I want to use Guest user for authentication when guests connect to SSID (not by WebAuth, I means use Layer 2 security only, not Layer 3), I will have to use additional Radius Server.
And if I understand right, could you please recommend me software based Radius Server with support generate one time username/password for Guest, because I checked IAS/NPS on windows server may not have this function (ISE is not appropriate for us at this time, due to high expense)
Regards
Hai

Authentication for Guest Access

Hi, we are looking for a solution for either automated daily creation of guest user accounts or a console for clients enter their details which in turn creates the guest account on the controller.
If we go down the path of automation, policy requires a single username/password for each day, unfortuntely WLC scheduled guest account creation is not an option as the reocurrence doesn't change the password, but it would be a handy feauture if Cisco would like to introduce it in a future release
The CLI has the option to create 'config netuser add [name] [password] WLANID [X] userType guest lifetime [seconds]' - Can we schedule and email this from the CLI on the controller?
Appreciate your time.
Brendan

Brendan,
Currently there is no way to automate this process. The process that has been developed is either an admin on the wlc/wcs creates the account or the use of the lobby admin feature. WCS has the lobby admin feature also to create accounts but it isn't intended for guest users to create their own account.
The wlc doesn't have a schedule to enter a command via the cli, but I bet you can developer some web base guest creation that would send the command to the wlc and remember that command to remove it later.
Sent from Cisco Technical Support iPhone App

Static ipaddress for guest vm.

Similar Messages

Maybe you are looking for