Tuxedo Multipler-domain connected on two subnets ?

I have the following problem:
> I have 2 TUXEDO domains installed on 2 different nodes.
The node 1 has 2 net-interfaces (2 subnets).
From the first net-interface it has to receive the requests from the TUXEDO clients,
and then it has to forward the requests to other domain (node 2) connected on
the other net-interface.
Is it possbile to do it ?
Can you help me ?
Thanks in advance.
Regards
Tony

I'm not sure why yoiu have RIP enabled...you shouldn't need it, but you will still need the static route on Router 1 192.168.1.0/255.255.255.0 to LAN 192.168.15.124. All you should need on router 2 is the default route that sends any traffic not in router 2 LAN subnet to router 1.
I'm not sure why this  route 192.168.1.0/255.255.255.0 to 0.0.0.0 WAN is there, but I suspect it may be causing some of the issues....
Tomato 1.25vpn3.4 (SgtPepperKSU MOD) on a Buffalo WHR-HP-G54
D-Link DSM-320 (Wired)
Wii (Wireless) - PS3 (Wired), PSP (Wireless) - XBox360 (Wired)
SonyBDP-S360 (Wired)
Linksys NSLU2 Firmware Unslung 6.10 Beta unslung to a 2Gb thumb, w/1 Maxtor OneTouch III 200Gb
IOmega StorCenter ix2 1TB NAS
Linksys WVC54G w/FW V2.12EU
and assorted wired and wireless PCs and laptops

Similar Messages

  • How to provide access to multiple users connected to a Dumb switch? (multi-auth/multi-domain)

    Good morning everybody,
    I am writing on behalf of not being able to implement a desired outcome in our company network. In fact the situation is as follows:
    What I want to do is to be able to authenticate users (802.1x authentication) in our company radius server and authorize them access by having a dynamic VLAN assignment in a multi-user environment on one and the same port of a Cisco 2960 switch. So far, the authentication and authorization has been working completely smoothly (there are no problems with itself). The concept involves the configuration of both DATA and VOICE VLANs as I there is also phone authentication implemented. In order to simulate this environment I introduce a Dumb switch connected to my Cisco 2960 Catalyst.
    What I have successfully managed to get to work so far is this:
    1) On one switch port I have tried the “authentication host-mode multi-domain” and it worked perfectly for a PC behind a telephone, or with one PC connected to a the dumb switch + the telephone connected to another port of the dumb switch. Logically it is the same situation as there is a separation in two domains – DATA and VOICE. Bellow is an output from show authentication sessions for this scenario.
    Interface  MAC Address     Method   Domain   Status         Session ID          
    Fa0/23     0021.9b62.b79b  dot1x    DATA     Authz Success  C0A8FF69000000F3008E (user1)
    Fa0/23     0015.655c.b912  dot1x    VOICE    Authz Success  C0A8FF69000000F9009F (phone)
    2) On the other hand, when I try the same scenario with the “authentication host-mode multi-auth”, the switch still separates the traffic in two domains and is able to authenticate all users, AS LONG AS they are in the same VLAN.
    show authentication sessions:
    Interface  MAC Address     Method   Domain   Status         Session ID          
    Fa0/23     0021.9b62.b79b  dot1x    DATA     Authz Success  C0A8FF69000000F3008E (user1)
    Fa0/23     b888.e3eb.ebac   dot1x    DATA     Authz Success  C0A8FF69000000F8008C (user2)
    Fa0/23     0015.655c.b912  dot1x    VOICE    Authz Success  C0A8FF69000000F9009F (phone)
    However, I cannot succeed authentication of many users from DIFFERENT VLANs, neither in multi-auth nor in multi-domain modes.
    What I want to get is an output like this:
    Interface  MAC Address     Method   Domain   Status         Session ID          
    Fa0/23     0021.9b62.b79b  dot1x    DATA     Authz Success  C0A8FF69000000F3008E (user1)
    Fa0/23     b888.e3eb.ebac dot1x    DATA     Authz Success  C0A8FF69000000F8008C (user2)
    Fa0/23     0015.655c.b912  dot1x    VOICE    Authz Success  C0A8FF69000000F9009F (phone)
    I want the switch to authenticate the users anytime they connect to itself and for them to have an instant access to the network. (I tell this because I tried scenario 1) with multi-domain mode and authentication violation replace, and it worked but, two users never had access to the “Internet” simultaneously!!!
    The configuration of the interface connected to the Dumb switch is as follows.
    interface FastEthernet0/x                                                      
     description Connection to DUMBswitch                                            
     switchport mode access                                                         
     switchport voice vlan XXX                                                      
     switchport port-security maximum 10                                            
     switchport port-security                                                       
     switchport port-security violation protect                                     
     authentication host-mode multi-auth                                            
     authentication priority dot1x                                                  
     authentication port-control auto                                               
     authentication timer reauthenticate 4000                                       
     authentication violation replace                                               
     dot1x pae authenticator                                                        
     dot1x timeout tx-period 10                                                     
     spanning-tree portfast                                                         
    The way I see it is explained in the following steps:
    - PC1 connects to the Dumb switch. This causes the Cisco switch to authenticate user1. This creates an auth. session with its MAC address linked to a domain DATA.
    - When PC2 connects to the Dumb switch, this causes the violation replace which replaces the recent authenticated MAC address with the MAC of PC2. I would like it once authenticated to appear in the authentication sessions with a link to a new DATA domain linked to the VLAN assigned from the RADIUS server.
    Is this possible? I think (in theory) this is the only way to provide authenticated access to multiple users connecting through Dumb switch to the network.
    Has anybody ever succeeded in such a configuration example and if yes, I would be love to get some help in doing so?
    Thank you
    Stoimen Hristov

    Hi Stoimen,
    I have done a setup similar to yours with the only exception being VLAN assignment. When I used dACLs only, it makes things somewhat easier as the VLAN no longer matters. Remember that the switchport is in access mode and will only allow a single VLAN across it (with the exception of the voice VLAN). I think that is the real cause of your problem.
    From what I can see, you have 2 options available to you:
    1) Use dACLs instead of VLAN assignment. This means that an access list will be downloaded from the radius server straight to the authenticated user's session. I have tested this and it works perfectly. Just Google Cisco IBNS quick reference guide and look for the section that deals with Low Impact mode.
    2) Get rid of the dumb switches and use managed switches throughout your network. Dumb switches will always be a point of weakness in your network because they have no intelligence to do advanced security features like port security, 802.1x, DHCP snooping, etc.
    Hopefully someone else will chime in with another option.
    Xavier

  • The connection between two Tuxedo machines

    We want to locate our servers(services) onto different machines, we want to know
    :whether the connection,between two machines, is built up at the first time the
    servers booted and kept persistently connectted, or just build up the connection
    when there comes a request.

    Remote machines connect to one another lazily. If you have machines A
    (master), B and C, then B and C do not connect until a request is made
    between B and C. All machines connect to the master at boot time.
    roopesh wrote:
    >
    The connection is persistent and is not request based.
    The machines communicate using BRIDGE.The DBBL which runs
    on the primary master machines keep doing sanity checks
    and health of BBL at all the machines connected and if
    any BBL does not respond for the specified time(set by
    DBBLWAIT) in RESOURCES section.then that machine gets partitioned by DBBL.
    for more info you can read tuxedo documentation.
    Thanks
    Roopesh
    "YANG YI" <[email protected]> wrote:
    We want to locate our servers(services) onto different machines, we want
    to know
    :whether the connection,between two machines, is built up at the first
    time the
    servers booted and kept persistently connectted, or just build up the
    connection
    when there comes a request.

  • Connection between multiple domains of AD and OIM

    I am trying to integrate OIM and AD (target resource) and I have 13 domains in AD. For one domain, connection between AD and OIM is established using OOTB connector.
    Can someone provide me approach for connection between multiple domains of AD and OIM.
    Do I need to install different connector server for different domains or OIM provides with some Connector Server cloning feature.

    Hi,
    this forum is for asking and answering JDeveloper and ADF related question. Your question should be asked to the FMW security forum here on OTN
    Frank

  • 11g Multiple Rpd on one BI server connecting to two different data marts

    Hi
    Did anyone tried and successfully implemented multiple rpds on one bi server. I have similar requirement in one of the clients place.
    1. Install OBIEE 11g with vertical scaling( reason client doesnt want to spend extra money on additional server licenses) and would like to utilize the powerful existing servers.
    2. Install 2 rpds on One BI Server and connect to two different datamarts.
    3. Create two PS and provide two links to have two different reporting environments.
    Appreciate with any pointers. I am very clear on Vertical Scaling and bumping up the Bi , PS and Java Hosts components. I saw a post with successful implementation of the same functionility in 10g and nothing in 11g. I already reviewed ritmanmeed blogs but did not give a complete picture of successfull implementation.
    Thanks

    Hi,
    Yes, it is possible to have two different .rpds on one BI Server but then you need to set up two different Presentation Servers.
    Refer the below threads for more information.
    Re: multiples RPD in one server
    Re: Multiple RPD & Multiple Presentation service instance on single BI Server
    https://forums.oracle.com/forums/thread.jspa?messageID=9189677&#9189677
    Can i put two rpd files in nqsconfig init file in BI Admin
    Hope this help's
    Thanks
    satya

  • About the connection of two Catalyst

    Dear Sirs,
    How is the port configuration when two Catalyst is connected?
    Two Catalyst becomes the same segment.
    bridge? or trunk?
    Best regards,

    Both access and trunk port can extend the vlan in both switch (extend means the broadcast domain for that vlan is extended to the other switch). The trunk port simly means that vlans can propagate through that port while access port only allows traffic for the vlan the access port belongs.
    I think the main thing is understanding what a vlans is - it is simply a broadcast domain. Think of a vlan as being in the same subnet. In a switch there is a virtual bridge where all the ports that belongs to the same vlans are "bridged" internally. A port belonging to a single vlan is an access port. A trunk is simply a way to connect switches together without using a single port for every vlan. for example, you have ten vlans in your network and you have two switches. you want these same vlans in one switch to extend to another switch. without a trunk you will have to connected ten different "access" port so that these vlans can talk to the other device in that same vlan at the other switch. With a trunk you need only one port and have the same ten vlans go through that same port. Point is "access" port belongs to one vlan - trunk allows propagation of multiple vlan and that single port.

  • Domain over IP routed subnets - getting network browsing to work?

    Hi, I have a small domain spanned across two different subnets. Each subnet has its own domain controller, and the two networks are linked via IP routing.
    Network connectivity between the two subnets is good - replication between the two DCs is happening smoothly, and every workstation can access every other workstation regardless of which subnet they're on.
    The problem is that network browsing doesn't seem to work across the subnets. If a user knows the name of the machine they're connecting to, then they can enter that name into Explorer's address bar and it will connect fine. But when they go to "Network"
    or "My Network Places", only the machines from their own subnet appear there. When a user goes to "My Network Places" (or just "Network" in Win7's Explorer) then I would like them to see all the machines on both subnets, not just their own subnet.
    Both DCs are running Server 2008 R2. What do I need to do to get network/computer browsing to work across the two subnets?

    Hi,
    Thank you for the post.
    Is WINS really necessary?
    Yes. NetBIOS resolution across subnets depend on WINS server.
    Summary of WINS Benefits
    WINS enables the Computer Browser service to collect and distribute browse lists across IP routers.
    http://technet.microsoft.com/en-us/library/cc784180(WS.10).aspx
    In a multiple subnet environment, make sure WINS is configured properly so that you have the proper NetBIOS name resolution.
    http://blogs.technet.com/b/networking/archive/2008/07/25/netbios-browsing-across-subnets-may-fail-after-upgrading-to-windows-server-2008.aspx
    If there are more inquiries on this issue, please feel free to let us know.
    Regards
    Rick Tan
    TechNet Community Support

  • How do I host multiple domains on a single Messaging Server?

    How do I host multiple domains on a single Messaging Server?
    <p>
    To host multiple domains on one Messaging Server, use the
    mailAlternateAddress attribute. If you want to host two domains
    (customer1.com and customer2.com) on your server mail1.domain.com,
    make sure that:
    The various domains (in DNS) point to the installed mail server
    (you must have the MX records that
    points mail for customer1.com to mail1.domain.com and
    customer2.com to mail1.domain.com)
    That each person receiving mail at customer1.com and
    customer2.com has an appropriate mailAlternateAddress
    attribute describing the appropriate email address. For
    instance, John Doe can have an email address (i.e. the value
    of the 'mail' attribute for the John Doe LDAP entry) of
    [email protected] and receive his mail on
    [email protected] (the value of the mailAlternateAddress
    attribute)
    With Messaging Server 3.5, mailAlternateAddress can take the
    form of @mail1.domain.com. If jdoe's mailAlternateAddress is
    set to @mail1.domain.com, mail sent to [email protected]
    will be delivered to [email protected]

    jaygatsby1123 wrote:
    So what exactly am I doing with virtual hosts?  There is a place for Aliases...  What would I put in the "Aliases" box?
    Any other host name that you want to resolve to the specified virtual host.  It's quite literally an alias.
    if you want www.example.com and www.example.org to end up at the same web site and you already have a virtual host — Apple refers to virtual hosts as sites — configured for www.example.com in Server.app, then you'd add www.example.org as an alias for the www.example.com virtual host (site).
    Virtual hosts are implemented in a web server using some details of the HTTP or HTTPS protocol, and what the web browser (client) specified.  The client gets handed an IP address or a domain name by the user, and the client then fetches the associated IP address for the target web server from the client's DNS services or local host database, and the client then connects to the IP address and passes over the text string that the user had requested — the IP address or domain name or even some local shortcut set up in the client system — via the HTTP or HTTPS protocol.  The web server receives and processes this arriving text string from the client, and uses it to select which web site to render back to the web client.   One subtle detail lurks here, too: the server's own DNS configuration really isn't involved in the selection of the virtual host.

  • Migrating multiple domains with same name - how? Rename? Migrate through temporary domain?

    Hi,
    we have acquired another company, and they have multiple, separate domains with the same name (every site has a domain with NetBIOS name "COMPANY" and DNS name "company.local"). Now we want to migrate all these domains into ours using
    ADMT.
    Unfortunately, we did not manage to migrate one of these domains completely, so the trust must remain established for some time. But we have to continue with the second domain - which normally would require a trust, but of course we can't establish a trust
    to two domains with the same name at the same time.
    I found two potential solutions for the dilemma, but I'm not sure if both are reasonable:
    1) Rename the domain with RENDOM.EXE to COMPANY2 and company2.local and then migrate with ADMT
    2) Migrate COMPANY to a temporary domain such as COMPANYTEMP and then migrate from COMPANYTEMP to our domain
    Given that there are roughly 100 users, 2 domain controllers and 8 other servers, what would be the better approach? Is option 2 possible at all, so would I be able to use the sidHistory attribute migrated from the original COMPANY domain in our domain at
    all?
    There is also an Exchange 2007 server, which seems to make option 1 impossible unless we find another way to migrate it (like, export all mailboxes to PST before migration) ...

    Ok, that's what I expected. Still, I have servers in the old domain, so if I do these steps:
    first create a new temporary domain i.e COMPANYTEMP and
    create trust between COMPANYTEMP -
    COMPANY(Right)
    then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
    disconnect the domain COMPANY(right) ,
    users will lose connectivity to any servers in the domain. I understand that it does not work with all domains connected? Of course I can't make OURCOMPANY's domain controllers see the DCs of COMPANY (right) in DNS (though I could achieve it the other way
    round).
    My original plan was:
    first create a new temporary domain i.e COMPANYTEMP and
    create trust between COMPANYTEMP -
    COMPANY(Right)
    then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
    create trust between OURDOMAIN and COMPANYTEMP
    then do the migration with sidHistory from
    COMPANYTEMP --> OURDOMAIN,
    Migrate users
    Migrate computers
    Migrate servers
    remove trusts and old domain
    But I see that this will not work out, right? So, my only option would be:
    first create a new temporary domain i.e COMPANYTEMP and
    create trust between COMPANYTEMP -
    COMPANY(Right)
    then do the migration with sidHistory from COMPANY(right) --> COMPANYTEMP ,
    Migrate computers and servers to COMPANYTEMP
    Install new Exchange server in COMPANYTEMP
    migrate mailboxes to COMPANYTEMP
    disconnect / abandon COMPANY(right)
    create trust between OURDOMAIN and COMPANYTEMP
    then do the migration with sidHistory from COMPANYTEMP
    --> OURDOMAIN,
    Migrate users
    Migrate computers
    Migrate servers
    Migrate mailboxes
    remove trusts and old domain
    And to minimize user impact, all this would have to be done in one go (over night), which is hardly possible .........................

  • Multiple GLBP groups in one subnet

    Hi All,
    I have read all I can on GLBP without a definitive answer to my question. I have two 7613 routers connected to two 7304's that serve as our gateways to the ISP. I would like to run these connections through a 6509VSS and run GLBP on all 4 routers in the following manner.
    I would like to connect 4 routers to the VSS, place their interfaces into the SAME subnet but running a different GLBP group as below
    7613:                                       Virtual IP  for Group 1                   7613:
    172.30.100.65/28       GLBP 1 IP 172.30.100 66              172.30.100.70/28
                X                                                                                 X
                  X                                                                            X
                  VSS Layer 2 only and used to connect all devices into the same vlan 2010
                    X                                                                          X
                  X                                                                               X
    172.30.100.73/28        GLBP 2 IP 172.30.100.75            172.30.100.78/28
    76XX:                                         Virtual IP for group 2                  76XX:
    The subnet is 172.30.100.64/28 ( .65 - .78 )
    My question is whether the two groups of GLBP instances can coexist within the same subnet using 4 routers. My goal is to have one gateway address for each side. The 76XX routers represent the AT&T routers facing their MPLS network. I want to do load balancing across those routers for outbound traffic and my 7613's to load balance the return traffic.
    I am running GLBP in my core between the two 7613's and multiple 3750me switches that provide a very high level of redundancy. I'm just not sure if the scenario above is supported.
    Thanks for any and all comments or suggestions.
    Glenn

    UPDATE.....
    Since first posting this question, I have coded the design in a lab and the design works as drawn. This provides gateway protection to an ISP in both directions.

  • Exchange setup for multiple domains

    We are planning to deploy Exchange server 2013, We have two companies and would like to create Email box for both the companies with same name.
    Example : [email protected], [email protected]
    We would like to have separte email boxes for the both companies. Please suggest us accordingly.

    That should be simple enough. Exchange can handle having multiple domains for sending / receiving and users can have multiple mailboxes configured in Outlook. The name field in Exchange doesn't need to be unique (the account name does obviously), so for
    instance there's no issue having "Fred Bloggs" <[email protected]> and "Fred Bloggs" <[email protected]> both setup.
    In a way the trickier part is setting it up in Outlook since different versions react differently. If you're using Outlook 2013 it should be quite straight forward. As you can see here
    http://technet.microsoft.com/en-us/library/ee815819.aspx the manual setup is easy enough for multiple exchange mailboxes, though auto mapping should work as well. If you're in a network AD
    environment (eg connecting using your local password), then realistically you'll want one mailbox to be primary which is associated to your network login, and then that login to have full access and send as permissions on the second mailbox.
    You may also need to deploy a reg key change to enable saving sent items from the second mailbox into that mailboxes sent items folder rather then the primary mailboxes (assuming you want to keep messages two and from both domains separate and in their own
    mailboxes). The reg key is listed here
    http://support.microsoft.com/kb/2843677 and is definitely needed in Outlook 2007 and 2010 but I'm not sure if it's still an issue if you're using Outlook 2013.

  • Autodiscover and outlook anywhere for multiple domains

    Hello
     I have exchange 2010 SP3 environment  which is currently in production. We have multiple domain names added to accepted domain and it’s working fine.
    I have two different public IP Address for MX (SMTP ) and OWA.
    following DNS records are created with ISP DNS Servers. Below find the example.
    MX Records
    Smtp.abc.com (10.1.202.10) (SMTP /MX)
    Smtp.zxc.com  (10.1.202.10) (SMTP /MX)- new domain
    Smtp.qwe.com  (10.1.202.10) (SMTP /MX) - new domain
    OWA and Autodiscover
    Mail.abc.com (10.1.202.2) (owa)
    Autodiscover.abc.com (10.1.202.2)
    Currently outlook anywhere and  outlook autodiscover  working for (mail.abc.com) domain without having any issues. All the other domain are failing errors when I’m testing the Remote connectivity Analyzer. When I’m trying configure the outlook
    profile it’s not resolving the domain name.
    OWA working for domain they also using the same url to access the OWA (https://Mail.abc.com/owa)
    Any idea how to resolve this issue.
    Aucsna

    Hi,
    Agree with Ed, generally, all names autodicover.SMTPAddressSuffix should be added in the certificate and Public DNS entries.
    Alternatively, you can refer to the following article to simplify the namespace in certificate:
    http://www.msexchange.org/articles-tutorials/exchange-server-2010/mobility-client-access/using-autodiscover-large-numbers-accepted-domains-part1.html
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
    sure that you completely understand the risk before retrieving any suggestions from the above link.
    Thanks,
    Angela Shi
    TechNet Community Support

  • Our home network has multiple devices connected by iCloud. Having problem with Calendar. On one iMac, all the events are duplicated. How can I correct that problem? Under the Calendar accounts, I had my Apple id listed and also just iCloud.

    Our home network has multiple devices connected by iCloud: 2 iMacs, 2 iPhone 4s, 1 MacPro Laptop, and 1 iPad 2.  When using Calendar, all the events were
    duplicated on my husbands iMac.  On his computer, under Calendar accounts, I had included iCloud and also my iCloud ID.  I thought that because I had two accounts listed that were connected to iCloud, that might be the cause of the duplication.  When I deleted ithe calendars from one of the accounts, it resulted
    in deleting all of the events on all of our network devices!
    I have since entered some new events into Calendar from my iMac and from my iPhone.  These appear correctly on all devices except my husband's iMac where they are again all duplicated.
    I have two questions: 1)  How can I eliminate the duplicated events on my husband's computer and 2) How do I retrieve the old wiped out Calendar events from
    Time Capsule.  I don't know how to find Calendar in the Time Capsule.  If I find the Calendar information in Time Capsule, how do I transfer it to my current Calendars?
    I was obtaining phone help from one of the Apple techs at Apple Support, but our call was disconnected part way through.  Didn't know how to reconnect with the tech.
    Thanks for any help.

    The warranty entitles you to complimentary phone support for the first 90 days of ownership.

  • How to create a muse site in various languages with multiple domains

    I have been asked to create a website for a product. A very simple website with maybe one or two pages and one product for sale for which the client would like Paypal as the payment gateway. Simple right?
    No! This client would like to market their product into Europe, they would like to purchase multiple European domains ( .fr, .de for example).
    So how on earth can I do this? I will be using Muse for build and Business Catalyst for hosting.
    Bearing in mind the client will not want to pay for separately hosted sites. Is there a way of translating the text for each domain. Or could I assign multiple domains but direct them to different home pages within the same site?
    I haven’t a clue how to problem solve this.

    Hi,
    Some links that might be useful,
    how to set up a multilingual website with Adobe Muse and push it live to Adobe Business Catalyst
    Re: How can i create different languages for my page?
    How can i create a multilingual website?
    how to create a multilingual site
    Do let me know if you have any question.

  • How to use the Load Balancer Plug-in to serve multiple domains

    In SJSAS8.1 SE/EE the asadmin commands that create and maintain a load balancer configuration operate within a domain. When the load balancer configuration is exported an xml file is created that contains all the information for that domain. To make the load balancer plug-in balance the load for multiple domains, the loadbalancer.xml files can be manually merged to conatin the data that is exported from each domain's load balancer configuration.
    For example, 2 domains are created, both having a load balancing configuration. After exporting both configurations using the asadmin export-http-lb-config command, the user would then cut and past the cluster information into the single loadbalancer.xml file that resides under the web server's config directory.
    An example of the manually merged loadbalancer.xml file follows:
    <?xml version="1.0" encoding="UTF-8"?>
    <loadbalancer>
    <cluster name="domain1">
    <instance disable-timeout-in-minutes="30" enabled="true" listeners="http://localhost:1026 https://localhost:38181" name="i1"/>
    <instance disable-timeout-in-minutes="30" enabled="true" listeners="http://localhost:1027 https://localhost:38182" name="i2"/>
    <web-module context-root="ab" disable-timeout-in-minutes="30" enabled="true"/>
    <health-checker interval-in-seconds="5" timeout-in-seconds="60" url="/"/>
    </cluster>
    <cluster name="domain2">
    <instance disable-timeout-in-minutes="30" enabled="true" listeners="http://localhost:1029 https://localhost:38189" name="i3"/>
    <instance disable-timeout-in-minutes="30" enabled="true" listeners="http://localhost:1030 https://localhost:38188" name="i4"/>
    <web-module context-root="webservice" disable-timeout-in-minutes="30" enabled="true"/>
    <health-checker interval-in-seconds="5" timeout-in-seconds="60" url="/"/>
    </cluster>
    <property name="response-timeout-in-seconds" value="60"/>
    <property name="reload-poll-interval-in-seconds" value="5"/>
    <property name="https-routing" value="false"/>
    <property name="require-monitor-data" value="false"/>
    <property name="route-cookie-enabled" value="true"/>
    </loadbalancer>
    Hope this helps - Mark

    Mark, be my savior, I work for SUN as subcontractor at client site. the only one at site ...so I depend on this forum for solutions........
    still having trouble failingover to second instance. I have two AccessManagers behind this loadbalancer.
    Here is what I saw......
    **************LOGS**********************
    [20/Jun/2005:14:22:47] failure (15102): for host 128.114.65.13 trying to GET /amconsole/base/AMA
    dminFrame, service-passthrough reports: timed out waiting for request body
    [20/Jun/2005:14:22:47] warning (15102): reports: lb.runtime: ROUT1014: Non-idempotent request /
    amconsole/base/AMAdminFrame cannot be retried.
    So I went and updated the loadbalancer.xml (see at the end of the msg). Now I get a different kind of problem...
    **************LOGS******************************
    [20/Jun/2005:15:25:18] failure (15295): for host 128.114.65.13 trying to GET /amconsole/base/AMA
    dminFrame, service-passthrough reports: timed out waiting for request body
    [20/Jun/2005:15:25:18] info (15295): reports: lb.runtime: RNTM3003 : Error servicing the request : NoVal
    Here is my loadbalancer.xml file...
    <loadbalancer>
    <cluster name="cluster1">
    <instance name="instance1" enabled="true" disable-timeout-in-minutes="1" listeners="http://idm-test-1.ucsc.
    edu:80 "/>
    <instance name="instance2" enabled="true" disable-timeout-in-minutes="1" listeners="http://idm-test-2.ucsc.
    edu:80 "/>
    <web-module context-root="amconsole" disable-timeout-in-minutes="1" enabled="true" error-url="sun-http-lber
    ror.html" >
    <idempotent-url-pattern url-pattern="/*" no-of-retries="3" />
    </web-module>
    <web-module context-root="amserver" disable-timeout-in-minutes="1" enabled="true" error-url="sun-http-lberr
    or.html" >
    <idempotent-url-pattern url-pattern="/*" no-of-retries="3" />
    </web-module>
    <web-module context-root="ampassword" disable-timeout-in-minutes="1" enabled="true" error-url="sun-http-lb
    error.html" />
    <web-module context-root="amcommon" disable-timeout-in-minutes="1" enabled="true" error-url="sun-http-lberr
    or.html" >
    <idempotent-url-pattern url-pattern="/*" no-of-retries="3" />
    </web-module>
    <health-checker url="/" interval-in-seconds="15" timeout-in-seconds="2" />
    </cluster>
    <property name="reload-poll-interval-in-seconds" value="60"/>
    <property name="response-timeout-in-seconds" value="30"/>
    <property name="https-routing" value="false"/>
    <property name="require-monitor-data" value="true"/>
    <property name="active-healthcheck-enabled" value="true"/>
    <property name="number-healthcheck-retries" value="3"/>
    <property name="route-cookie-enabled" value="true" />
    </loadbalancer>
    **************************************************************

Maybe you are looking for