Uccx cluster over wan. cad login problem

Hi. I have uccx 8.5 cluster over wan. When the uccx publisher is down, agents can't login- invalid password. Please help.
Sent from Cisco Technical Support iPhone App

Hi,
Where are your agents situated in respect of the CCX and CUCM servers? Agents authenticate via CUCM or AD if AD authentication is enabled on CUCM have you confirmed that these are also reachable from the location in question? Have you verified serviceability on the secondary node to ensure the ccm engine and desktop services are running and in-service?
Regards
Allan
Sent from Cisco Technical Support iPad App

Similar Messages

Cluster Over WAN Test

We are planning to put a subscriber across WAN.We have enough bandwidth (6MB) bewteen sites and we followed all the SRND recommendations(especially QOS) for Cluster over WAN.
I used extended ping with type 3 (as in SRND) to test the RTT from a switch at remote site to publisher CM and it came less then 40 ms.
Is there any other test we can do so we can test the RTT and bandwidth is enough for ICCS traffic.
Thanks for the help
Bala

you could put a good load of data on the wire across the wan, see if you can get 3-4mb (or whatever your maximum is) and then test your pings.
use the results added to the number of phones (BHCA) and see what the numbers 'should' look like.
be sure to use the bandwidth calculator if you haven't already. try for many or all different codecs.
see the bandwidth calculator at the following link: (requires cco account)
http://tools.cisco.com/Support/VBC/do/CodecCalc1.do

UCCX HA over WAN

Hi All
I am looking at deploying a High Availability standby server on a UCCX Enhanced box over a high speed WAN.
I know that it isn't recommended (or supported) according to the SRND but I am interested if it is actually possible?
Anyone done this before?
It maybe possible to keep the 2 boxes on the same VLAN if this helps but again the SRND says they must be in the same 'building', why i'm not sure??
Any help appreciated
Cheers
Andy

Andy, if you lose Heartbeats to the Unified Call Manager on the master, the slave might not kick in in doubt if there is or not a master in service and do a master reelectioninstead causing the call in progress to be lost while it is busy doing so.
I could assure you it is unfortunately still something quite common in the event of a WAN connection even with some of the most reliable ones.
Regards,
Riccardo

UCCX8 CAD Login Problem

Hello Everyone,
I installed UCCX8.0 in vmware with premium demo licenses, and interoperate with CUCM8.0.
When I logged in Cisco Agent Desktop, I got following error "The ID you entered was net found".
Could anyone help me?
Thank you for any input!

I see this problem for so many reasons in our setups which is completely diff and includes LCP, RCP and other stuffs. But I think in your case, stop and restart the Cisco Desktop Sync Server service should be done to fix it. You can also have look on this bug in http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsv98008

UCCX 8.5 - HA over WAN - Appadmin webpages run slow

We have constant and ongoing problem with the Supervisor and Administration webpages of our UCCX running extremely slow, we are talking 5 minutes + to change the skill of an agent.
Have had several tac cases open and problem continues to arise, so I am tending to believe this is a bug with HA over the WAN. Wondering if anyone else with HA over WAN -- system Cisco Unified CCX Administration ---System version: 8.5.1.11004-25 has this problem?
I cant keep doing this:
Subject: SR 622308023 - UCCX Appadmin webpages run slow
Hi John,
Please try the following steps:-
à Login to the Secondary UCCX web-admin page
à Go to CCX Serviceability page from drop down box on the upper right hand side
à Then to Tools> Datastore Control Center > Replication Server
à Click on Disable CDS and HDS
à Wait for couple of minutes and then click on Enable CDS and HDS
à Then click on Reset Replication
à Then reboot the primary CCX Server through SSH session “utils system restart”
à Wait for 15-20mins and then reboot the secondary CCX Server through the same command and then wait for around approximately 20mins
Please try the above steps during off-hours and then monitor if issue re-appears after a day. It seems there might be some synch issue which might be causing this and the above steps can fix it.

Hi
I have this problem with one of my customers, or something similar - it's CSCug18648.
According to TAC, up to 30 seconds is 'acceptable/as designed'. We randomly (but frequently) get multiple minute delays, and it's due to some other process on the system locking some of the data. It should be fixed in ES03 for 8.5(1)SU4, which should be available approximately the end of May.
Regards
Aaron

Windows server 2003 Remote desktop over WAN problem.

Ok so problem is there is a 2003 windows server in my office. Any computer phone etc. can connect to it via Remote desktop if they are in the LAN network. I have port forwarded 3389 , disabled firewalls , there is no antivirus software on the server.
BUT I cannon log in over WAN. Heres the problem.
I type in the WAN ip I connect with credentials.
This is what i get:
Connecting...
Negotiating credentials...
Then it just suddenly force closes.
Also tried from a Windows 8 PC , when trying to connect it INSTANTLY throws me an error saying:
This computer cant connect to the remote computer. If the problem continues contact etc..
No matter where i try , a pc , a laptop , a phone , a tablet it just force closes. I can see that the devices are able to see the server and are trying to connect , but the connection just force closes for no reason and no error is shown. Also I dont see
anything in the event viewer on the server. The credentials are correct also. And the port is forwarded correctly.
Where could the problem be?

Hi,
Thank you for posting in Windows Server Forum.
As you have commented that you have forwarded port correctly at windows end, but still suggest you to check whether you have port forwarded on Router which you are using for WAN connections.
Can your local system can make successful ping to the remote server from WAN connections?
For testing you can telnet <router ip> 3389 and if you get blank screen then it confirm that port has been forwarded.
It might happens that there is port assignment conflict taken place, so check with “netstat –a –o” and see port 3389 is not being used by other application, if that is the case then change the port.
You can refer following article for more troubleshooting steps (Point 2)
Remote Desktop disconnected or can’t connect to remote computer or Remote Desktop server (Terminal Server) that is running Windows Server 2003
http://support.microsoft.com/kb/2477023
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

UCCX8 over Wan

Hi there,
Got some questions regards UCCX ver 8.x deployment.
I have a customer with their Main site in one country and a remote site in another. They are connected with an MPLS link.
Main site has CUCM6, UCCX7 and 14 UCCX agents.
Remote site has 14 UCCX Agents connected via MPLS wan.
UCCX8 HA and CUCM8 has now increased its Round trip delay to 80ms.
So if we upgrade CUCM and UCCX can i do the following?
Is it possible to deploy another UCCX server and Subscriber at the remote site and point the agents at the local UCCX server?
Can this be done using HA or can i just add a second server to the UCCX cluster and use that for local access?
Does HA mode mean that the UCCX Sub server wont be used unless the UCCX Pub falls over?
Does it matter that i have less than 2meg on the MPLS Wan.
Any help much appreciated..
Thanks..
T.

Hi,
I think the SRND for UCCX will answer all your questions.
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_8_0/design/guide/uccx80srnd.pdf
Roughly speaking:
-- Yes you can have two UCCX nodes separated by WAN as long as the allowed round-trip time between the servers is 80 ms or less
Instead of pinging from the server itself you better use the switch closesest to uccx (check the SRND)
-- It is recommended by Cisco to have at least one cucm node across the WAN as well
-- Agents can be located in any site
-- For HA over the WAN heartbeats are send every second and failover is initiated if we miss 10 consecutive heartbeats (10 secs)
-- I think you will have problems if you use a link less than 2 Mbps. Need to use higher
You roughly need 1.2 Mbps for the communication between the UCCX servers over the WAN and 800 kbps for the communication between the UCCX and the CUCM over the WAN
For additional information check chapter 4 of the above guide.
Hope it helps,
Christos

CCX 8.5 in HA over WAN on Island Mode

Hi guys,
Does anyone know what will happen with CCX 8.5 in HA over WAN configuration goes to island mode?
So consider the following setup
Site A Site B
CUCM Node --- WAN --- CUCM Node
CCX Primary CCX Standby
Each site have their own local voice gateway and sets of agents.
The SRND covers that if 10 consecutive heartbeat is lost then a failover will be triggered.
However the SRND does not cover the scenario if the WAN is totally cut and Site A and Site B is completely isolated from each other.
Does anyone know what will happen in this situation? Will both CCX Node become Primary and operate in its own right (just like Unity Connection cluster when they go to island mode)?
Kind regards
Daniel

Daniel,
Here is more of a "step by step" to your question:
Page 68:
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_8_5/design/uccx851srnd.pdf
When the WAN link has a clean break:
and by clean break I mean it goes down and stays down, it does not
flap or provide intermittent connectivity
1) The CAD agents will connect to UCCX server that they can communicate with
2) The UCCX servers will connect to the CUCM Node that they can connect
to for call processing
3) The calls that get to the respective UCCX servers will go to the
respective agents
When the WAN Link is restored:
1) The Nodes will decide which node is more "qualified" to become the
master node, this is generally Node 1 aka the first node that was built
in the cluster
2) The CAD Agents connected to the node that becomes the secondary will
fail over to Node 1 to begin accepting calls from it
3) All of the calls that the new master Node were processing will not
have any negative affect as they will continue to be processed by UCCX
4) The calls that are in queue for the node that becomes the slave in
the cluster will be dropped

"Share over Wan" - passworded but log files say differently?

In a desperate attempt to get backup features to work on my TC, I enabled "Share over Wan". Thinking that I've got more than enough security with disk passwords, I didn't automatically think there'd be a problem.
I then looked at my log files on my TC a day later and saw successful logins from IP's other than mine - but all within the same subdomain.
Does "Share over Wan" supersede the disk passwords? I've tried accessing from other subdomains (my work) and always get prompted for passwords. Should I be worried about these successful logins or ignore them as successful pings (or the like?)
I've, of coarse, now turned off "Share over Wan".

awkwood wrote:
Cheers omp!
I have one suggestion: your count_lines method will be quite slow on large log files.
Rather than use readlines you can optimize the read operations like so:
line_count = 0
File.open(identifier.to_cache_path) do |f|
while block = f.read(1024)
line_count += block.count("\n")
end
end
The speed boost makes it comparable to shelling out to wc.
Thanks for the suggestion; I just committed it.

CAD login failure with CUPS integration

OK so here we go,
UCCX System version: 8.5.1.10000-37
Cucm System version: 8.6.2.20000-2
CUPS System version: 8.6.4.11900-1
So we've integrated UCCX desktop with CUPs fine, CAD user goes to login gets error asking for Presence creds.
CUPS and CUCM are Ldap authenticated integrated.
I've manually tested logging users into Jabber desktop and Cups user (web login) and both login fine with the same ldap user ( CAD uses this login too)
If I click cancel on CAD login agent logs in fine to CAD, however if I try login to chat gets rejected even though creds are the same.
Have manually input creds into CAD when prompted for Presence login (still gets rejected)
Weird how creds work for Jabber but not getting passed through, have restarted all servers in cluster.
Any input welcome.
Thanks in advance,
Liam

Hi Liam
This is a particularly poorly implemented feature.
Basically pre 9.0 I think it doesn't do any authentication to CUPS. What you need is an entry in the 'Incoming ACL' (in the system/security/incoming acl menu I think) for the IP address of each PC that will use this feature. My understanding is this basically bypasses authentication.
In 9.0(2) that i upgraded to this week, it supports digest auth. The description from the admin guide is that you must set the digest creds on the CUCM end user to match the user's login password. Well... that's just great security isn't it? 'Please may I have your AD password so I can add a feature to your CAD? Oh, and tell me every time you change it so I can update it'....
There are also a host of bugs I found - you can't search for contacts in Web CDA to add them to contact lists in larger ADs, it doesn't seem to show the status of any internal or external contacts properly, and upgrading to 9.0(2) only made it slightly better.
I get the feeling not many people have used this, or there wouldn't be so many issues...
Aaron

CCX 8.5 HA virtual+physical server over WAN

Hello for everyone.
There is such task to deploy CCX 8.5 HA cluster - make one node on virtual maschine and second node on the physical server over WAN (wow! :).
So there some question. Anybody already does this deployment model? Will there any trouble in admistration and working in such way?
Will this configuration supported by Cisco?
Tried to find it out on cisco.com and google.com, but no success. So i think, if Cisco supports deployment on hardware, and on virtual so there no problem. But by hardware+virtual, there's a question.
So, any help and thoughts on this will be kindly appreciated!

Yes it's supported as long as they are equivelent hardware. In other words you can't use the 300 OVA on one side and an MCS-7825 on the other. You would need to use a MCS-7845. Personally I wouldn't recommend this. At some point MCS hardware will fall off the compatibility matrix forcing the customer to move to UCS at that time. CCX is rather finicy when it comes to backup/restore of a node in the HA cluster. That's a task I would avoid if you can.

Time Capsule 2TB missing "Share Disks over WAN" option

I bought a time capsule about a month ago. Setup was no problem. Have a MobileMe account. Successfully setup remote access using MobileMe. Needed to select "Share Disks Over WAN" under the file sharing tab which is under the disk tab in setup in order to make it work.
Bought another time capsule yesterday and trying to setup in another location. This model does not have that "Share Disks Over WAN" option. Am I missing something? Did Apple make a change? I am not able to access this new drive remotely now, even with my MobileMe account active.

"As I write this, I am using my wife's iPad to browse files and folders on the Time Capsule disk. I can switch over to the disk attached to the AirPort Extreme with a single tap."
Awesome! Hopefully I will have the same luck as you!
"I said that Filebrowser will do a very nice job. One of my support policies is that I never offer advice or instructions unless I have done it myself. "
Well that's good to know going forward!
"Make sense?"
Yep - no confusion whatsoever.
Brian

Multicast server/client over wan

Ok, first of I am kinda new in programming network stuff.
Then I am gonna try to be clear in the things that I am trying to accomplish.
The environement.
I have a machine A that has 2 interfaces :
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:CE:96
inet addr:192.168.1.49 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2328871 errors:0 dropped:0 overruns:0 frame:0
TX packets:355492 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:178361234 (170.0 Mb) TX bytes:34186479 (32.6 Mb)
Interrupt:11
eth2 Link encap:Ethernet HWaddr 00:04:23:45:74:EC
inet addr:192.168.2.2 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:813915 errors:0 dropped:0 overruns:0 frame:0
TX packets:7538202 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:53318289 (50.8 Mb) TX bytes:1092719670 (1042.0 Mb)
Interrupt:15 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:56496 errors:0 dropped:0 overruns:0 frame:0
TX packets:56496 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:7952617 (7.5 Mb) TX bytes:7952617 (7.5 Mb)
This machine is connected thru a router
The routers connects to a WAN with MULTICAST enabled
then another router to which the second machine is connected
MACHINE B
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:0F:94
inet addr:192.168.1.58 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2322957 errors:0 dropped:0 overruns:0 frame:0
TX packets:363116 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:177550404 (169.3 Mb) TX bytes:33507499 (31.9 Mb)
Interrupt:30
eth2 Link encap:Ethernet HWaddr 00:04:23:45:78:90
inet addr:192.168.3.2 Bcast:192.168.3.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:160838 errors:0 dropped:0 overruns:0 frame:0
TX packets:6781 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:11450177 (10.9 Mb) TX bytes:746369 (728.8 Kb)
Interrupt:28 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:158 errors:0 dropped:0 overruns:0 frame:0
TX packets:158 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:23916 (23.3 Kb) TX bytes:23916 (23.3 Kb)
The two machine are on different networks.
My goal is to have Machine A send multicast data thru eth2 to be sent in the wan and to be received by Machine B on eth2 too.
Obviously the two machine are on separated networks.
I have tried everything I could but I cannot get machine B to pickup the messages sent by A. It worked fine when on the same LAN but not over WAN.
The multicast address that I use it 239.55.55.80 and the port 4445.
I think I have a problem to link the interface to my app ( I used setInterface and setNetworkinterface but nithing.) Also I cannot firgure out if the things that I am doing wrong are on the server or the client.
Here is the code for the sever and client.
SERVER
package com.cme.multicastijector.server;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.net.*;
import java.util.*;
public class MulticastOutputSocket {
private int m_multicastPort = 0;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_bufferSize = 0;
private byte[] m_outputBuffer = null;
private DatagramPacket m_packet = null;
public MulticastOutputSocket(int portNumber,String interfaceAddress,String multicastAddress,int bufferSize) throws Exception{
System.out.println("\nStarting multicast output socket");
m_multicastPort = portNumber;
m_interfaceAddress = InetAddress.getByName(interfaceAddress);
m_multicastAddress = InetAddress.getByName(multicastAddress);
m_bufferSize = bufferSize;
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.setLoopbackMode(false);
// m_multicastSocket.setTimeToLive(32);
Enumeration e = NetworkInterface.getNetworkInterfaces();
while (e.hasMoreElements()){
System.out.println(e.nextElement().toString());
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
System.out.println("MulticastSockect initialized.\n");
public void sendData(String data) throws Exception{
m_outputBuffer = new byte[m_bufferSize];
m_outputBuffer = data.getBytes();
//m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length);
m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length, m_inetSocketAddress);
m_multicastSocket.send(m_packet);
public void closeSocket() throws Exception {
//m_multicastSocket.leaveGroup(m_multicastAddress);
//m_multicastSocket.leaveGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.close();
CLIENT
package com.cme.multicastijector.client;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.io.*;
import java.net.*;
import java.util.*;
public class MulticastClient {
private Properties m_prop = null;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_multicastPort = 0;
private int m_bufferSize = 0;
private int m_previousSeq = 0;
private boolean m_isFirst = true;
private int m_actualseq = 0;
private int m_msgLost = 0;
private int m_messagesReceived = 0;
private Object m_seqLock = new Object();
private Object m_msgLock = new Object();
public MulticastClient(Properties properties) throws Exception{
m_prop = properties;
init();
new TpsCalculator();
receiveData();
private void init() throws Exception{
m_multicastPort = Integer.parseInt(m_prop.getProperty("MULTICAST_PORT"));
m_multicastAddress = InetAddress.getByName(m_prop.getProperty("MULTICAST_ADDRESS"));
m_interfaceAddress = InetAddress.getByName(m_prop.getProperty("INTERFACE_ADDRESS"));
m_bufferSize = Integer.parseInt(m_prop.getProperty("BUFFER_SIZE"));
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
// m_multicastSocket.setInterface(m_interfaceAddress);
// m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.joinGroup(m_multicastAddress);
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
private void receiveData() throws Exception{
try {
String received = null;
byte[] inputBuffer = null;
DatagramPacket packet = null;
while(true){
inputBuffer = new byte[m_bufferSize];
packet = new DatagramPacket(inputBuffer, inputBuffer.length, m_inetSocketAddress);
m_multicastSocket.receive(packet);
received = new String(packet.getData());
m_messagesReceived++;
synchronized(m_seqLock){
m_actualseq = getSequence(received);
checkSequence(m_actualseq);
catch (Exception ex) {
ex.printStackTrace();
m_multicastSocket.close();
private int getSequence(String data){
return Integer.parseInt(data.substring(0,15));
private void checkSequence(int actual){
if(m_isFirst){
m_isFirst = false;
m_previousSeq = actual;
else{
if ( (m_previousSeq + 1) != actual) {
synchronized(m_msgLock){
m_msgLost += (actual - m_previousSeq)-1;
m_previousSeq = actual;
private class TpsCalculator extends TimerTask{
private Timer aTimer;
private int previousSeq = 0;
private int tpsSeq = 0;
private int tpsRec = 0;
private boolean first = true;
private int msglost = 0;
private int previousMsgRec = 0;
private int actualMsgRec = 0;
public TpsCalculator(){
aTimer = new Timer();
aTimer.scheduleAtFixedRate(this,new Date(),1000);
System.out.println("#####################################################");
System.out.println("time,tps from sequences, actual tps,total msg received,msglost");
public void run(){
actualMsgRec = m_messagesReceived;
tpsRec = actualMsgRec - previousMsgRec;
previousMsgRec = actualMsgRec;
if(first){
synchronized(m_seqLock){
previousSeq = m_actualseq;
first = false;
else{
synchronized(m_msgLock){
msglost = m_msgLost;
m_msgLost = 0;
synchronized(m_seqLock){
tpsSeq = m_actualseq - previousSeq;
previousSeq = m_actualseq;
System.out.println(new Date()+","+tpsSeq + "," + tpsRec + "," + m_messagesReceived + "," + msglost);
Thanks for your help.
This is really important for the project I am working on.
Thanks again

never Mind I found the issue
The default value for TTL is 1.
I was going thru multiple routers so I incremented the value and it worked
thanks

Guest Wireless access over WAN

Hello Everyone,
We have around 45 remote location , all are connected with GRE Tunnels.
44 location have there own WLC which are managed by NCS and ISE in HQ , All 44 location have Wireless access for Guest and INternal Staff.
Now my Question is :
One location(45th) have only 10 users and I dont want to put a WLC there.
How can I provide the Guest wireless access on this location over WAN from HQ.
We can buy APs.
Please give me some ideas to solve this problem.
Here I am attaching my default plan :
Thanks

You just configure the access point in FlexConnect mode and then on the guest SSID you would central switch the WLAN. Central switching tunnels back traffic to the WLC and local switching drops traffic off at the local site. Here are some guides to look at.
https://supportforums.cisco.com/docs/DOC-24082
http://www.cisco.com/en/US/products/ps11635/products_tech_note09186a0080b7f141.shtml
Sent from Cisco Technical Support iPhone App

Simultaneous login problem

Hi
I am having simultaneous login problems. In the past I have been able to sign into my skype account on both my Mac Book Pro and my Windows 7 desktop PC. However since I had to change my password I can only login into one machine at a time now. Also when I change my password on the desktop PC I can only sign into that skype / computer. Whenever I type the same account name and same exact password on my Mac Book Pro, it says it doesn't recognize my sign-in details but I am 100% sure that I typed it in exactly the same way as I did on my desktop. Another is that when I reset my password on my Mac Book those details won't work on the Desktop PC and vice-versa.
I would like to know what is the problem in this situation, I am not sure if this is an application error or a networking error where the account details are not signing in from a different IP or MAC address.
Please and thank you!

"The load balancing was already functional:"
Do you have a description how to do that?
I Would like to know how.
"so ALL traffic, not going to the LAN network and so over this interface, went out on the DMZ interface, with source IP from LAN."
If you put the VPN servers behind 1-1 NAT instead they will use the firewall as GW and the VPN clients will get at your remote sites/LAN IF you add routing definitions in VPN config what networks are reachable through VPN.
Or you keep servers as they are but also add add more routing definitions in VPN AND static routes to each server with the firewall as gw to those remote networks. Default gw will still be through the DMZ IPs though.
The problem with more than one VPN client from behind same IP address is, with your current server settings, most likely because of the client side NAT router isn't coping with the task. Your public IP VPN server(s) should mean NAT VPN problem is at the other end (customer/client network router/firewall).
If two VPN clients behind same NAT router connected to different servers at your end, "12.34.56.80" and "12.34.56.81" (both are public IPs?) respectively I believe at least two should be able to connect.
3G/4G modems isn't an option?
Maybe try bringing your own tested working portable router (ethernet/wifi maybe includes a VPN client that connect to your servers) to the customer and put it temporarily on their LAN? There are these small new 3G/WiFi routers too. Depends on wether you need to be connected to customer LAN or not.
Try other VPN solution, SSL or OpenVPN?
Use both PPTP and L2TP simultaneously (PPTP could be troubelsome if GRE/TCP 1723 passthrough is disabled)?

Uccx cluster over wan. cad login problem

Similar Messages

Maybe you are looking for