Unable to ping ESXI host

I have an out of state Esxi 4.1 host that is working fine with 12 virtual servers on it. The problem is I cannot ping (IP or name) or connect to it using vSphere from my current location. The only machines which see the host are the VMs it is hosting. So to connect I have to remote desktop to one of the VMs and run vSphere from there. Any idea why I can't connect from other PCs on the network?

Welcome to the Community,
that's interesting. From what you say, the Management Network on the host seems to be working fine. Can you please provide some information about the host's virtual network configuration as well as the physical switch port(s) configuration?
What's the result of running "Test Management Network" from the host's DCUI? Maby restarting the Management Network will help!?
André

Similar Messages

  • ASA 5505: unable to ping external hosts

    Hi,
    I have a LAN behind ASA 5505, interface NAT/PAT is configured.
    External interface is configured for PPPoE.
    Everything works fine except I cannot ping from a LAN PC external hosts. I can however ping external hosts from ASA itself. ICMP is allowed:
    icmp permit any inside
    icmp permit any outside
    access-list outside_access_in extended permit icmp any any
    Protocol inspections and fixups are default.
    When I ping an external host 61.95.50.185 from the LAN host 10.2.32.68 I am getting the following in the log:
    302020 61.95.50.185 10.2.32.68 Built ICMP connection for faddr 61.95.50.185/0 gaddr 202.xx.yy.zz/1 laddr 10.2.32.68/512
    302020 61.95.50.185 202.xx.yy.zz Built ICMP connection for faddr 61.95.50.185/0 gaddr 202.xx.yy.zz/1 laddr 202.xx.yy.zz/1
    313004 Denied ICMP type=0, from laddr 61.95.50.185 on interface outside to 202.xx.yy.zz: no matching session
    313001 61.95.50.185 Denied ICMP type=0, code=0 from 61.95.50.185 on interface outside
    302021 61.95.50.185 202.xx.yy.zz Teardown ICMP connection for faddr 61.95.50.185/0 gaddr 202.xx.yy.zz/1 laddr 202.xx.yy.zz/1
    302021 61.95.50.185 10.2.32.68 Teardown ICMP connection for faddr 61.95.50.185/0 gaddr 202.xx.yy.zz/1 laddr 10.2.32.68/512
    Where 202.xx.yy.zz is IP of external interface of ASA.
    This is a very simple setup that runs on a number of othe PIXes/ASAs and pings to external IP normally work just fine. I can't understand why ping replies are getting dropped on the interface?
    Any help will be highly appreciated.
    Thank you.
    Alex

    Alex / Kerry, you have couple of options for handling icmp outbound, either acl or icmp inspection :
    access-list outside_access_in extended permit icmp any any echo-reply
    access-list outside_access_in extended permit icmp any any source-quench
    access-list outside_access_in extended permit icmp any any unreachable
    access-list outside_access_in extended permit icmp any any time-exceeded
    access-group outside_access_in in interface outside
    or icmp inspection instead of acl.
    policy-map global_policy
    class inspection_default
    inspect icmp
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml
    HTH
    Jorge

  • Unable to ping from mz to virtual interface of asa

    Dear All,
    one of my SNMP server 10.242.103.42 sits in MZ zone,and ACE 4710 is connected to core switch,coreswitch is connected to firewall asa.
    Now iam trying to ping from MZ zone SNMP server to loadbalancer ip 10.242.105.1,iam unable to ping my LB interface to discover SLB on my SNMP server.
    plese help me
    srinivas

    Is your device seeing the mac-address of the ASA in order to send the packets? What do the logs show on the firewall itself? Can you see the ARP entry on the ASA firewall for that host?
    Mike

  • Unable to PING VM Server after Install

    Hi Guys
    I am a typical WIndows guys, and new to Oracle /Linux etc.
    However I am trying to setup a VM server, and finally got my head around the setup part of it, i.e the pieces to make the puzzle and how they all fit.
    So I have just installed a fresh install of VM Server on raw iron ( blank server), and the installation has completed and said it was sucessful, however I set up my IP , DNS, host name etc manually, but after the installation I am unable to ping the VM Server, nor can I ping any pc in the network that its connected to.
    Does anyone have any suggestions? As I dont want to go ahead and try install a virtual Oracle Linux Enterprise edition on it, if I cant get the networking side of it to work yet.
    Anybody have any tips, suggestions? Learning I should have done before attempting this lol.
    Thanks

    That didnt work , any of those :(.
    I checked the anaconda log, and it said that in debugging it was ignoring the NIC's as it siad " unknown device driverless" so I have to assume it doesnt have the drivers for the network card, so have posted another post on how to install a kernal, so that I can build the drivers :S.

  • Unable to Ping AP

    Hello,
    I have a new setup I'm trying to build with a WLC2106 and 4 1142n's (currently just trying to get 1 working).  I have the WLC running 7.0.98.0.  I built a new VLAN on our core network (3560g) and have the ap-manager, management interfaces ip'ed in that vlan.  I also have the AP plugged into the PoE port on port 8 and it ip'ed in the same VLAN.  The AP associates to the WLC, i am able to configure it from the WLC, but i cannot ping it, from the WLC or from anywhere.  I cannot ping anything from console on the AP either.
    My assumption is once, i get ip connectivity established, the AP will be able to communicate to our network DHCP server and issue out IP's.  I just can't figure out what is wrong with the network setup.  I have the trunk configured properly on the core switch from the WLC, i can ping other hosts on the other vlans that are allowed.
    Interfaces on WLC:
    Interface Name                   Port Vlan Id  IP Address      Type    Ap Mgr Guest
    ap-manager                       1    5        10.108.5.3      Static  Yes    No  
    management                       1    5        10.108.5.2      Static  No     No  
    office-vlan-2                    1    2        10.108.111.96   Dynamic No     No  
    virtual                          N/A  N/A      1.1.1.1         Static  No     No
    AP Config:
    infraspawap2#show capwap ip config
    LWAPP Static IP Configuration
    IP Address         10.108.5.5
    IP netmask         255.255.255.240
    Default Gateway    10.108.5.1
    I've been staring at this for days and just can't figure it out (so it's probably just something simple i've missed).  Any help is greatly appreciated.
    Thanks,
    Ben

    So i may have solved this, or at least provided a work-around.  I made the new Vlan for MGMT and AP interfaces native on the switch and changed the config on the WLC to untagged.  I also disabled DHCP proxy.  This allowed clients to retrieve DHCP from our network server and get connected to the LAN, however i was still unable to ping the AP.
    I then moved everyhting into a different VLAN (already existing) and had the same results.  I then moved the AP off of the WLC and used a power brick to connect it directly to the backbone switch.  This rectified the issue.  I am now able to ping accross all vlans to/from the AP.  My only question really is why not from the switch on the WLC?  what was/ wasn't i doing that prevented this when directly connected to the WLC?

  • PIX 501 unable to ping vpnclient

    Hi,
    Here is the topology:
    vpnclient ------->Internet---->Broadband router (with port forwarding) -----> PIX-------->Internal network
    vpn client is able to establish VPN connection with PIX. VPN client can ping internal network machines (which i wasn't able to do until i used nat-treverse command). but PIX is unable to ping vpnclient's IP addresses or inside address of PIX.
    ++VPN Client getting this++
    Ethernet adapter Local Area Connection 2:
       Connection-specific DNS Suffix  . : abc.com
       Link-local IPv6 Address . . . . . : fe80::b940:3053:3f6f:a4c1%23
       IPv4 Address. . . . . . . . . . . : 10.10.10.10
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . :
    PIX> en
    Password: *****
    PIX# sh run
    : Saved
    PIX Version 6.3(5)
    interface ethernet0 100full
    interface ethernet1 100full
    nameif ethernet0 outside security0
    nameif ethernet1 inside security100
    enable password 2KFQnbNIdI.2KYOU encrypted
    passwd 9jNfZuG3TC5tCVH0 encrypted
    hostname PIX
    domain-name cisco
    fixup protocol dns maximum-length 512
    fixup protocol ftp 21
    fixup protocol h323 h225 1720
    fixup protocol h323 ras 1718-1719
    fixup protocol http 80
    fixup protocol rsh 514
    fixup protocol rtsp 554
    fixup protocol sip 5060
    fixup protocol sip udp 5060
    fixup protocol skinny 2000
    fixup protocol smtp 25
    fixup protocol sqlnet 1521
    fixup protocol tftp 69
    names
    access-list in2out permit ip 172.16.0.0 255.255.255.0 10.10.10.0 255.255.255.0
    pager lines 24
    logging on
    mtu outside 1500
    mtu inside 1500
    ip address outside dhcp setroute
    ip address inside 172.16.0.1 255.255.255.0
    ip audit info action alarm
    ip audit attack action alarm
    ip local pool clientpool 10.10.10.10-10.10.10.20 mask 255.255.255.0
    pdm location 172.16.0.26 255.255.255.255 inside
    pdm location 192.168.0.0 255.255.255.0 outside
    pdm location 172.16.0.27 255.255.255.255 inside
    pdm location 10.10.10.0 255.255.255.224 outside
    pdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (inside) 0 access-list in2out
    nat (inside) 1 0.0.0.0 0.0.0.0 0 0
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
    timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
    timeout sip-disconnect 0:02:00 sip-invite 0:03:00
    timeout uauth 0:05:00 absolute
    aaa-server TACACS+ protocol tacacs+
    aaa-server TACACS+ max-failed-attempts 3
    aaa-server TACACS+ deadtime 10
    aaa-server RADIUS protocol radius
    aaa-server RADIUS max-failed-attempts 3
    aaa-server RADIUS deadtime 10
    aaa-server LOCAL protocol local
    aaa authentication ssh console LOCAL
    http server enable
    http 172.16.0.26 255.255.255.255 inside
    http 172.16.0.27 255.255.255.255 inside
    http 172.16.0.0 255.255.255.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server community public
    no snmp-server enable traps
    tftp-server outside 192.168.0.6 configpix
    floodguard enable
    sysopt connection permit-ipsec
    crypto ipsec transform-set myset esp-aes-256 esp-sha-hmac
    crypto dynamic-map ipsec_map 1 set transform-set myset
    crypto map outside_map 10 ipsec-isakmp dynamic ipsec_map
    crypto map outside_map interface outside
    isakmp enable outside
    isakmp identity address
    isakmp nat-traversal 20
    isakmp log 25
    isakmp policy 1 authentication pre-share
    isakmp policy 1 encryption aes-256
    isakmp policy 1 hash sha
    isakmp policy 1 group 2
    isakmp policy 1 lifetime 86400
    vpngroup remoteClient address-pool clientpool
    vpngroup remoteClient dns-server 172.16.0.1
    vpngroup remoteClient default-domain abc.com
    vpngroup remoteClient split-tunnel in2out
    vpngroup remoteClient split-dns abc.com
    vpngroup remoteClient idle-time 1800
    vpngroup remoteClient password ********
    telnet 0.0.0.0 0.0.0.0 outside
    telnet 172.16.0.0 255.255.255.0 inside
    telnet timeout 15
    ssh 0.0.0.0 0.0.0.0 outside
    ssh 192.168.0.0 255.255.255.0 outside
    ssh timeout 60
    management-access outside
    console timeout 0
    dhcpd address 172.16.0.20-172.16.0.40 inside
    dhcpd dns 194.168.4.100 194.168.8.100
    dhcpd lease 3600
    dhcpd ping_timeout 750
    dhcpd enable inside
    username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15

    Hi all,
    Thanks all for the valueable reply's.
    last time i have done modification with following commands to access cisco pix 515e from telnet from outside interface:
    access-list outside_access_in permit icmp any any
    access-list outside_access_in permit ip any any
    access-list inside_access_out permit ip any any
    access-list inside_outbound_nat0_acl permit ip 192.168.1.0 255.255.255.0 192.168.168.0 255.255.255.0
    access-list inside_outbound_nat0_acl permit ip 192.168.1.0 255.255.255.0 192.168.80.0 255.255.255.0
    access-list outside_cryptomap_30 permit ip 192.168.1.0 255.255.255.0 192.168.80.0 255.255.255.0
    access-list 100 permit tcp any eq telnet host PIX_inside eq telnet
    access-list 100 permit tcp any eq telnet host pix_outside eq telnet
    access-list 100 permit tcp any eq telnet host 182.73.110.160 eq telnet
    after adding the above commands i am facing this, my internet link is up and working fine, but not able to get ping reply from internet isp or dns server ip, i.e- 202.56.230.5.

  • Unable to contact vmware host machine

    Good Day
    I am experiencing a problem where the MS Virtual Machine converter gets stuck on the Source page when you click next button.
    ( I am trying to convert a virtual VMware based server to hyper v.
    It comes up with the message "validating the credentials" for a few seconds then a error comes up "Unable to contact VMware host machine"
    I am running the app on the server 2012 R2 VMware host server. I can ping the VMware host. The Firewall is disabled. I have installed the requirements for the application. If I do it from another pc (win 8.1) I manage to connect to the VMware host..
    I also installed the message analyzer tool and monitored the NIC. The interesting thing is that I can see the ping packets etc but as soon as I try to use the migration tool there is not a peep on the wire. The fact is that the tool is not even attempting to
    contact the source host.
    Can someone please help? I need to run this from the server since I need vhdx suport.
    Thanks

    What version of MVMC are you running, I think 3.1 is the most recent?  Since you have all prereqs installed, then I would see if uninstalling and reinstalling MVMC helps.

  • ASA5520 AnyConnect SSL VPN Connected but unable to ping my inside LAN

    Hi there, please forgive if I have missed any forum protocols as this is my first post.
    I am trying to configure Anyconnect SSL VPN. I am able to connect to the VPN on a laptop, witch is able to download the anyconnect client from the ASA. I am unable to ping any of my IP's that are on the inside of my ASA. Before posting here I have spent many hours on forums and watching videos on anyconnect SSL VPN creation and I am following it to the T but still no ping. Any help would be very much appreciated.
    Inside              192.168.1.254/24
    Outside           dhcp
    VPN Pool        192.168.250.1-50/24
    Inside LAN     192.168.1.0/24
    : Saved
    ASA Version 8.4(4)1
    interface GigabitEthernet0/0
    nameif outside
    security-level 0
    ip address dhcp setroute
    interface GigabitEthernet0/1
    nameif inside
    security-level 99
    ip address 192.168.1.254 255.255.255.0
    interface GigabitEthernet0/2
    shutdown
    no nameif
    no security-level
    no ip address
    interface GigabitEthernet0/3
    shutdown
    no nameif
    no security-level
    no ip address
    interface Management0/0
    nameif management
    security-level 99
    ip address 192.168.100.1 255.255.255.0
    ftp mode passive
    dns server-group DefaultDNS
    domain-name dock.local
    same-security-traffic permit inter-interface
    object network inside-network-object
    subnet 192.168.1.0 255.255.255.0
    object network management-network-object
    subnet 192.168.100.0 255.255.255.0
    object network NETWORK_OBJ_192.168.250.0_25
    subnet 192.168.250.0 255.255.255.128
    object-group network AllInside-networks
    network-object object inside-network-object
    network-object object management-network-object
    access-list inside_access_in extended permit ip any any
    access-list outside_access_in extended permit icmp any any echo-reply
    access-list split_tunnel standard permit 192.168.1.0 255.255.255.0
    access-list split_tunnel standard permit 192.168.100.0 255.255.255.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu outside 1500
    mtu inside 1500
    mtu management 1500
    ip local pool vpn_pool 192.168.250.1-192.168.250.100 mask 255.255.255.0
    no failover
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-647.bin
    no asdm history enable
    arp timeout 14400
    nat (inside,outside) source dynamic AllInside-networks interface
    nat (inside,any) source static any any destination static NETWORK_OBJ_192.168.250.0_25 NETWORK_OBJ_192.168.250.0_25 no-proxy-arp route-lookup
    access-group outside_access_in in interface outside
    access-group inside_access_in in interface inside
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    user-identity default-domain LOCAL
    http server enable 4433
    http 192.168.100.0 255.255.255.0 management
    http 192.168.1.0 255.255.255.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
    telnet timeout 5
    ssh 192.168.1.0 255.255.255.0 inside
    ssh 192.168.100.0 255.255.255.0 management
    ssh timeout 5
    ssh key-exchange group dh-group1-sha1
    console timeout 0
    threat-detection basic-threat
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    ssl encryption rc4-sha1 aes128-sha1 aes256-sha1 3des-sha1
    webvpn
    enable outside
    anyconnect image disk0:/anyconnect-win-3.1.03103-k9.pkg 1
    anyconnect enable
    tunnel-group-list enable
    group-policy GroupPolicy_anyconnect internal
    group-policy GroupPolicy_anyconnect attributes
    wins-server none
    dns-server value 8.8.8.8
    vpn-tunnel-protocol ssl-client ssl-clientless
    split-tunnel-policy tunnelall
    split-tunnel-network-list value split_tunnel
    default-domain value dock.local
    username test password JAasdf434ey521ZCT encrypted privilege 15
    tunnel-group anyconnect type remote-access
    tunnel-group anyconnect general-attributes
    address-pool vpn_pool
    default-group-policy GroupPolicy_anyconnect
    tunnel-group anyconnect webvpn-attributes
    group-alias anyconnect enable
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum client auto
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect sip 
      inspect netbios
      inspect tftp
      inspect ip-options
    service-policy global_policy global
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http
    https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email
    [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:24bcba3c4124ab371297d52260135924
    : end :

    : Saved
    ASA Version 8.4(4)1
    interface GigabitEthernet0/0
    nameif outside
    security-level 0
    ip address dhcp setroute
    interface GigabitEthernet0/1
    nameif inside
    security-level 99
    ip address 192.168.1.254 255.255.255.0
    interface GigabitEthernet0/2
    shutdown
    no nameif
    no security-level
    no ip address
    interface GigabitEthernet0/3
    shutdown
    no nameif
    no security-level
    no ip address
    interface Management0/0
    nameif management
    security-level 99
    ip address 192.168.100.1 255.255.255.0
    ftp mode passive
    dns server-group DefaultDNS
    domain-name dock.local
    same-security-traffic permit inter-interface
    object network inside-network-object
    subnet 192.168.1.0 255.255.255.0
    object network management-network-object
    subnet 192.168.100.0 255.255.255.0
    object network NETWORK_OBJ_192.168.250.0_25
    subnet 192.168.250.0 255.255.255.0
    object-group network AllInside-networks
    network-object object inside-network-object
    network-object object management-network-object
    access-list inside_access_in extended permit ip any any
    access-list outside_access_in extended permit icmp any any echo-reply
    access-list split_tunnel standard permit 192.168.1.0 255.255.255.0
    access-list split_tunnel standard permit 192.168.100.0 255.255.255.0
    pager lines 24
    logging enable
    logging asdm informational
    mtu outside 1500
    mtu inside 1500
    mtu management 1500
    ip local pool Anyconnect-pool 192.168.250.1-192.168.250.100 mask 255.255.255.0
    no failover
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-647.bin
    no asdm history enable
    arp timeout 14400
    nat (inside,outside) source dynamic AllInside-networks interface
    nat (inside,outside) source static inside-network-object inside-network-object destination static NETWORK_OBJ_192.168.250.0_25 NETWORK_OBJ_192.168.250.0_25
    nat (inside,outside) source static management-network-object management-network-object destination static NETWORK_OBJ_192.168.250.0_25 NETWORK_OBJ_192.168.250.0_25
    access-group outside_access_in in interface outside
    access-group inside_access_in in interface inside
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    user-identity default-domain LOCAL
    http server enable
    http 192.168.100.2 255.255.255.255 management
    http 192.168.100.0 255.255.255.0 management
    http 192.168.1.0 255.255.255.0 inside
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
    telnet timeout 5
    ssh 192.168.1.0 255.255.255.0 inside
    ssh 192.168.100.0 255.255.255.0 management
    ssh timeout 5
    ssh key-exchange group dh-group1-sha1
    console timeout 0
    management-access inside
    threat-detection basic-threat
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    ssl encryption rc4-sha1 aes128-sha1 aes256-sha1 3des-sha1
    webvpn
    enable outside
    anyconnect image disk0:/anyconnect-win-3.1.03103-k9.pkg 1
    anyconnect enable
    tunnel-group-list enable
    group-policy GroupPolicy_Anyconnect_VPN internal
    group-policy GroupPolicy_Anyconnect_VPN attributes
    wins-server none
    dns-server value 8.8.8.8
    vpn-tunnel-protocol ssl-client
    split-tunnel-policy tunnelall
    split-tunnel-network-list value split_tunnel
    default-domain value dock.local
    username sander password f/J.5nLef/EqyPfy encrypted
    username aveha password JA8X3IiqPvFFsZCT encrypted privilege 15
    tunnel-group Anyconnect_VPN type remote-access
    tunnel-group Anyconnect_VPN general-attributes
    address-pool Anyconnect-pool
    default-group-policy GroupPolicy_Anyconnect_VPN
    tunnel-group Anyconnect_VPN webvpn-attributes
    group-alias Anyconnect_VPN enable
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum client auto
      message-length maximum 512
    policy-map global_policy
    class inspection_default
      inspect dns preset_dns_map
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect sip 
      inspect netbios
      inspect tftp
      inspect ip-options
    service-policy global_policy global
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http
    https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email
    [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:4636fa566ffc11b0f7858b760d974dee
    : end:

  • Unable to remove a host from VMM - Error (2606) Unable to perform the job because one or more of the selected objects are locked by another job.

    I am unable to remove a host from my Virtual Machine Manager 2012 R2. I receive the following error:
    Error (2606)
    Unable to perform the job because one or more of the selected objects are locked by another job.
    Recommended Action
    To find out which job is locking the object, in the Jobs view, group by Status, and find the running or canceling job for the object. When the job is complete, try again.
    I have already tried running the following command in SQL Server Management Studio
    SELECT * FROM [VirtualManagerDB].[dbo].[tbl_VMM_Lock] where TaskID='Task_GUID'
    I received this error back:
    Msg 8169, Level 16, State 2, Line 1
    Conversion failed when converting from a character string to uniqueidentifier.
    I have also tried rebooting both the host and the Virtual Machine Manager Server.  After rebooting them both, I still receive the same error when trying to remove the host.
    Here are my server details
    VMM Server OS = Windows 2012 Standard
    VMM Version = 2012 R2 3.2.7510.0
    Host OS = Windows 2012 R2 Datacenter
    Host Agent Version = 3.2.75.10.0
    SQL Server OS = Windows 2012 Datacenter
    SQL Version = 2012 SP 1 (11.0.3000.0)

    Hi there,
    How many hosts are you managing with your VMM server?
    The locking job might be the background host refresher job. Did you see any jobs in the jobs view, when the host removal job failed?
    If there is no active jobs in the jobs view when this host removal job fails, can you please turn on the VMM tracing, retry the host removal, and paste back the traces for the failed job (search for exception and paste the whole stack)?
    Thanks!
    Cheng

  • CC&B 2.3.1 startup showing "Unable to start remote host JVM" error

    When starting up a newly installed CC&B server (Linux Redhat 5.0, x86_64), using weblogic 10.3.5, and java 1.6.0_35, I am incurring this error. Log file snippet:
    specified via property spl.runtime.cobol.remote.jvmMaxLifetimeSecs, defaulting to 0
    - 2012-09-13 17:49:12,837 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] INFO (shared.environ.ApplicationProperties) Child JVM maximum COBOL requests is not spe
    cified via property spl.runtime.cobol.remote.jvmMaxRequests, defaulting to 0
    - 2012-09-13 17:49:12,838 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] INFO (cobol.host.CobolHostStartup) Using active JVM count of 2 for remote cobol executi
    on.
    - 2012-09-13 17:49:12,880 [pool-2-thread-1] ERROR (cobol.host.RemoteJVMFactoryImpl) Unable to start remote host JVM.
    java.io.IOException: Cannot run program "/srv/spl/ccb/CCBDEMO/bin/splcobjrun.sh": java.io.IOException: error=2, No such file or directory
    at java.lang.ProcessBuilder.start(ProcessBuilder.java:460)
    at java.lang.Runtime.exec(Runtime.java:593)
    at java.lang.Runtime.exec(Runtime.java:431)
    at java.lang.Runtime.exec(Runtime.java:369)
    at com.splwg.base.support.cobol.host.RemoteJVMFactoryImpl.addConnection(RemoteJVMFactoryImpl.java:87)
    at com.splwg.base.support.cobol.host.RotatingCommandRunnerProvider$ConnectionMonitor.addNecessaryConnections(RotatingCommandRunnerProvider.java:403)
    at com.splwg.base.support.cobol.host.RotatingCommandRunnerProvider$ConnectionMonitor.doHousekeeping(RotatingCommandRunnerProvider.java:330)
    at com.splwg.base.support.cobol.host.RotatingCommandRunnerProvider$ConnectionMonitor.run(RotatingCommandRunnerProvider.java:323)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    at java.util.concurrent.FutureTask$Sync.innerRunAndReset(FutureTask.java:317)
    at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:150)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$101(ScheduledThreadPoolExecutor.java:98)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.runPeriodic(ScheduledThreadPoolExecutor.java:180)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:204)
    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
    at java.lang.Thread.run(Thread.java:662)
    Caused by: java.io.IOException: java.io.IOException: error=2, No such file or directory
    Does anyone have any ideas?

    hi
    I face a similar issue as u faced . Please let me know the solution .
    Error in Log file : When trying to switch language.
    ZOHAIB - 169696-23-1 2012-01-09 15:23:22,624 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] ERROR (web.dataservlet.PageChange) Unexpected error.
    com.splwg.base.support.cobol.host.InputClosedException:
    The following stacked messages were reported as the LoggedException was rethrown:
    com.splwg.base.api.service.ServiceDispatcher$5.execute(ServiceDispatcher.java:248): Caught exception from SessionExecutable.execute()
    com.splwg.base.support.pagemaintenance.AbstractPageMaintenance.changeItem(AbstractPageMaintenance.java:134): Rollback: Change failed
    com.splwg.base.support.cobol.host.CommandRunnerHolder.invoke(CommandRunnerHolder.java:31): An exception occurred calling cobol program CIPZDATA
    com.splwg.base.support.cobol.host.OptimizedRemoteExecuterStub.sendRequestGetResponse(OptimizedRemoteExecuterStub.java:83): An exception has occurred calling the remote JVM
    com.splwg.base.support.cobol.host.OptimizedRemoteExecuterStub.sendRequestGetResponse(OptimizedRemoteExecuterStub.java:83): An exception occurred invoking remote command.

  • No ping between host in the same subnet

    Hello,
    I have a question about the ASA and the ARP traffic in IOS 9.1.2 for ASA 5585-X and multicontext. I have discovered a curious behaviour about the traffic ARP in the my CLUSTER of ASA's. When I try to send a ping between host in the  same subnet and these host have as Gateway the interface of the ASA (ASA is his router) don't works, if I mark the check to enable the comunications between host connected to the same interface this cotinues without work. The only way to get my aim (ping between host), I need to implement and Access Rule allowing the traffic IP between my origin network and destination the same network.
    I think that this is some feature of ASA that filter the ARP Request but I don't understand!!! Can I help me, please?
    Thanks.

    Hi,
    Your firewall should not see any traffic between the hosts on the same subnet.
    If it is seeing traffic between the hosts then its likely that Proxy ARP on the ASA is the problem. Proxy ARP is enabled on the ASA by default on all interfaces. This essentially means that when the host connecting to the other host on the same subnet sends an ARP request the ASA might reply to that ARP request instead of the actual destination host. This is why traffic might get forwarded to the ASA instead of the actual host.
    If you want to disable the Proxy ARP on some ASA interface then you can use
    sysopt norpoxyarp
    Where you replace the with the actual name you have given to the interface on the ASA. This disables the Proxy ARP
    - Jouni

  • Unable to ping IP address from SG300 -10p switch

     i have two core switches, we have configured the vlan 70 in both core switch
    sh run int vlan 70 --ip address: 182.94.177.34/28
    configured the HSRP in both routers.
    we have configured port in vlan 77 in access switch 4507R-E , we are able to ping the ip address.
    again we have installed on Cisco SG300 10p switch case cading to Cisco 4507R-E access switch.
    we have give below commands
    switch manangement IP :
    switch38cbaf(config)int vlan1
    switch38cbaf(config-if)#ip address 124.4.67.47 255.255.255.0
    switch38cbaf(config)#vlan database
    switch38cbaf(config-if)vlan 70
    switch38cbaf(config)#int gigabitethernet1
    switch38cbaf(config-if)#switchport mode access
    switch38cbaf(config-if)#switch access vlan 77
    Trunk Configuration
    switch38cbaf(config)#int gigabitEthernet9
    switch38cbaf(config-if)#description << Trunk | connected to access switch 4507R-E | Fa4/1 >>
    switch38cbaf(config-if)#swtichport mode trunk
    switch38cbaf(config-if)#switchport trunk allowed vlan 77
    problem:
    i am assigned the ip address 182.94.177.44 to  our desktop and connected to port Gi1
    I am able to ping 182.94.177.33, 34 and 35 Ip Address but unable to ping 182.94.177.44

    Some things to check/verify -
    a) is there a typo in your configuration above ie. you have created vlan 70 according to your configuration but the actual vlan you are using is vlan 77
    b) does the trunk link between the access 4500 and the core switch allow vlan 77
    c) try pinging from the client and not to it as there may be a firewall on the PC.
    Jon

  • Nexus 7010 port-channel to ESXi host running on Dell 910 and 810

    Was wondering has anyone had any experience with configuring a port-channel going back to ESXi host. My basic config is below. My issue is with what to put in the spanning-tree port type. Do I use normal, edge, network, or edge trunk?? Yes I have read most of the documentation out there but am just a lil confused. I just wanna be right.
    Also if anyone has any suggestions for the Vswitch config as well that would be much appreciated.
    int PO 201
    desc 01_6-1
    switchport mode trunk
      switchport access vlan 99
      switchport trunk native vlan 777
      switchport trunk allowed vlan 220,300,310,320-321,350,390-391
      switchport trunk allowed vlan add 420,777
      spanning-tree port type normal (what should go here)
      speed auto
      medium p2p
      no shutdown
    int e8/11
    desc 01_6-1
    channel-group 201 force
    int e10/11
    desc 01_6-1
    channel-group 201 force
    Thanks Guys

    Short answer: You could use spanning tree port type edge (trunk; if it's going to be a trunk). The vswitch isn't really a switch, it doesn't participate in spanning tree, so it's fine to make it an edge port.
    In my experience, many VMware guys don't like port channels as much as the other more host-centric NIC teaming methods. I think this has to do with ESX having a less than stellar implementation of etherchannel/LACP early on.

  • Remove VSA 5.1 but keep ESXi host network configurations

    Hello,
    I ran into problems with a 2-node vSphere 5.1 VSA Cluster not coming online after adding more hard disk and RAM to the physical ESXi hosts in the cluster. After talking with VMware Support for over 2 hours, we exported all of the virtual machine data and powered on the VMs running on just local storage on the ESXi hosts. Now I need to remove the broken VSA Cluster and deploy a new VSA Cluster without interrupting the production VMs now running on local storage.
    I've looked at the cleanup.bat file, but am concerned about it resetting the network configurations on each of my hosts back to "greenfield" configurations at which time the VMs would all lose network connectivity.
    Can the VSA Cluster be manually removed without causing an outage on the VMs? If so, where can I find those procedures?
    Thanks!

    Hi
    Google for the following Subject "[Internal] Manual permanent destructive removal of a VSA cluster (2086522)"
    Following this Article I removed an VSA-Cluster and did a brownfield Installation with Networksettings all be there.
    Ingo

  • Unable to Ping IP when using route redistribution

    Hi Everyone,
    I have below setup
    R1 is running EIGRP and connected to R2 via EIGRP
    R2 is Running OSPF and connected to R3 via OSPF.
    R2 is doing the redistribution of eigrp to ospf and vice versa.
    R1 config
    interface FastEthernet1/0/1
    ip address 10.1.12.1 255.255.255.0
    R1# sh ip  eigrp nei
    EIGRP-IPv4 Neighbors for AS(100)
    H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                                (sec)         (ms)       Cnt Num
    0   10.1.12.2               Fa1/0/1           13 01:47:54  652  3912  0  14
    R2 config
    interface FastEthernet0/16
    ip address 10.1.12.2 255.255.255.0
    sh ip eigrp nei
    EIGRP-IPv4:(100) neighbors for process 100
    H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                                (sec)         (ms)       Cnt Num
    0   10.1.12.1               Fa0/16            12 01:49:44    1   200  0  36
    interface FastEthernet0/19
      ip address 10.1.23.2 255.255.255.0
    sh ip ospf 10  neighbor
    Neighbor ID     Pri   State           Dead Time   Address         Interface
    10.1.23.3         1   FULL/DR         00:00:38    10.1.23.3       FastEthernet0/19
    Redistribution config on R2
    router ospf 10
    router-id 10.1.23.2
    log-adjacency-changes
    redistribute eigrp 100 subnets
    network 10.1.23.0 0.0.0.255 area 10
    distribute-list 1 out
    router eigrp 100
    redistribute ospf 10 metric 100 100 100 100 100
    no auto-summary
    network 10.1.12.0 0.0.0.255
    R3 config
    interface FastEthernet0/16
      ip address 10.1.23.3 255.255.255.0
    Neighbor ID     Pri   State           Dead Time   Address         Interface
    10.1.23.2         1   FULL/BDR        00:00:36    10.1.23.2       FastEthernet0/16
    R1 Routing Table shows routes learned via ospf network of R1.
    R1#sh ip route eigrp 100
         10.0.0.0/8 is variably subnetted, 15 subnets, 2 masks
    D EX    10.1.10.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.11.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.8.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.9.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.13.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.7.1/32 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    D EX    10.1.23.0/24 [170/25628160] via 10.1.12.2, 01:17:03, FastEthernet1/0/1
    i am able to ping the IP of OSPF interface of R2 but not of R3 as shown below
    R1#                          ping 10.1.23.2
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 10.1.23.2, timeout is 2 seconds:
    Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
    R1#                          ping 10.1.23.3
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 10.1.23.3, timeout is 2 seconds:
    Success rate is 0 percent (0/5)
    R1#
    Need to know even the route is in routing table why i am umable to ping the IP 10.0.23.3?
    Also unable to ping the loopback IP of R3  below
    R1#                          ping 10.1.10.1
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 10.1.10.1, timeout is 2 seconds:
    Success rate is 0 percent (0/5)
    Regards
    Mahesh

    Hi Alain,
    Yes R3 was getting the filtered EIGRP routes from R1 via R2.
    i removed the distribute list on R2 and ping worked fine now.
    I understood now why ping was not working earlier as R1 int IP 10.1.12.1 was dropped by the distribute list.
    Now i added this to ACL 1 on R2 which is used by distribute list on R2 and ping works fine now while using distribute list on R2.
    Best regards
    Mahesh

Maybe you are looking for