Using port 22 behind a wrt54g

I have a wrt54g and despite turning off the firewall and setting port triggering and using the dmz I have been unable to use sftp (port 22) behind the router. I can access it fine if I hook direct to my modem. Any help would be MOST appreciated.
Solved!
Go to Solution.

Who is your ISP...? If it is DSL connection and its giving the ip in the range of your router i.e. 192.168.1.x,then convert the modem into the bridge mode and then try.
Have you tried upgrading your router..?..if not then try to upgrade the firmware.Firstly you need to download the firmware.
Go to website linksysbycisco.com/downloads.........insert model no of your router in serach tab......select proper version of your router........download the firmware file......save that file on desktop
Follow these steps to upgrade the firmware on the device : -
Open an Internet Explorer browser page on a computer hard wired to the router...
In the address bar type - 192.168.1.1...Leave the Username blank & in Password use admin in lower case...
Click on the 'Administration' tab- Then click on the 'Firmware Upgrade' sub tab- Here click on 'Browse' and browse the .bin firmware file and click on "Upgrade"...
Wait for few seconds until it shows that "Upgrade is successful" After the firmware upgrade, click on "Reboot" and you will be returned back to the same page OR it will say "Page cannot be displayed".
Now reset your router :
Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

Similar Messages

Mutiple servers using port 443

Hi,
I am looking to set up several websites that utilise port 443 for SSL
behind
my firewall.
I understand that the reverse proxy in BM will only forward from port
443 to
port 443.
As I only have one public IP address I was looking to use ports such
as
51443, 52443 and redirect to port 443 on the various internal servers.
Is this possible using the generic TCP proxy or is there another way
of
doing this I am using BM 3.6
All suggestions gratefully rec'd
David

presumably if that failed I could use a hardware firewall such as a
cisco
PIX to do the job.
set up some sort of DMZ and put the servers in there.
"Craig Johnson" <[email protected]> wrote in message
news:[email protected]..
> In article <skPnb.461$[email protected]>, David
> Quickfall wrote:
> > Is this possible using the generic TCP proxy or is there another
way of
> > doing this I am using BM 3.6
> >
> Generic proxy will work fine, (and in fact it probably works better
than
> using reverse proxy for 443). Set up one generic proxy for each
port.
>
> I don't know if you can successfully use the port translation
ability of
> generic proxy here. (Proxy port 444 to 443). I don't think that
works
> for SSL.
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>

Port forwarding / PPPoE setup / WRT54GS as access point

Hi,
i have 3 questions as u can understand from the subject
First's lets make a rough sketch of the net topology
Internet -------- DSL Modem ------- WRT54GS >>>> 2 wireless laptops
                                                               |
                                                               |
                                                               |
                                                    Wired Desktop PC
My DLS Modem is a Siemens Speedstream4200 connected to WRT54GS using an Ethernet cable. WRT54GS is v7.0 using firmaware v7.50.0. The 2 laptops run Vista Home Premium and my Wired Desktop Windows XP Pro.
So, now to the questions:
A. I tried using PPPoE in the Internet connection box of the WRT54GS, i supplied the username and pasword of my ISP but i couldn't establish an internet conection. Of course i didn't turn off the modem, router and pc as pointed out in topic with AnwerId = 2210 which i found today, will do that tonight, so hopefully there will not be a problem. I just switched from DHCP to PPPoE.... so, there might not be a prob after all... (is turning on and off the hardware that substancial ? )
B. I am currently using DHCP as the preferred Internet connetion type. I tried to forward a port to use with uTorrent. I gave my desktop pc a static IP (192.168.1.199), forwarded the port to the corresponding area of the router's page (port 59876, both protocols, enable) and unchecked the Block anonymous requests. Had no luck . Thing is that i am not sure about the TCP/IP settings i have used...
Static IP :               192.168.1.199
Subnet   :              255.255.255.255 (default value)
Default Gateway : 192.168.1.1 (the router's IP)
Preffered DNS    :  62.178.90.17
Secondary DNS :   62.178.90.18
The DNS's are the ones that my ISP gave me. Are these the ones that i am supposed to use here or should i use my routers IP as a DSN? (my DSL modem is accessed in the network at http://192.168.254.254)
C. I have also a second WRT (currently not connected) and i want to use it as an access point (extending the range of my network in a building)
I am thinking of something like the following
Internet -------- DSL Modem ------- WRT54GS >>>> 1 wireless laptops (floor 2)
                                                               |
                                                               |   (this is an ethernet cable)
                                                               |
              (this is an access point)   WRT54GS >>>> 1 wireless laptop (floor 0)
                                                               |
                                                               |
                                                    Wired Desktop PC
What do i have to do ? connect the 2 WRT54GS, make sure that both WRT54GS have the same SSID and use different channels? What about port forwarding ? i guess i will have to forward the IP of the access point to the router and the IP of my PC to the access point ? ? ?
Well, thx at least for your time to read my email
theodore

A. If you cannot set PPPoE on the WRT although it is supposed to be required for your DSL connection then probably the SpeedStream is operating as router as well. That's why you can use internet connection type DHCP. You should post the full information on the Status tab of the router. It will show how you are connected to the SpeedStream and whether it is a router or not. Otherwise you could also do this test. If both IP addresses are not identical then you have a router/modem. You should consider putting the SpeedStream into "bridge" mode. In bridge mode it operates like any normal modem. Then you should be able to configure the PPPoE connection on the WRT.
B. Obviously, if your modem is also operating as gateway router port forwardings won't work unless you configure port forwardings on the modem/router as well. The modem/router is the device with the public IP address. You have to forward ports from the Speedstream to the WRT WAN IP and on the WRT to the computer in question. You should assign a static IP address in the internet connection settings of the WRT (for similar reasons like for the computer). As this is complicated this would be another good reason to put the modem into bridge mode. Then the WRT is connected to the internet and you only have to configured port forwardings on the WRT.
C. See here. For a roaming network wireless settings on both WRTs must be identical except for the channel numbers. If you set up the second router like suggested there is no port forwarding on the second WRT.
Message Edited by gv on 10-24-2007 05:01 PM

How do I use Port Mapping?

b How do I use Port Mapping?
(This document will assume that you are using and ABS/AEBS/AX as an internet router and have DHCP & NAT turned on.)
Sometime you may want to offer access to a computer on your AirPort network to users on the internet, whether it be a web site, or for file sharing, or just remote access for yourself when traveling. If any of these sound like something you want to do, then you need to understand how Port Mapping works.
b AirPort as Firewall
Most of the time your AirPort base station will not let any traffic into your network which did not originate from your network. It will let everything out and replies to your traffic back in, but it will not let sessions initiated on the internet side of the base station in to your network. This is what is referred to as the "NAT firewall" capability of the base station and it provides effective protection for your network from the internet. What Port Mapping does is poke a hole in this wall to allow certain type(s) of traffic into the network and direct this traffic to a specific computer on the network. In the firewall world this is commonly referred to as an "inbound proxy" or "inbound translation" rule or "PAT" (Port Address Translation) in the router world.
b The Need for Manual Addressing
Since a Port Mapping entry in the base station configuration requires an inside private IP address to be specified, the computer to which to mapping entry applies should always have the IP address specified in the mapping entry. Thus, DHCP should not be used for a computer offering services on the internet as the Port Mapping entry will no longer work if the target computer's IP address changes. In general, an Apple base station's DHCP server will try to assign IP addresses in the 10.0.1.2 to 10.0.1.200 range. IP addresses above 10.0.1.200 can be Manually assigned to computers and other devices on the network up to 10.0.1.254. 10.0.1.255 is reserved (it is the broadcast address for the 10.0.1 subnet). To Manually set up the TCP/IP information for a Macintosh running Mac OS X, go to System Preferences -> Network and "Show" the appropriate interface (Ethernet or AirPort) and click on the TCP/IP tab. Select "Configure Manually" and enter the following information:
IP address : 10.0.1.201 (or whatever address you decide to use)
Subnet mask : 255.255.255.0
Router IP : 10.0.1.1 (the AirPort base station LAN IP)
DNS server : 10.0.1.1, or whatever DNS server IP your ISP uses
After making these changes verify that your computer can still access the internet and local resources on the LAN before continuing.
b Port Mapping a service
In our example we will be hosting a web site on a computer which we have given an IP address of 10.0.1.201. Basic web sites are accessed using the HyperText Transport Protocol (HTTP) and this protocol typically uses port 80 to communicate. In order for others to see the web site, we must configure a Port Mapping entry in the base station configuration to not only allow the web browsers in, but to tell the base station what IP address the web server is using. The Port Mapping entry has three parts: Public Port, Private IP, and Private Port. In this case you would use the following values:
Public Port : 80
Private IP : 10.0.1.201 (this is the computer hosting the web site)
Private Port : 80
In order to access the web site from the internet, users must reference the base station's WAN port public IP (determined by looking at the base station configuration summary page in the AirPort Admin Utility). Since this address may change over time, you might want to use a Dynamic DNS service to simplify connecting for your users.
Sometimes the port you wish to use may be blocked by the ISP. In this case, use a different non-standard Public Port number for the service, but keep the Private Port standard. In the above example, if the ISP was blocking port 80, you could potentially use 8080 instead, so:
Public Port :

Public Port : 8080
Private IP : 10.0.1.201
Private Port : 80
Your users would then have to enter "http://<publicIP>:8080/" (where <publicIP> is the public IP address of the AirPort base station) to access the web site.
b Internal Access
It should be noted that when accessing these services from within the network you cannot reference the Public IP/Public Port, but rather you must use the Private IP/Private Port. Thus, "http://10.0.1.201:80/" in the above example.
b Limits and Options
There is a maximum of 20 Port Mapping entries that can be made in an Apple base station configuration. If you use an AirPort Extreme or AirPort Express base station there is an option which can be helpful in the case where you need many ports opened to a single computer. This is the "Default Host" option. When using this it is not necessary to use Port Mapping at all as all ports will be opened to the specified "Default Host". This is found in "Base Station Options". The default IP address for the "Default Host" is 10.0.1.253. You may change this IP address. The target computer must be Manually configured as specified above with the same IP address. Since all ports are now open to this computer, you should enable and configure the Mac OS X firewall on the default host computer to protect it from intruders.
b Useful Related Links
<a href="http://docs.info.apple.com/article.html?artnum=52002>"Designing AirPort Extreme Networks: Manuals</a>
"Well Known" TCP and UDP Ports Used By Apple Software Products
IANA Port Number Assignments

Using one public ip for ssh`ing to different internal servers using port-redirections

Hi, we are having a requirement to use the same public IP to ssh into different internal servers using port re-direction. So lets say from outside, if a user does ssh @ root 4.4.4.4 2222, it should go to a sshsrv1 and then ssh @ root 4.4.4.4 2223 to sshsrv2
My config is like this:-
object network sshsrv1
host 10.110.100.10
nat (inside,Outside) static 4.4.4.4 service tcp 22 2222
And then i allowed the object "sshsrv1" in my inbound acl from outside.
It dosen`t seem to work. Is this doeable?
Any suggestions??

Hi,
Would need to see your NAT configurations.
There is a possibility that you have a NAT configuration that might be preventing this from working. Then again you are using an extra public IP address for this so it seems strange.
Could you try the "packet-tracer" command
packet-tracer input outside tcp 12345 2222
This should tell us if there is some problem in the ASA configurations.
- Jouni

Tor resolves ip address using port 80 [SOLVED]

Hey everyone,
I'm trying to provide a service to fellow internet users that don't like their internet traffic to be snooped on. To explain my situation I'll tell something about my setup.
I use a router to access the internet. I let a router set up a vpn connection to my vpn provider. Then I tell it, using iptables, to redirect all http and https traffic through the VPN tunnel and let all other traffic go over the standard WAN. Not entirely true, I also redirect all udp and icmp traffic through the vpn tunnel.
I have a server that I want to act as the TOR relay. I want it to use the WAN acces and not go over the VPN. This makes sure I don't burden my vpn provider with a bunch of traffic that can just use my WAN acces.
When setting up the TOR relay I use port 4436 as the relay port and port 9030 as the Directory port. My router directs all this traffic over the WAN. I also port forward these ports in the router towards the server.
The TOR relay seems to work but not entirely. I have the following message log: (I have replaced the ip addresses that belong to my WAN and VPN tunnel with "<wan-ip>" and "<vpn-ip>" to make it clearer. )
sep 04 17:29:48.164 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 17:35:08.532 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 154.35.32.5).
sep 04 17:35:09.883 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 17:55:08.476 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 18:15:08.476 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 18:26:44.664 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 18:26:45.117 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 194.109.206.212).
sep 04 18:26:49.342 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 76.73.17.194).
sep 04 18:26:58.255 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 18:33:01.221 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 18:36:52.096 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 212.112.245.170).
sep 04 18:37:10.626 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 18:56:51.965 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 19:16:51.967 [Warning] Your server (<vpn-ip>:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.
sep 04 19:27:44.011 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 19:27:44.092 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 171.25.193.9).
sep 04 19:27:44.095 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 128.31.0.34).
sep 04 19:27:44.098 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 194.109.206.212).
sep 04 19:27:50.211 [Notice] Our IP Address has changed from <vpn-ip> to <wan-ip>; rebuilding descriptor (source: 76.73.17.194).
sep 04 19:27:55.398 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.
sep 04 19:28:08.914 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
sep 04 19:29:45.764 [Warning] We just marked ourself as down. Are your external addresses reachable?
sep 04 19:37:51.966 [Notice] Our IP Address has changed from <wan-ip> to <vpn-ip>; rebuilding descriptor (source: 212.112.245.170).
sep 04 19:37:55.358 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
What I think will fix the problem is that TOR should not resolve my ip address using http or https since that will provide the wrong ip address. When trying to access that ip address at another port (in this case 9030) will obviously not work. However there is no setting to do that. Is there any way to archieve this?
Please ask if anything is unclear.
Regards,
Berend
--edit--
I was able to set the Address field in the torrc file. This means I can hardcode the ipaddress I want it to use (WAN). However that address can change every 6 months or so. If someone has a better solution that would be very welcome.
Last edited by Berend (2013-09-05 00:47:25)

Berend wrote:@progandy
I don't have any experience with that.
I guess I can tag them with a TOS so my router knows what to do with it. But how would I give that tag?
Select the packtes with owner and then depending on what your router supports you can set either DSCP or TOS. dscp is the current standard, tos is deprecated.

SAN Switch 9148 UPG procedure when using Port Channel

Hi,
I am kind of new to the UPG procedure of Cisco Switch, and the customer i am working with is using Port Channel.
Do i have to shutdown the port channel before executing the switch UPG or if everything can stay up? Will i lose connection when the UPG will proceed ?
If anyone has some documentation that describe the process, it would be much appreciated.
Thank you
Christian

Hi,
I am kind of new to the UPG procedure of Cisco Switch, and the customer i am working with is using Port Channel.
Do i have to shutdown the port channel before executing the switch UPG or if everything can stay up? Will i lose connection when the UPG will proceed ?
If anyone has some documentation that describe the process, it would be much appreciated.
Thank you
Christian

Design help related to ACE to Switch connectivity using Port-Channel

Hi,
I have a Cisco ACE 4710 configured in One-Arm mode. This ACE is getting connected with 2 3750 switches. These 2 3750 switches connected in trunk mode.
ACE is connected to these 3750 switches using Port-channel.
ACE Config:
================================
interface gigabitEthernet 1/1
description One-arm mode port to DMZ Switch 1 port 20
channel-group 1
no shutdown
interface gigabitEthernet 1/2
description One-arm mode port to DMZ Switch 2 port 20
channel-group 1
no shutdown
interface port-channel 1
switchport access vlan 51
port-channel load-balance src-dst-ip
no shutdown
interface vlan 51
ip address 10.40.56.131 255.255.255.128
access-group input everyone
access-group output everyone
nat-pool 1 10.40.56.215 10.40.56.215 netmask 255.255.255.255 pat
service-policy input LB
service-policy input remote-access
no shutdown
===========================================================
The problem is that 3750 switches are not stacked.
Application is working fine. But i am getting a lot of MAC flapping messages..
kindly suggest whether this design is OK or something needs to be done to rectify it...
Attached a small diagram..

Hello acharyr123,
I don't think this design is ok, and it would cause mac flapping since the two indepedendent 3750 switches will learn the ace mac addresses off of two different interfaces. The 3750s would have to be stacked so that they would act as one switch then this should work correctly.
Thanks
Joel Lamousnery
TAC CSE

Do I have to use port forwarding in router to log my essential server 2012 from outside

hi,
1--do I have to use port forwarding if I have only essential server 2012 in my home?
2- what is exactly the benefit of port forwarding, besides the converting static IP adres to internal IP adres for clients?
thanks
johan
h.david

Yes.
It allows certain ports to be accessed externally through your firewall, whilst blocking other ports.
You need to allow access to TCP Port 80 and 443 for Essentials Server.
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Using Port with apex

I need some help...
I need some examples using port(serial, usb or paralelo) any execise please send it... to [email protected]
i want do a lot of things with it... or if you know where are there examples on the web.. please tell me
Thank u,

HTML is NOT really meant to do ANYTHING with the ports, you would need to look at Java or another higher level language.. What exactly ar eyou looking to do with the Ports?
Also, isn't this a duplicate of your other posting from today? Help in Apex3.2
Please try not to double post about the same topic..
Thank you,
Tony Miller
Webster, TX

Retrieving a file using port 80

Hi,
Can any one please tell how to do the following in Java:
I have a file in a machine. There is a httpd daemon running in the machine. So, i want to connect to connect to the machine using port 80 and retrieve the file. I should be also able to upload the file back to the machine after updating it locally in my machine.
thanks,
Divya lakshmi

Hi,
Can any one please tell how to do the following in
n Java:
I have a file in a machine. There is a httpd daemon
n running in the machine. So, i want to connect to
connect to the machine using port 80 and retrieve the
file. I should be also able to upload the file back to
the machine after updating it locally in my machine.
thanks,
Divya lakshmiIf you want to use a HttpURLConnection to connect to this web server, you can use this code to get the input stream off of the url (its got stuff in there for proxies if you're using one):
     * Get the Input Stream from the Connection given a specific URL
     public java.io.InputStream getInputStream(String urlString) {
          if (urlString == null) urlString = this.urlString;
          if (debug) System.out.println("getInputStream Method Called...");
          try {
               String auth = "";
               if (useProxy) {
                    System.getProperties().put("proxySet", "true");
                    System.getProperties().put("proxyHost", pHost);
                    System.getProperties().put("proxyPort", pPort);
                    String authString = "";
                    if (pUsername != null && pUsername != "") authString = pUsername + ":";
                    else authString = "username:";
                    if (pPassword != null && pPassword != "") authString = authString + pPassword;
                    else authString = authString + "password";
                    auth = "Basic " + new sun.misc.BASE64Encoder().encode(authString.getBytes());
               java.net.URL url = new java.net.URL(urlString);
               conn = (java.net.HttpURLConnection)url.openConnection();
               if (useProxy) conn.setRequestProperty("Proxy-Authorization", auth);
               conn.setRequestProperty("User-Agent", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)");
               conn.setDoInput( true );
               conn.setDoOutput( true );
               conn.connect();
               return conn.getInputStream();
          } catch (java.io.IOException ioe) {
                  ExceptionDialog exDialog = new ExceptionDialog(new javax.swing.JFrame());
               exDialog.showForThrowable(ioe.toString(),ioe);
               return null;
     }From the input stream, you can extract the contents:
                    BufferedOutputStream out=new BufferedOutputStream(new FileOutputStream(new File("foo.contents"));
                    byte[] b=new byte[1024];
                    int numbytes=0;
                    InputStream ins = seeMethodAbove.getInputStream();
                    while((numbytes=ins.read(b,0,1024))!=-1) {
                         out.write(b,0,numbytes);
                    out.close();As for uploading a new file to the web server, that's going to be a different story. I prefer ftp, as it is a mature and stable protocol, and implementing it is quite easy. there are other ways, such as writing to a script that can process those requests using methods such as POST or GET. what options do you have with the web server?

Why do we use port no. 11333 for Hyperion planning?

Why do we use port no. 11333 for Hyperion planning Metadata Load through ODI?

What more do you need to know, when you deploy planning you will see that there is a "Java RMI Registry" service/process, this runs on port 13333. The planning adaptor communicates with the RMI registry and that then communicates with planning. If you need to know more then search for "Java RMI" on the internet.
Cheers
John
http://john-goodwin.blogspot.com/

How do I make JWS use port 7001 instead of port 8080?

Running Weblogic 6.1sp2, jdk1.3.
I can get JWS/JNLP to work as long as I have weblogic listening to port 8080, but how do I get JWS to use port 7001?
Searched for the answer and came up blank - I assume I'm missing something really simple...
tia,
Andrew

Change the codebase="..." setting in your JNLP file to refer to your new port.

CER Use port description as port location

Hello all,
I am trying to confirm if this "feature" is as useless as I have found it to be. From my testing and what little documentation I can find when checking the "Use port description as port location" check box on the LAN switch details screen this will ONLY show you this information when looking at the switch port details screen. It DOES NOT actually use the switch port description as location information for the 911 call notifications.
My hope was that by checking this check box the switch port description would override the ALI location information configured within the ERL assigned to the switch port that the phone is connected to. This would allow the creation of one ERL/ALI per building say and the device specific room level information would simply come from the switch port description. With out this option a ERL/ALI has to be created for every room in the building.
Thank you all.

There's absolutely no problem in choosing 8888 as admin port while installing IWS in solaris Environment. Just make sure u follow these steps while installation:
(1)You should choose a random number for the administration server to make it harder for anyone to breach your server.
(2) Make sure the port you choose isn't in use. Look at the file /etc/services on the server machine to make sure you don't assign a port number that is reserved for another service. If you choose a port that is being used by another service, the installation program prompts you for another port.
(3)Note :If you choose a server port number lower than 1024, you must be logged in as root to start the server. After the server is bound to the port, the server changes from the root user account to the user account you specify. If you choose a port number greater than 1024, you don't have to be the root user to start the server.
Regards
T.Raghulan

Error: Specify secure port in the property Using ports 7001/7002

          Hi,
          I have two node cluster using WL6.1, and Solaris.
          Then, I also setup NSAPI plug in, and specify 2 nodes
          in obj.conf file. But I tried to browse the URL.
          I have "Secure port in property..." error message.
          I check the SSL property in domain->servers->SERVERNAME
          Enabled:checked
          Listen Port: 9002
          Server Key File Name: config/mydomain/demokey.pem
          Server Certified File Name: config/mydomain/democert.pem
          Server Certifiled Chan File Name: config/mydomain/ca.pem
          Is the above correct setup?
          What am I missing?
          Thanks,
          // hiromu


Ok.. That makes more sense.
          So, before we fix the error message, I want to understand your architecture.
          You have NES(Iplanet) proxying requests to 2 managed servers that are
          clustered.
          Your managed servers also have the HttpClusterServlet setup to proxy back to
          those two instances? I think you may be a bit confused.
          The HttpClusterServlet is usually installed on another instance of
          WebLogic(managed server) if you are not using Iplanet, IIS, or Apache as a
          frontend WebServer. When you use the HttpClusterServlet, that WebLogic
          instance will act as a WebServer proxying requests to OTHER backend WebLogic
          Servers.
          In your case, you probably do not need to use the HttpClusterServlet as you
          are using Iplanet to proxy the requests.
          In any case, here is the fix to your problem:
          Refer to:
          http://e-docs.bea.com/wls/docs61///////adminguide/http_proxy_cluster.html
          The documentation says the format of specifying the defaultServers is
          host1:port:secport|host2:port:secport.
          Therefore, you need to add the secure port even though you aren't using it.
          Let's assume your secure port is 9002, then your entry should be:
          <init-param>
          <param-name>defaultServers</param-name>
          <param-value>cyberia:9001:9002|sun-timmy:9001:9002</param-value>
          </init-param>
          Regards,
          Eric
          "hiromu kato" <[email protected]> wrote in message
          news:[email protected]...
          >
          > Eric,
          >
          > The error message is from the managed server log as
          >
          > ####<Oct 2, 2001 9:26:02 PM PDT> <Notice> <WebLogicServer> <cyberia>
          <cluster2>
          > <ListenThread> <system> <> <000201> <ListenThread liste
          > ning on port 9001, ip address 10.10.102.189>
          > ####<Oct 2, 2001 9:26:04 PM PDT> <Notice> <Cluster> <cyberia> <cluster2>
          <main>
          > <system> <> <000102> <Listening for multicast messages
          > (cluster bvcluster2) on port 9001 at address 237.0.0.1>
          > ####<Oct 2, 2001 9:26:04 PM PDT> <Notice> <WebLogicServer> <cyberia>
          <cluster2>
          > <main> <system> <> <000330> <Started WebLogic Managed S
          > erver "cluster2" for domain "mydomain" running in Production Mode>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Info> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101047> <[WebAppS
          > ervletContext(1524862,bv,/bv)] HttpClusterServlet: init>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Error> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101048> <Please
          > specify secure port in the properties. Using ports 7001/7002. See release
          notes
          > for more info>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Error> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101048> <Please
          > specify secure port in the properties. Using ports 7001/7002. See release
          notes
          > for more info>
          > ****************
          >
          > I got the above error when I set web.xml
          > <?xml version="1.0" ?>
          >
          > <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application
          1.2//EN"
          > "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
          >
          > <web-app>
          >
          > <servlet>
          > <servlet-name>HttpClusterServlet</servlet-name>
          >
          <servlet-class>weblogic.servlet.internal.HttpClusterServlet</servlet-class>
          > <init-param>
          > <param-name>defaultServers</param-name>
          > <param-value>cyberia:9001|sun-timmy:9001</param-value>
          > </init-param>
          > <init-param>
          > <param-name>DebugConfigInfo</param-name>
          > <param-value>ON</param-value>
          > </init-param>
          > </servlet>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>/</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.jsp</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.htm</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.html</url-pattern>
          > </servlet-mapping>
          > </web-app>
          >
          > **********************
          > My obj.conf of the NES is
          >
          > Init fn="load-modules" funcs="wl_proxy,wl_init"
          shlib=/mebsuta/b/webserver/https-http-mebuta-hkato-50005/plugins/libproxy.so
          > Init fn="wl_init"
          >
          > Init fn=load-types mime-types=mime.types
          > Init fn="load-modules"
          shlib="/mebsuta/b/webserver/bin/https/lib/libNSServletPlugin.so"
          >
          funcs="NSServletEarlyInit,NSServletLateInit,NSServletNameTrans,NSServletServ
          ice"
          > shlib_flags="(global|now)"
          > Init fn="NSServletEarlyInit" EarlyInit=yes
          > Init fn="NSServletLateInit" LateInit=yes
          >
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl_proxy WebLogicCluster="cyberia:9001,sun-timmy:9001"
          PathTrim="/weblogic"
          > </Object>
          >
          > <Object name="si" ppath=*/servletimages/*">
          > Service fn=wl_proxy WebLogicCluster="cyberia:9001,sun-timmy:9001"
          > </Object>
          >
          >
          > <Object name=default>
          > NameTrans fn="NSServletNameTrans" name="servlet"
          > NameTrans fn="pfx2dir" from="/servlet"
          dir="/mebsuta/a/hkato/docs_50005/servlet"
          > name="ServletByExt"
          > NameTrans fn=pfx2dir from=/ns-icons dir="/mebsuta/b/webserver/ns-icons"
          name="es-internal"
          > NameTrans fn=pfx2dir from=/mc-icons dir="/mebsuta/b/webserver/ns-icons"
          name="es-internal"
          > NameTrans fn="pfx2dir" from="/help"
          dir="/mebsuta/b/webserver/manual/https/ug"
          > name="es-internal"
          > NameTrans fn="pfx2dir" from="/manual"
          dir="/mebsuta/b/webserver/manual/https"
          > name="es-internal"
          > NameTrans fn=document-root root="/mebsuta/a/hkato/docs_50005"
          > Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl_proxy
          WebLogicCluster="cyberia:9001,sun-timmy:9001",
          > PathPrepend=/jspfiles
          > PathCheck fn=unix-uri-clean
          > PathCheck fn="check-acl" acl="default"
          > PathCheck fn=find-pathinfo
          > PathCheck fn=find-index index-names="index.html,home.html"
          > ObjectType fn=type-by-extension
          > ObjectType fn=force-type type=text/plain
          >
          > Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
          > Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
          > Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
          > #AddLog fn=flex-log name="access"
          > </Object>
          >
          > <Object name=cgi>
          > ObjectType fn=force-type type=magnus-internal/cgi
          > Service fn=send-cgi
          > </Object>
          >
          > <Object name="servlet">
          > ObjectType fn=force-type type=text/html
          > Service fn="NSServletService"
          > </Object>
          >
          > <Object name="jsp092">
          > ObjectType fn="type-by-extension"
          > ObjectType fn="change-type" type="magnus-internal/jsp092"
          if-type="magnus-internal/jsp"
          > Service fn="NSServletService" type="magnus-internal/jsp092"
          > </Object>
          >
          > <Object name="ServletByExt">
          > ObjectType fn=force-type type=magnus-internal/servlet
          > Service type="magnus-internal/servlet" fn="NSServletService"
          > </Object>
          >
          > <Object name="es-internal">
          > PathCheck fn="check-acl" acl="es-internal"
          > </Object>
          >
          >
          > Thank you for the help,
          >
          > // hiromu
          >

Using port 22 behind a wrt54g

Similar Messages

Maybe you are looking for