WAAS 4.1.1c - Optimized CIFS Sessions
I have 2 remote devices. Using the CM and looking at Dsshboard > Devices > Device1, then the Acceleration tab, I see "Insufficient data to plot the chart" for Optimized CIFS Sessions. I've got 25+ users at one location, and 3 users at the other. Shouldn't I see something about CIFS optimization? Something wrong with the report? Some other cli or something to verify the device is operating properly?
EDIT: both devices indicate insufficient information to plot the chart.
sho cifs accellerator:
Accelerator Licensed Config State Operational State
cifs Yes Enabled Running
Changed report to "last hour", no change in report.
Verified NTP server is the same for all devices (perimeter data router). Time and timezone is accurate for all devices. Anything else I can check?
Similar Messages
-
Hi ,
I've problem with some waas device of my infrastructure .
the version i 4.4.1.
when I check the statistic I see that Optimization is null.
waasballdre1#show statistics conn
Current Active Optimized Flows: 0
Current Active Optimized TCP Plus Flows: 0
Current Active Optimized TCP Only Flows: 0
Current Active Optimized TCP Preposition Flows: 0
Current Active Auto-Discovery Flows: 4
Current Reserved Flows: 10
Current Active Pass-Through Flows: 26
Historical Flows: 85
O-ST: Origin State, T-ST: Terminal State
E: Established, S: Syn, A: Ack, F: Fin, R: Reset
s: sent, r: received, O: Options, P: Passthrough
Local IP:Port Remote IP:Port Peer ID O-ST T-ST ConnType
10.2.144.11:80 10.20.21.42:4256 N/A Sr Sso EXTERNAL CLIENT
10.2.144.12:80 10.20.21.42:4261 N/A Sr Sso EXTERNAL CLIENT
10.2.144.11:80 10.20.21.42:2343 N/A Sr Sso EXTERNAL CLIENT
10.2.144.12:80 10.20.21.42:2347 N/A Sr Sso EXTERNAL CLIENT
Local IP:Port Remote IP:Port Peer ID ConnType
150.217.21.17:1137 10.1.144.73:4637 N/A PT In Progress
10.9.144.44:50352 10.9.21.42:2000 N/A PT In Progress
150.217.21.17:1137 10.1.144.78:1548 N/A PT In Progress
150.217.21.17:1137 10.1.144.88:3140 N/A PT In Progress
192.86.102.121:80 10.1.144.86:3620 N/A PT No Peer
150.217.21.17:1137 10.1.144.83:4067 N/A PT In Progress
10.9.21.42:2000 10.9.144.32:15133 N/A PT In Progress
10.1.144.86:3620 192.86.102.121:80 N/A PT No Peer
I have controlled the application policy and now is identical to other device that it good work .
what can I do?
thanks.
RobertoHi Ahmad,
in the step 1 is ok and I've post the output:
al-balldre#sh ip wccp 61 detail
WCCP Client information:
WCCP Client ID: 10.5.144.33
Protocol Version: 2.0
State: Usable
Initial Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets s/w Redirected: 392369
Connect Time: 03:30:42
Bypassed Packets
Process: 0
Fast: 0
CEF: 0
al-balldre#sh ip wccp 62 detail
WCCP Client information:
WCCP Client ID: 10.5.144.33
Protocol Version: 2.0
State: Usable
Initial Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets s/w Redirected: 459781
Connect Time: 03:30:47
Bypassed Packets
Process: 0
Fast: 0
CEF: 0
al-balldre#
and in the interface is all configuired with any site (I've check).
THE TEST
waasballdre1#sh statistics connection | in 10.1.144.243
10.1.144.243:2472 10.1.21.41:445 N/A PT No Peer
yes I'm using wccp gre
waasballdre1#sh wccp gre
Transparent GRE packets received: 1324923
Transparent non-GRE packets received: 0
Transparent non-GRE non-WCCP packets received: 0
Total packets accepted: 896070
Invalid packets received: 19
Packets received with invalid service: 0
Packets received on a disabled service: 0
Packets received too small: 0
Packets dropped due to zero TTL: 0
Packets dropped due to bad buckets: 0
Packets dropped due to no redirect address: 0
Packets dropped due to loopback redirect: 0
Pass-through pkts on non-owned bucket: 0
Connections bypassed due to load: 0
Packets sent back to router: 0
GRE packets sent to router (not bypass): 0
Packets sent to another WAE: 0
GRE fragments redirected: 0
GRE encapsulated fragments received: 2840
Packets failed encapsulated reassembly: 0
Packets failed GRE encapsulation: 0
Packets dropped due to invalid fwd method: 0
Packets dropped due to insufficient memory: 0
Packets bypassed, no pending connection: 0
Connections bypassed during wccp shutdown: 0
Connections bypassed due to bypass-list lookup:0
Conditionally Accepted connections: 0
Conditionally Bypassed connections: 0
L2 Bypass packets destined for loopback: 0
Packets w/WCCP GRE received too small: 0
Packets dropped due to received on loopback: 2
Packets dropped due to IP access-list deny: 0
Packets fragmented for bypass: 0
Packets fragmented for egress: 0
Packet pullups needed: 0
Packets dropped due to no route found: 0
waasballdre1#
waasballdre1#show egress-methods
Intercept method : WCCP
WCCP negotiated return method : WCCP GRE
Egress Method Egress Method
Destination Configured Used
any IP Forwarding IP Forwarding
Intercept method : Generic L2
Egress Method Egress Method
Destination Configured Used
any not configurable IP Forwarding
waasballdre1#
----------part of configuration of my waas
sh run:
wccp router-list 1 10.5.144.1
wccp tcp-promiscuous service-pair 61 62 failure-detection 30
wccp tcp-promiscuous service-pair 61 62 router-list-num 1
wccp version 2
nota : I've copy one file in the PC of the Balldre from my server in the center site . when the copy is finished , I've paste again and the time for the copy is the same.
The waas does not cache.
thanks.
R -
I have an interesting problem with the CIFS accelerator and wanted to see if you've seen similar problems.
Initially started troubleshooting when a user at Site A (WAAS 4.1.3 w/ CIFS AO on) tried to logon to the network with his profile information stored at Site B (WAAS 4.1.3 w/ CIFS AO on). I had just enabled the CIFS AO on both of the WAEs.
The user could not logon on his first attempt since I enabled the CIFS AO on both sides. Then one of the SysAdmins (trying to resolve the users issue) tried to copy the users profile from the Site B server to the Site A server. The SysAdmin could successfully map the drive but indicated the copy job for his profile directory did not work.
Once I had this background I started troubleshooting and wanted to see if I could replicate the problem. Here are the results of my testing:
1) With CIFS AO enabled at Site A and Site B, tried to copy entire user profile directory from A to B (and B to A). I could map the drive and saw the session being optimized with TFO/DRE/LZ and CIFS AO. The copy job started but I then got an error indicating that 'Cannot copy identifydb.obj. Cannot find the file specified'
2) With CIFS AO enabled at Site A and Site B, was able to successfully copy any single file bidirectionally b/w A and B.
3) Repeated test 1 and this time the copy job started and I got an erro indicating that ''Cannot copy registry.dat. Cannot find the file specified'
4) Turned off the CIFS AO on both Site A and Site B WAE's, tried to copy entire user profile directory from A to B. Saw the session being optimized with TFO/DRE/LZ. It took a while but the ~ 30MB profile copied successfully.
5) Repeated step 1 with Site C and Site D, with CIFS AO enabled. Tried to copy the entire user profile from C to D ( and D to C). I could map the drive and saw the session being optimized with TFO/DRE/LZ and CIFS AO. The copy job started but then I got an error indicating that 'Cannot copy properties131_04. Cannot find the file specified'
I repeated step 4 multiple times with CIFS AO disabled and successfully copied the profile directory every time (b/w multiple sites and with multiple profiles). I was never able to successfully copy the entire profile directory with the CIFS AO enabled. It seemed to be a different small file everytime that caused the copy process to halt.
HTTP AO works fine and all other traffic flows seem to work well through the TFO/LZ/DRE accelerators.
I'm assuming the same issue causing the profile to be copied via the CIFS AO is why users can't logon when I have CIFS AO enabled. Has anyone
ever seen anything like this? Any ideas?
Thanks.We are using 4.1.1d and randomly users cannot save to HQ data server. There is no problem with the server but users across WAN and 4.1.1d devices cannot save.
-
It is possible during a CIFS session to catch CIFS objects (files) in both WAAS across a LAN?.
One of the WAAS is located close to the server (where the files are) and the other is located across a WAN at a branch location where the files are being dragged.
The idea is that, initially, the files were moves from the client to the server and then back to other client on the same location:
My understanding is:
When the files are move from the client to the server, the CIFS WAAS at the server location is filled and when the files are move back to another client at the same branch office the WAAS CIFS at the branch office is filled.
ThanksZach
There are two WAAS CIFS caches: The Brand WAAS CIFS cache and the Main site (Where the servers are) WAAS CIFS cache.
I am interesting in filling the Brand WAAS CIFS cache.
Initially files are going to be transfer from client TO server. According to my knowledge, in this scenario, the WAAS CIFS cache on the server side is filled on NOT the Brand WAAS CIFS cache.
I know, for a fact, that when you transfer a file from server TO client, the Brand WAAS CIFS is filled and the Main Office WAAS is NOT.
Thanks
Server is on Main Office and client is on Branch office.
Alex -
hey folks,
I recently went through the upgrade process with a customer to move their NAMs to 4.2 and integrate WAAS 4.0.15 with the NAMs via the flow agent. We followed the NAM integration guide and setup some reporting in the NAM for collecting information from the WAAS flow agents on bandwidth and response time. However, at this point, the information that we seem to be getting is limited. I am finding the reports in the WAAS GUI itself to be more valuable at this time, however, I have heard from several engineers since this integration has been available that NAM and WAAS are a good fit. Does anyone have any specific reports that they can point me towards in the NAM? Right now I have setup some Application optimization specific reports in the WAAS CM for HTTP and CIFS. What I would like to do is use the NAM to validate those reports and provide some upper management level visibility into specific flows to specific servers and how effective WAAS has been in optimizing that traffic. This customer is about to deploy WAAS worldwide and having some more detailed reporting capability would be very helpful.
Does anyone on the list have any good experience with NAM 4.2 and WAAS that they can share and some how to's on what reports they are finding the most valuable to their senior managers and IT staff? Thanks
Sincerely
Mike LouisHi Mike,
This webinar on Jan 12; might be of interest to you.
You can register via this URL.
https://ciscosales.webex.com/ciscosales/onstage/g.php?d=201229605&t=a
I also attached a document that might help as well - Using NAM Hardware in a WAAS POC and Depoloyment.
Thanks
Eric - please mark as answered with a rating of 5, if this answered your questions.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
Leverage Cisco Network Analysis Module to enhance operational visibility into WAAS deployments. NAM reports on a comprehensive set of application performance metrics such as application response time, WAN bandwidth usage, LAN and WAN data throughput, and other application performance metrics to:
Identify application optimization opportunities
Analyze impact of Cisco WAAS implementation
§ Take advantage of visibility for ongoing optimization improvements and troubleshooting
Cisco NAM 4.1 also introduces the first software only version of the NAM as a Virtual Blade on the WAVE 574 and WAE 674.
If you have ever felt overwhelmed trying to answer the following questions:
· How do I verify the impact of WAAS on application performance at my remote offices?
· How do I get the level of visibility needed for effective operational manageability?
· Is there a monitoring solution that is integrated and does not demand additional footprint?
· Is there a solution that provides visibility across the entire WAAS deployment lifecycle?
Please join us for a webinar of the Cisco NAM 4.1 that explores the performance management and troubleshooting capabilities of NAM hardware and NAM VB in a WAAS environment to help address the above questions and more.
WEBINAR Dates and Times:
REGISTER January 12th, 2010 Tuesday at 8:00 - 9:00 AM PST/11:00-12:00 EST
Agenda:
· Overview of NAM and NAM VB
· Setting up NAM for WAAS analysis
· Use of NAM for WAAS before-and-after impact analysis
· Use of NAM to improve manageability and troubleshooting of WAAS
· Q&A
NOTE – Once you have registered for the webinar, you will get a WebEx message with outlook ics file.
Please click on the .ics file when you get your message from WebEx to make sure it is placed on your Outlook Calendar.
© 2010 Cisco Systems, Inc. All rights reserved. Privacy Statement and Trademarks of Cisco Systems, Inc -
WAAS- Optimization for OCS and Wireless traffic
Hi,
I have been trying to find some information regarding optimization of Microsoft Office Communicator and Wireless traffic across a WAN environment via WAAS and its acceleration/optimization capabilities.
So far, I have seen the case studies section for WAAS but no case offers what I am looking for...
Do you have any information/documentation that can be shared with customers regarding OCS and Wireless as key business application that were benefited after a WAAS deployment?
Thanks
Regards,
M.Hi Manuel,
Answers for you:
So we can say that wireless traffic across a WAN link could not obtain any benefits from any WAN optimization solution, in this case WAAS?
Ans: Nope. I do nto mean that. What I am trying to say is - it's a different thing. Wireless or no Wireless, optimization can be done when the traffic passes thru edge and core side WAEs. If it passes thru only one WAE, it will go in pass thru.
If a wireless controller at a remote site needs to send traffic to another wireless controller in a centralized or HUB site, can we optimize this traffic or it will just benefit from the overall reduction in bandwidth as a result of any TCP based application getting optimized?
Ans: It really does not matter. The traffic really needs to pass thru WAEs on both sides in order to optimize. Whether it is from wireless controller or from any other devices, it really does not matter. Further the type of traffic and policies on WAEs will determine how much optimization can be done, if any.
OCS uses SIP which is TCP based or ports 506x so I am assuming that SIP could be benfited by WAAS unless OCS uses a secured session were SIP is encrypted.: Yes, WAAS can help you but SIP is a voice traffic and there are default policies like VoIP on WAAS which will pass thru this traffic for port 5060. It's not a good idea to optimize voice traffic due to various reasons. -
We're attempting to configure a Core Cluster for the WAE-612 and got confused when entering the access information for the CIFS file server that his core cluster will export. The doc is saying that we can only enter access info for 1 file server. I was under the impression we can include more than 1 file server in the core cluster. Can someone please clarify this? thnx..
Thanks for the reply.
<>
I will double check this...
<< Also, to see if things are being optimized via CIFS, you should see the session in "sh cifs session list", not on the edge in the sessions as 139/445.>>
Yes, I have run this command on the edge wae and was seeing sessions as 139, so I am pretty sure the CIFS traffic is getting accelerated.
<>
Where in the edge GUI should I be seeing the 4050 tunnels? - in the WAFS log?
<>
yes..here is the ping from the core to the file server: 5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/mdev = 1.165/1.235/1.271/0.036 ms
<>
I have created 2 connectivities - one's for a T1 line connection and the other is for 2 T1's connection. I have exported the file server as part of the first connectivity, but not the second one (we're running 4.0.19 code level on our wae's). Exporting the file server did not seem to make much difference for performance.
<>
Dotted the i's and crossed the t's on the settings all the way from the core to the edge (MPLS on the WAN)..
Thanks again.. -
WAAS and Juniper Netscreen Interoperability
I've been doing a dig on historical posts relating to WAAS deployed through firewalls.
I am working on a deployment with Juniper Netscreens & ASA5520 sitting between WAE's. IP connectivity is fine. I can ssh to remote device etc. but users cannot login (XP). The login scripts calls upon CIFS etc and I suspect this is being broken through the fw's.
When I disable WAAS for this flow - it all works fine i.e. users can login and access full set of corporate resources. I suspect the firewalls but would appreciate any leads..
thanks
AjazHi Ajaz,
WAAS adds TCP Option 0x21 and increments TCP packet sequence number during TCP handshake. FW needs to be configured to allow
these changes.
On the latest PIX/ASA a new command "ip inspect waas" has been added to allow above changes by wae. You might want to check
Netscreen config guide on command to disable TCP sequence number checking.
If SSH to Servers is working fine then it might not be FW dropping packets. However to confirm it might be best to use
tcpdump/tethereal on both WAEs and to sniff the traffic on whether its being dropped along the path by the FW.
Few questions:
- Whats the version running on WAEs?
- Is it only CIFS traffic which is affected? Try disabling CIFS AO if its enabled and then test.
Hope this helps,
Best Regards,
Rahul Vavale -
Cisco WAAS moibile integrated with Symantec Backup Exec 2010
Here customer requirement is to take backup of opened Database file .fdb
(Microsoft Dynamic Navision) integrated with WAN optimization (Cisco WAAS
mobile).
Problem is Cisco WAAS mobile is not optimizing Symantec backup process when backup job is running.
Please find attached files (WAAS mobile accleration status with symantec
backup process).
Customer is using Microsoft Dynamics Navision (ERP application).
WAAS mobile client is connecting and file copy is accelerating, but
symatec backup (beremote.exe) and Navision (fin.exe) processes are not
accelerating.
I added above processes in WAAS mobile server's acceleration list.
Please advise if any changes has to made in WAAS mobile server.
Regards
Prasad
Cell: 9000012355Hi Prasad,
According to the screen shots provided the fin.exe process is bypassed due to Low Latency. From the admin guide this means:
Bypassed : Low Latency. The latency between the client and the application server is less than the latency threshold, which is 10 ms by default. This threshold may be modified on the Connection Settings tab on the Configure > Clients > Networking page.
Also, I see SERVER.exe process is going to the same server or subnet as fin.exe but is bypassed due to Pre-Existing connection.
Bypassed: Pre-existing Connection. When WAAS Mobile is started after other applications, the existing TCP connections associated with those applications will not be reset unless the “Auto Reset Connection” property has been selected for the process in the Accelerated Processes table, and hence, these pre-existing connections will be bypassed.
Lastly, I see bermote.exe is listed as Bypass Reason Unknown in one of the screen shots.
Bypassed : Reason Unknown. This message will occur when an attempt to reset a TCP connection associated with an application that has been configured to have these connections be automatically reset (via the Accelerated Processes table on the Configure > Clients > Acceleration page) fails.
Is this client actually accessing a server that is remote for these first two processes?
For the last process, did we try to first exit the application in question and all the associated processes (beremote, and any other processes that may get started with this application), then start the WAAS Mobile client, then finally start the associated process/application?
Cheers,
Mike Korenbaum
P.S. If this answers your question please mark it as such. -
Windows 10 unable to access CIFS
I am unable to connect a windows 10 enterprise client to our cifs shares We use DFS on our windows server – so normally I would just map to the root of that \\domain\home I have tried adding the reg key as detailed here and elsewhere without success https://techjourney.net/cannot-connect-to-cifs-smb-samba-network-shares-shared-folders-in-windows-10/ Typically I normally disable SMB signing on windows 8/server 2012 clients but SMB signing negotiation seems to be optional now, and the reg key I would create gets rejected by windows 10 I do not want to start making wide ranging changes to my netapp, but if it improves security I am happy to do so The client is domain joined, and I have an account which is both local admin and domain admin running on it for testing Any advice greatly received – this is a tad inconvenient
Hi, After some more personal digging around (my support ticket was getting nowhere fast) I have managed to successfully browse CIFS shares on my snapmirror filer at our DC.To do this I had to enable cifs signing and bounce the cifs service. FILER> cifs terminateCIFS local server is shutting down...CIFS local server has shut down...
FILER> options cifs.signing.enable on
FILER> cifs restart
CIFS local server is running.
Can't set cifs branchcache server secret. This filer is running 8.1.4P1 7-Mode This weekend we have a full power shutdown at our production site so I will try this on power up. It's so hard to get the users to close down their connections!!!! One thing I did notice though. The filer does not show the W10 client using security signatures - output from cifs sessions -t Using domain authentication. Domain type is Windows 2000.
Root volume language is not set. Use vol lang.
Number of WINS servers: 0
Total CIFS sessions: 1
CIFS open shares: 1
CIFS open files: 0
CIFS locks: 3
CIFS credentials: 1
IPv4 CIFS sessions: 1
IPv6 CIFS sessions: 0
Cumulative IPv4 CIFS sessions: 26383
Cumulative IPv6 CIFS sessions: 0
CIFS sessions using security signatures: 0 Will post results from production environment after the weekend -
NME-WAE-502 for point to point ?
Can I use two NME-WAE-502 for a point-to-point WAN, one as edge and one as core ?
Is it also possible to use them without the Central-Manager ?
Thanks !Hello Daniele,
here are my comments:
Can I use two NME-WAE-502 for a point-to-point WAN, one as edge and one as core ?
There is no restriction where to install them but these are design mainly for branch offices, my suggestion is to give your best guess and estimate number of users, applications, bandwidth and take the time to check the design guides as well. Request assistance to your Cisco Partner too.
some details about the module:
NME-WAE-502
Max Optimized TCP Connections: 500
Max CIFS Sessions: 120
Max Recommended WAN Link [Mbps]:4
further details can be found on the design guide
http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/WAASDC11.html
Is it also possible to use them without the Central-Manager ?
WAAS continues to function in the event of CM failure, but you need it for configuration changes, monitoring, statistics, software updates...etc.
hope that helps,
Felix -
No acceleration after stopping and starting wccp
I acceleration was working fine between my data center and a branch. (I was copying files from my data center PC to a PC at the branch). I wanted to demonstrator how much slower CIFS copies are without acceleration so I stopped wccp on the branch router (no ip wccp 61 redirect-list wae-nme, no ip wccp 62 redirect-list wae-nme). As expected, the CIFS copies then were much slower.
Then I restarted WCCP (ip wccp 61 redirect-list wae-nme, ip wccp 62 redirect-list wae-nme), BUT now the connection from my workstation at the data center to the branch shows up as pass through.
A show stat conn on the branch NME shows other CIFS connections from other branch hosts, but my PC's connection is stuck in pass through. How do I get my PC's connection to accelerate again?
All WAAS devices are on 4.1.7.Tod,
CIFS sessions do a decent job of reconnecting when there is a failure at the transport (TCP) layer. It's likely that WAAS sees that the connection was already established (your ConnType would be PT In Progress). You have to close the CIFS session (net use * /delete) and restart the transfer.
Regards,
Zach -
Hi
Somebody knows if there is any CLI that shows individual CIFS connections and its optimization in WAAS. Legacy mode on version 4.0?. Something similar that in WAAS 4.1 in AO mode.
Currently i can only see the tunnel between the WAAS on port 4050 and traffic moving inside the tunnel.
Thanks
- AlexAlex,
Try show cifs session list.
Regards,
Zach -
What happens when WAE Cache Hard Drive is full?
Hi,
From a architectual point of view, when does the WAE delete old cache. When the hard drive fills up how does it know what information to delete?
Thanks
BradIn WAAS, the oldest DRE and CIFS cache data ages out and is deleted when a partition full threshold is reached. This is also true for the /local1/ directory where the log files are kept, so if transaction logging is being done, it should delete the older files first when newer ones are being written. However, each cache aging algorithm is slightly different.
The WAE should be running at maximum efficiency when the disks are actually full and some aging out is happening. You should be getting the most cache hits at this point.
Hope that helps,
Dan -
Hi All,
We have an WAE with code 4.2.3c recently upgraded from 4.1.5f. We were able to telnet to device until there was an alarm "disk_failure critical alarm " which was generated. We are able to ping the device and we are getting the login prompt but it does not allow us to login with TACACS or local passwords.
Is there some feature which has changed with authentication feature from 4.1.5f to 4.2.3c for the box to act like this.
Thanks,
DhanaHi Bhavin,
I tried to reproduce the issue again and i have the Logs which shows incorrect TACACS key in the logs in both ACS server and in the WAAS box.
ACS Log :
04/26/2011,00:38:14,Authen failed,,Default Group (No Access),,Key Mismatch,,,,10.132.5.193,ustccsec2,10.132.5.193,Waas Group,
WAE Log :
2011 Apr 27 14:57:07 abcdwa1 login: %WAAS-UTILLIN-4-801060: _tac_crypt: using no TACACS+ encryption
2011 Apr 27 14:57:07 abcdwa1 login: %WAAS-UTILLIN-3-801060: tac_account_read: invalid reply content, incorrect key?
2011 Apr 27 14:57:07 abcdwa1 login: %WAAS-UTILLIN-4-801060: _pam_send_account: accounting stop failed (task 6273)
2011 Apr 27 14:57:07 abcdwa1 login: %WAAS-UTILLIN-4-801060: ***pam_tac _pam_account: error sending STOP (acct)
2011 Apr 27 14:57:07 abcdwa1 login: %WAAS-UTILLIN-4-801060: _tac_crypt: using no TACACS+ encryption
2011 Apr 27 14:57:08 abcdwa1 login: %WAAS-UTILLIN-3-801060: tac_account_read: invalid reply content, incorrect key?
2011 Apr 27 14:57:08 abcdwa1 login: %WAAS-UTILLIN-4-801060: _pam_send_account: accounting stop failed (task 6273)
2011 Apr 27 14:57:08 abcdwa1 login: %WAAS-UTILLIN-4-801060: ***pam_tac _pam_account: error sending STOP (acct)
2011 Apr 27 14:57:08 abcdwa1 login: %WAAS-UTILLIN-3-801060: SendExecReport: PAM session problem
2011 Apr 27 14:57:08 abcdwa1 Nodemgr: %WAAS-NODEMGR-5-330027: Process with pid 6273 exits
2011 Apr 27 14:57:08 abcdwa1 Nodemgr: %WAAS-NODEMGR-5-330024: Service 'mingetty' exited normally with code 0
2011 Apr 27 14:57:08 abcdwa1 Nodemgr: %WAAS-NODEMGR-5-330032: Stopping service: 'mingetty'.
The above logs shows there is some kind of mismatch happening with TACACS key after WAAS goes offline.
Maybe you are looking for
-
Hello! I am currently working on a SSAO implementation for Molehill but I'm constantly hitting my head against the 256 instruction limit of AGAL shaders. This is a consequence of a fairly complex inner sampling loop which I need to unroll because AGA
-
Open bat file on client machine using webutil
Hi all. I'm on devsuite 10g. I want to run a bat file on client machine using client_host function of webutil. I have tried first to execute the bat file with mouse double-click in order to check if it is ok, and it works. Now I want to execute this
-
Option for MAPI export destination missing in CRViewer
We have an application developed in C++ which includes the Crystal Reports XI RDC and previewer component. The application is installed at a customer on a Windows Server 2003 machine. Users are working in Terminal sessions connected via Remotedesktop
-
Cross-System Depreciation Area Transfer
Hi, I need to execute inter-co asset transfer between COD that have different depreciation areas. For eg, COD 1 - book depreciation area 01, tax depreciation 02 COD 2 - book depreciation areas 01, US tax depreciation 10, 11,12,13 Can anyone advise ho
-
Hi All, Fi works on after image delta. I have my intialization done couple of years back. Now i want to delete entire data from the ods and keep only from current month. Question is if i delete the data from ods and reintialize is will all the record