What if two service modules fail on a MDS 9513?

Hello,
We recently had a service module failure on one of our core MDS 9513 directors.
It is fixed now but I was wondering what would happen if the second service module had failed as well a bit later...
Will the director still function? All line cards and crossbars are still functionning. But there will be no management possible etc...
Will the traffic continue?
Kind regards,
Ivy

Ivy
The director would then fail completely.
Though I don't know anyone that unlucky

Similar Messages

Cisco 3560 service module failed state

Hi Expert,
My office has a Cisco 2911 ISR router, we installed a 3560 service module 16P on it.
But I use command "sh ip int bri" in 2911 router when we finished installation.
The result shows that the interface Gi 1/1 doesn't work, I have try to re-install SM 16P twice, the result is the same.
The normal 2911 ISR + 3560 SM 16P show as below,
2911#sh ip int brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES NVRAM administrativelwy down down
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES manual up up
GigabitEthernet0/1 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/2 unassigned YES NVRAM down down
GigabitEthernet1/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet1/1 unassigned YES unset up up
The BAD 2911 ISR + 3560 SM 16P show as below,
2911#sh ip int brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM administratively down down
GigabitEthernet0/2 unassigned YES NVRAM administratively down down
GigabitEthernet1/0 unassigned YES NVRAM administratively down down

Hi Krishnendu,
I understand what you mean, I have done this work for assign Gi 1/0 an IP address, and then using command "service-module gi 1/0 session" to enter the service-module to configure it at all.
But I just want to know what is the Gi1/1 interface used for?
I use command "sh cdp nei" on others 2911 ISR + 3560 service module, all of the has the Gi 1/1 interface, and 2911 router using Gi 1/1 interface connected service module Gi 0/17. And Gi 1/1, Gi 0/17 is configured with "trunk interface".
I'm wondering whether my 2911 router Gi 1/1 has some physics error? or maybe it has another command to to "OPEN" the Gi 1/1 on 2911?
The "normal" switch display as below,
rtr001#sh cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
D - Remote, C - CVTA, M - Two-port Mac Relay
Device ID Local Intrfce Holdtme Capability Platform Port ID
swt000.nneas.net
Gig 1/0 129 R S I SM-ES3G-1 Gig 0/18
swt000.nneas.net
Gig 1/1 129 R S I SM-ES3G-1 Gig 0/17
Thanks in advance,
BR Frank

Service Module is failed

when i show service-module ids-sensor 1/0 status
i have the following output
Service Module is Cisco IDS-Sensor1/0
Service Module supports session via TTY
Service Module is failed
Service Module status is not available
what is the problem and how can i recover it?
note i make restart for the service module by the command
service-module ids-snsor 1/0 reset
but it remain failed
please help me as soon as possible

You've powered off and re-seated the card and this was working at one point? Beyond that, if there is no output from the CUE console (while connected to the module via "service-module service-engine 0/1 session"), then the module is likely defective.

CUE "Service Module is failed"

Dears , i am getting this error on CUE .I reload the router but result is same .what should i do now?? ..
#service-module service-engine 0/1 status
Service Module is Cisco Service-Engine0/1
Service Module supports session via TTY line 258
Service Module is failed
Service Module status is not available
Regards,
Shib

You've powered off and re-seated the card and this was working at one point? Beyond that, if there is no output from the CUE console (while connected to the module via "service-module service-engine 0/1 session"), then the module is likely defective.

When I click on Print to print a pdf from my computer, the message "initialization of rasteurization module failed". What does this mean - how do I fix it?

Why can't I print a pdf in Acrobat Pro? I keep getting the message "initialization of rasteurization module failed". What does that mean and how do I fix that?

This is an Acrobat error ("Initialization of the rasterizer module failed.") but it is has never been reported before that I can see.
Let's start with the basics.
- What version of Acrobat Pro
- What system
- What printer
- Does it happen with other printers?
- Does it happen with all files?

Service-module g2/0 session access fails

I did not add a vty/telnet password when I initially configured my NME-X-23ES-1G switch in my 3825 router. Now, of course I can not telnet to the switch, but the session access fails as well. How do I recover this?
Config in 3825:
interface GigabitEthernet2/0
ip address 106.40.x.x.255.255.0
Attempt to access switch module:
3825_Router2#service-module g2/0 sess
Trying 106.40.77.254, 2130 ...
% Connection refused by remote host

The default configuration for Cisco EtherSwitch service modules allows an end user to recover from a lost password. The password recovery disable feature allows the system administrator to protect access to the switch password by disabling part of this functionality and allowing the user to interrupt the boot process only by agreeing to set the system back to the default configuration. With password recovery disabled, the user can still interrupt the boot process and change the password, but the configuration file (config.text) and the VLAN database file (vlan.dat) are deleted.
The following document shows how to recover from a lost or forgotten password.
http://www.cisco.com/en/US/products/hw/modules/ps2797/products_feature_guide09186a0080415bae.html#wp1776357

What is the function module to calculate "years of services" in HR?

What is the function module to calculate "years of services" in HR?

hi ,
following function module will help you to find the years of service
CALL FUNCTION 'HR_HK_TOTAL_YOS' "HR-HK: Calculate an employee's total years of service
EXPORTING
    years1 =                    " pea_scryy     Years of service
    months1 =                   " pea_scrmm     Months of service
    days1 =                     " pea_scrdd     Days of service
    years2 =                    " pea_scryy     Credit years of service
    months2 =                   " pea_scrmm     Credit months of service
    days2 =                     " pea_scrdd     Credit days of service
output_format = '01'        " char2         Format to display the output
IMPORTING
    years =                     " pea_scryy     Total years of service
    months =                    " pea_scrmm     Total months of service
    days =                      " pea_scrdd     Total days of service
    . " HR_HK_TOTAL_YOS
thanks u..

What does" connection manager 'invoke' failed to find service connection URL mean

What does "connection manager 'invoke' failed to find service connection URL" mean

HOLY CRAP!!!!
been going round this issues for hours....tried every fix i could find
phones and most of my pcs worked except 1, my main laptop.
i FIXED IT BY ENABLING GENIUS.!!!!!!!!!!
only on that laptop though.
try it.
i'm so happy right now.
not gonna turn it back off again yet cos while its working im not touching it again!

What is the usable space of normal redundancy disk group with two uneven capacity fail groups

Hi,
I have a normal redundancy disk group (DATA) with two uneven capacity fail groups (FG1 and FG2). FG1 size is 10GB and FG2 size is 100GB.
In this case what will be the usable space of the disk group (DATA)? is it 10G or 55G?
Thanks,
Mahi

Please, don't duplicate post with same matter.
This question was answered in your previous thread.
Re: ASM normal redundancy disk group

What permissions require to create CASES (Service Module). Creating new role.

Hi All,
Can you please suggest me what permission require to create new case from service module. Steps is below i followed to create case and assigned to user.
1- Created new blank role.
2- Went in service module.
3- Given the Create, Read, Write, Append & Append To permission to CASE entity on organization Level.
4- Assigned this role to user.
After assigning this role login into crm online and trying to create case. Its giving message "Insufficient Permission".
Kindly suggest me the steps i am missing here. Want to assigned single custom created role.
Thanks in Advance

Hello,
Recheck following article -
http://www.powerobjects.com/blog/2015/02/13/access-denied-identify-fix-security-role-issue/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+PowerobjectsMicrosoftCrmBlog+%28PowerObjects+Microsoft+CRM+Blog%29
Dynamics CRM MVP/ Technical Evangelist at
SlickData LLC
My blog

Two etherswitch service module in same chassis

I need to connect two NME-X-23ES-!G in the same chassis (Cisco 3845) and i have the following troubleshooting:
1.- The numbers of the ports of both cards are identical. They are 1/0/2 to 1/0/24 for both modules. It would not have to change the first number depending on in which slot is inserted the card?
2.- How I can configure the router for being able to arrive at both modules with the same VLAN. If I configure Etherchannel I cannot configure a IP address for the interface g1/0 or g2/0. If I do not have IP address I cannot make a session to switch module.
3.- If I use the connect command I cannot use slot number 1 of routers because it leaves a message which not this supported. What I can do for being able to use it?

Hello,
I think you need to configure stacking for both modules, here is what CCO says:
Configuring Stacking
Stacking is the connection of two switch modules resident in the same chassis so that they behave as a single switch. When a chassis is populated with two switch modules, the user must configure both of them to operate in stacked mode. This is done by selecting one port from each switch module and configuring it to be a stacking partner. The user must then connect with a cable the stacking partners from each switch module to physically stack the switch modules. Any one port in a switch module can be designated as the stacking partner for that switch module.
Beginning in privileged EXEC mode, follow these steps to configure a pair of ports on two different switch modules as stacking partners.
SUMMARY STEPS
1. interface fastethernet interface-id
2. no shutdown
3. switchport stacking-partner interface FastEthernet partner-interface-id
4. exit
5. interface fastethernet partner-interface-id
6. no shutdown
7. end
HTH,
GP

Active Directory Certificate Services setup failed with the following error: Overlapped I/O operation is in progress. 0x800703e5 (WIN32: 997)

Hi,
I am trying to install certificate services on a windows 2008 server (R2 ENT SP1) with a PCIe nCipher HSM module installed on it. The version of nCipher SW is = 11.30. It is a RootCA, and I am trying to use a key that is already stored in the HSM (I
have done this before with a PCI HSM (older HW version)). I select “Use existing private key” and “Select an existing private key on this computer” on the wizard, then i change the CSP to nCipher and click on "search" the key I am looking for
appears and I select that one. I repeat, I have done this before and it works with a PCI HSM module.
The installation is finished before being prompted to insert the operator cards, and it ends with two errors:
<Error>: Active Directory Certificate Services setup failed with the following error: Overlapped I/O operation is in progress. 0x800703e5 (WIN32: 997)
And:
<Error>: Active Directory Certificate Services setup failed with the following error: The group or resource is not in the correct state to perform the requested operation.
0x8007139f (WIN32: 5023)
The servermanager.log says:
1856: 2014-07-23 18:27:48.195 [CAManager] Sync: Validity period units: Years
1856: 2014-07-23 18:27:48.928 [Provider] Error (Id=0) System.Runtime.InteropServices.COMException (0x800703E5): CCertSrvSetup::Install: Overlapped I/O operation is in progress. 0x800703e5 (WIN32: 997)
at Microsoft.CertificateServices.Setup.Interop.CCertSrvSetupClass.Install()
at Microsoft.Windows.ServerManager.CertificateServer.CertificateServerRoleProvider.Configure(InstallableFeatureInformation featureInfo, DiscoveryResult discoveryResult, ChangeTracker changeTracker)
1856: 2014-07-23 18:27:48.928 [Provider] CAErrorID: 0, CAErrorString: 'Active Directory Certificate Services setup failed with the following error: Overlapped I/O operation is in progress.
0x800703e5 (WIN32: 997)'
1856: 2014-07-23 18:27:48.928 [Provider] Adding error message.
1856: 2014-07-23 18:27:48.928 [Provider] [STAT] For 'Certification Authority':
And:
1856: 2014-07-23 18:27:49.053 [CAWebProxyManager] Sync: Initializing defaults
1856: 2014-07-23 18:27:49.162 [Provider] Error (Id=0) System.Runtime.InteropServices.COMException (0x8007139F): CCertSrvSetup::Install: The group or resource is not in the correct state to perform the requested operation. 0x8007139f (WIN32: 5023)
at Microsoft.CertificateServices.Setup.Interop.CCertSrvSetupClass.Install()
at Microsoft.Windows.ServerManager.CertificateServer.CertificateServerRoleProvider.Configure(InstallableFeatureInformation featureInfo, DiscoveryResult discoveryResult, ChangeTracker changeTracker)
1856: 2014-07-23 18:27:49.162 [Provider] CAErrorID: 0, CAErrorString: 'Active Directory Certificate Services setup failed with the following error: The group or resource is not in the correct
state to perform the requested operation. 0x8007139f (WIN32: 5023)'
1856: 2014-07-23 18:27:49.162 [Provider] Adding error message.
Has anyone experienced this before? Am I missing something here?
Any help will be very appreciated
Thanks in advance
Best regards
Alejandro Lozano Villanueva

Hi, thanks for your support.
I have been playing around a bit with some ncipher commands and found this:
C:\Program Files (x86)\nCipher\nfast\bin>cspcheck.exe
cspcheck: fatal error: File key_mscapi_container-1c44b9424a23f6cddc91e8a065241a0
9aa719e4f (key #1): 0 modules contain the counter (NVRAM file ID 021c44b9424a23f
6cddc91)
cspcheck: information: 2 containers and 2 keys found.
cspcheck: fatal error occurred.
If I perform the same command on the original server (the server with the original kmdata folder and with the running RootCA services):
E:\nfast\bin>cspcheck.exe
cspcheck: information: 2 containers and 2 keys found.
cspcheck: everything seems to be in order.
Strange?
Moreover, when I do a csptest.exe command (also on both servers, i find this)
On the new server:
C:\Program Files (x86)\nCipher\nfast\bin>csptest.exe
nCipher CSP test software
=========================
Found the nCipher domestic CSP named 'nCipher Enhanced Cryptographic Provider'
Provider name: nCipher Enhanced Cryptographic Provider
Version number: 1.48
User key containers:
Container 'csptest.exe' has no stored keys.
Container 'Administrator' has no stored keys.
Machine key containers:
Container '352dd28a-17cb-4c6f-b6e4-bf39bcf75db5' has a 2048-bit signature key.
Container 'ROOTCA' has no stored keys.
Container 'csptest.exe' has no stored keys.
While in the old server:
E:\nfast\bin>csptest.exe
nCipher CSP test software
=========================
Found the nCipher domestic CSP named 'nCipher Enhanced Cryptographic Provider'
Provider name: nCipher Enhanced Cryptographic Provider
Version number: 1.40
User key containers:
Container 'csptest.exe' has no stored keys.
Machine key containers:
Container '352dd28a-17cb-4c6f-b6e4-bf39bcf75db5' has a 2048-bit signature key.
Container 'ROOTCA' has a 2048-bit signature key.
Container 'csptest.exe' has no stored keys.
As you can see, the container called ROOTCA, which is the one that I use during the installation, says it has no stored keys. While on the old server, it says it contains a key. Why is this happening? I dont know, I am copying the complete
key management folder from one server to another and initialize the security world with that folder as I always do, and i dont have any errors during this procedure.
Do you know what could be the cause of this? or how can I fix this? Thanks a lot, best regards.
Alejandro Lozano Villanueva

Portal authentication using two login module stacks?

G'day,
I am noticing something odd when I authenticate to the portal: there are two login module stacks used.
Background: I have created a custom logon page, which is basically a form with username/password input as per [this guide|http://help.sap.com/saphelp_nw04/helpdata/en/62/601e1eebf54ca6a97e2873c8c63517/content.htm|Changing the logon screen]. I then modified the authschemes.xml file by defining a new authscheme "mylogon" that uses my own login module stack ("mystack") and uses the new logon page ("mylogonform"). This new authscheme is then made the default reference:
<authscheme name="mylogon">
<authentication-template>mystack</authentication-template>
<priority>21</priority>
<frontendtype>2</frontendtype>
<frontendtarget>com.foo.bar.mylogonpage</frontendtarget>
</authscheme>
<authscheme-refs>
<authscheme-ref name="default"><authscheme>mylogon</authscheme></authscheme-ref>
<authscheme-ref name="UserAdminScheme"><authscheme>mylogon</authscheme></authscheme-ref>
</authscheme-refs>
When I want to access the portal, up pops the "mylogonform" page, and on clicking the "submit" button the portal page for the user is shown.
Now here is the interesting thing: when the "ticket" login module stack is unchanged (ie. it uses the BasicpasswordLoginModule), then the log shows that authentication to the portal uses just my login module.
This can be seen as follows, where I navigate to the portal, logon as one user, then logoff and logon as another user:
Message : LOGIN.OK
User: tu-1
Authentication Stack: mystack
Message : LOGOUT.OK
User: tu-1
Authentication Stack: mystack
Message : LOGIN.OK
User: Administrator
Authentication Stack: mystack
The "mylogonform" page is shown when logon is required in both cases.
However, if I modify the "ticket" login module stack by replacing the BasicPasswordLogonModule with a custom logon module that does automatic authentication, then the following is observed when the "mylogonform" page is displayed:
Message : LOGIN.FAILED
User: N/A
Authentication Stack: ticket
Message : LOGIN.OK
User: tu-1
Authentication Stack: ticket
For some reason, the modified "ticket" login module stack is now being executed, which was not the case when this login module stack was unmodified.
This stack automatically authenticates the current user (the initial failure is because the new login module asks the browser to send authentication data), and this "failure" causes the logon form to be displayed.
I can logon to the portal as the same user, and the logs show that "mystack" login module stack is used:
Message : LOGIN.OK
User: tu-1
Authentication Stack: mystack
Logoff shows that "mystack" is used for the actual logoff, but "ticket" is called again automatically and succeeds:
Message : LOGOUT.OK
User: tu-1
Authentication Stack: mystack
Message : LOGIN.FAILED
User: N/A
Authentication Stack: ticket
Message : LOGIN.OK
User: tu-1
Authentication Stack: ticket
(Again, the initial logon failure is the new login module requesting that the browser send authentication data in the next request).
This brings up the "mylogonform" page, even though it appears that a user has already been authenticated. If I try to logon as another user, the following is shown:
Message : LOGIN.FAILED
User: Administrator
Authentication Stack: mystack
Login Module                                                            Flag        Initialize Login      Commit     Abort      Details
com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT ok          exception false      true       authscheme not sufficient: basicauthentication<mylogonform
Central Checks                                                                                exception             Call logout before login.
I guess one cannot authenticate as a new user until the current user has been logged out.
So ... why does the "ticket" login module get called in the second case, but not in the first case (or only shows logging in the second case) ?
What is the logic behind portal authentication and showing a logon page?
If I want to use custom authentication and a custom logon page, why is the "ticket" stack called at all?

Jayesh,
there is no such thing like "login module stacks". The <b>do</b> exist on the other hand:
- login module
- logon stacks
Login module and logon stacks are part of the JAAS concept for defining a complex pluggable authentication scheme, original by SUN (see: java.sun.com/products/jaas)
A logon process is defined by a logon stack which itself consists of several login modules. Each login module performs an authentication step. Example:
login module 1: check if valid sap logon ticket provided
if module 1 fails: then login module 2: request user id/password
if module 2 succeeds: then login module 3: create new sap logon ticket for user
You can define multiple logon stacks and configure individual applications to use the one stack or the other.
The logon stack configuration is done using visual administrator. Here select the security provider service for configuring logon stacks.
btw: As logon stacks are "java-only", there are no transaction names (which only exist on Web AS ABAP).
Regards,
Dominik

AE CC Render error output module failed

Hi, I tried my best to find this answer on the forums but couldn't find anything current.
I have isolated two issues in AE CC where I can duplicate a failed render with this message:
After Effects error: Rendering error while writing file "xxx". An output module failed. The file may be damaged or corrupted. (-1610153464)
This happens when opening an AE CS6 project and trying to render a simple comp with only one text layer and a moving mask. It also just happened after my first round trip test with Cinema 4D. I could RAM preview the c4d layer but the output to Quicktime h.264 failed.
I have even tried a full reinstall of AE CC. I have the basic FxFactory Pro plugins and MagicBullet Looks installed, but neither are being used since this is a single 1280x720 comp with a single C4D layer. Plus like I said it failed with the same error in past CS6 files.
I don't know how to force disable a plugin to test that, but I can't see how an unused plugin could cause a render to fail like this.
I'm on a new (late 2012) 27" iMac
3.4 GHz Intel Core i7
8GB RAM
NVIDIA GeForce GTX 680MX with 2GB VRAM
OS X 10.8.4
AE CC 12.0.0.404
CUDA driver 5.0.59
Thanks for any suggestions!
Matt

Olaf, did you read my reply where I explained my solution? First you should try the steps outlined in the article Todd references:
http://blogs.adobe.com/aftereffects/2011/02/troubleshooting-quicktime- errors-with-after-effects.html
There seems to be a good way to isolate if it's the same issue I had, though. Let me go into a bit of depth for you.
The trick was to launch the OS X app called Console, located in Applications > Utilities. It is a program that compiles and displays the system logs in real time. It's great to see the little things happening in the system that don't make it into the user interface. When I had my Console up and generated that same error you're having, I noticed this error in the log:
The key here is the Adobe QT32 Server, which is mentioned in the TCP part of the article I linked to above from Todd. In my case at least, what was happening was that a third party app called AirServer was talking to the system's QuickTime over the same TCP ports the QT32 Server engine was trying, and it resulted in Adobe QT32 Server crashing, and that alert being thrown up in AfterEffects.
If you're in the same boat, it means you have some sort of app or system extension that is also talking to QuickTime over TCP. That may not make any sense, but the easy thing to do is quit ALL third party apps, then quit AE, then restart AE.
In my situation if AE gave me the error and then I quit AirServer, the error still happened because Adobe QT32 had already crashed. You have to relaunch AE after closing the offending third party app.
To be sure you've quit all third party apps, open Activity Monitor (Applications > Utilities), chose "My Processes" from the dropdown menu, and scan through the list to make sure. You don't have to recognize all the processes there, but you should be able to recognize any third party ones you put there.
Hope that helps!
Matt

VPN service module choice 7600-SSC-400 vs. SPA-IPSEC-2G

Need to decide between the two VPN service module: 7600-SSC-400 and SPA-IPSEC-2G for a 6509 sup 720 3bxl. Not sure what is the difference and couldnt find too much info just searching the internet. What would be the benefits of one or another?

Hello,
You will need both. The 7600-SSC-400 is the carrier module of the SPA-IPSec-2G.
There is more information on this via the following link:
http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/6500series/76ovwvpn.html
Warm Regards,
Rose

What if two service modules fail on a MDS 9513?

Similar Messages

Maybe you are looking for