What ports to open between Connection broker and Web access hosts

I have setup a 4 node 2008 R2 RDS farm (1 connection broker, 1 Web access, and 2 session hosts.) They were all built from the same image, but the web access and connection broker will not talk to each other. They are all on the same subnet, and ips are x.x.x.200-203 The Web access server can ping the Sesions hosts, the session hosts can ping each other, web access and the connection broker. But the Web access and Connection broker cant ping each other. I turned off the windows firewall and they can ping, and connect... So whats ports does it need open?
Thanks!
~M

Hello,
Do you need any further helps? Please let us know it. Thanks.
· Lionel Chen
TechNet Subscriber Support in forum
If you have any feedback on our support, please [email protected]
This posting is provided "AS IS" with no warranties, and confers no rights.

Similar Messages

RDS 2012 Connection Broker and Web Access in different domains

Hello!
I'm trying to add Web Access (WA) server to RDS 2012 Deployment. WA server and other servers in Deployment are in different domains (in different forests with 2-way forest trust).
WA server was added to Deployment
successfully without any warnings.
We have many applications published but in this new WA server there are no application icons in Rdweb page at all.
There is nothing interesting in logs on WA server as well as on Connection broker servers.
Is this design
acceptable? Which additional actions are needed to make application icons visible?

Hi,
Please refer below links and cross verify the Web Acess server settings.
http://blog.kristinlgriffin.com/2010/03/rd-web-access-is-emply.html
http://social.technet.microsoft.com/wiki/contents/articles/5974.the-case-of-invisible-remoteapp-programs-a-k-a-no-remoteapp-programs-listed-on-rd-web-access-site.aspx
Regards,
Manjunath Sullad

What is the relation between adobe forms and web dynpro

hi
what is the relation between adobe forms and web dynpro

Hi Jyothsna,
Adobe forms are advanced to smartforms and scripts.
Adobe forms are much easier than smartforms they are online forms.
they can be developed online.
Adobe forms : This is another SAP tool designed to create your own forms. The transaction for this is SFP.
How to use them: You can create a sales order form in adobe form and send to the sales reps. Sales reps can fill this form when they are not connected to internet / SAP system. Once they connect to SAP just send an e-mail to a specific user id in outlook. You got to customize and code how do you want to process once you receive this form. This enables you to create orders even when you are not connected to the system. Hence no data loss. This is not how i used though :-). This is just my idea.
What is the difference between Adobe forms and smart forms / scripts.
Smart forms / scripts are used to show the data in SAP. Most likely you will use these to print / display some kind of reciepts / forms. Many companies must be using this for hard copies / ALE / EDI or to transfer data from SAP to others.
Adobe forms are used to post data into SAP from SAP too. So this has an additional feature compared to smartforms.
Please check this link
http://www.erpgenie.com/index.php?option=com_content&task=view&id=600&Itemid=77
Web dynpro in one of the component in NETWEAVER.
Web Dynpro is the SAP NetWeaver programming model for user interfaces and provides support when developing the Web representation of business applications. The Web Dynpro model is based on the Model View Controller paradigm, and has the following features that build on the classic dynpro model:
·        Clear separation of business logic and display logic
·        Uniform metamodel for all types of user interfaces
·        Execution on a number of client platforms.
·        Extensive platform independence of interfaces
please check this link
http://help.sap.com/saphelp_nw04/helpdata/en/a5/1a1e3e7181b60ae10000000a114084/content.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/77/3545415ea6f523e10000000a155106/frameset.htm
Best regards,
raam

Relation between RD Connection broker and RD session host farm in 2012 R2

Good Day
I have configured standard RDS session based deployment recently on 2012 R2 servers
Everything is working as expected
The setup has TWO RD Session host, 1 Session Broker, one RD Web access and one RD Gateway
I have created 2 DNS records named Rdsfarm.domain.com for my RDS1 and RDS2 session host servers and if I connect to this
rdsfarm.domain.com with RDP from TS clients, i am able to connect to any one of TWO rds servers without any problem
However some part is not clear to me
I have not added rdsfarm.domain.com any where except my RD Gateway server RAP policy
Also I have added my RD Broker server in RAP allowed group above.
I don't see any config where this farm name is associated with my RD Broker server
I have tried to connect to RD broker server from client, but it didn't redirect me to RD session host servers
If I try to connect to my RDS servers with their FQDN , it gives me error that I must connect thru farm name
Can you please help me to understand relation between RD session host servers farm and RD broker server ?
Also I would like to know what exactly happens in background when user start RDP session by entering RDS farm name
Note that RDS farm name is generic DNS Host(A) record pointing to my both RD session host servers
I wanted to know is there any command or configuration I missed out as I don't see any config where Generic RD Session Host Farm name (DNS Host(A) record) is associated with my RD Broker server ?
Thanks
Best Regards
Mahesh

Hi,
If you are opening Remote Desktop Connection and manually connecting to the broker then it will not work properly because you have no way of specifying the target collection in the user interface. If manually using the RD Client to connect is a requirement
what you can do is set the default collection in the RD Connection Broker server's registry.
To specify the default collection, please create the registry setting below in the broker's registry:
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\ClusterSettings
DefaultTsvUrl REG_SZ tsv://vmresource.1.<VDI pool ID>
To determine the correct value for DefaultTsvUrl please open RDWeb in a non-IE web browser and click on the icon for the collection you would like to be the default, then edit the downloaded rdp file with Notepad and copy the portion of the loadbalanceinfo
setting that is similar to the above.
An alternative would be to download the .rdp file from RD Web Access and double-click it to connect.
As I mentioned above it is generally intended to have users connect via RD Web Access or RemoteApp and Desktop Connections feed or Remote Resources (uses the feed) so that the client will obtain the proper .rdp file from the server.
To configure the FQDN that is published in the .rdp files you can use the cmdlet below:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
Below is a sample configuration based on what you have written:
1. Published FQDN (using cmdlet above): rdsfarm.domain.com --> points to ip address of RDCB server. When launching a RemoteApp or Full Desktop connection from RD Web Access, the prompt window will show this FQDN next to Remote computer.
2. Gateway FQDN: gateway.domain.com --> externally points to public ip address of your RD Gateway server. TCP port 443 and UDP port 3391 need to be forwarded to the RDG's internal ip address. When launching a RemoteApp or Full Desktop
connection from RD Web Access, the prompt window will show this FQDN next to Gateway server. This FQDN is set in Server Manager -- RDS -- Overview -- Deployment Properties -- RD Gateway tab.
In RD Gateway Manager -- Properties of RD RAP -- Network Resources tab you should select Allow user to connect to any network resource or define a RD Gateway-managed group that has all of the FQDNs that the user will need to connect to.
3. RD Web Access FQDN: remote.domain.com --> internally points to the ip address of your RDWeb server, externally points to the public ip address of your RDWeb server. This is the name you give users if they want to use RD Web, for example,
https://remote.domain.com/rdweb
If you want users to manually connect using Remote Desktop Client as well as use RDWeb it will be a bit confusing to them since they will need to use one FQDN when manually using the client and a different FQDN when using RDWeb. You could fix this
by having them only use one method or run RDWeb directly on the RDCB server, that way users would only need to know a single FQDN for both RDWeb and manual connections.
4. You should have a wildcard certificate with subject of *.domain.com set for all RDS purposes in Deployment Properties.
Thanks.
-TP

Difference between BLOCK DATA and WEB ACCESS BLOCK?

Currently my account shows I have both BLOCK DATA and WEB ACCESS BLOCK in place. I did this a couple of years to prevent data charges. Works perfectly. Now I'm trying to upgrade one of my lines to a Kin Onem because of the WiFi option and when I add the phone to my shopping cart and go to the Select Features & Services Page I see a message at the bottom that says: Features We Needed To Remove (Because they're incompatible with your phones or plan) - Block Web Access.
It looks like I don't have a choice when ordering the phone, but what exactly will removing the Web Access block do? Maybe I have to turn it off anyway to use the WiFi anyway right? I just don't want to incur any data charges.
Someone please help. Thank you!

"Data block" actually blocks your phone's ability to connect to the 3g data network. What this means is your phone can't create an internet connection on a cellular network. Web Access block specifically blocks the browser/mobile web on your phone from making a connection. Unblocking mobile web will not cause your phone to be able to connect to the cellular data network (resulting in 1.99/mb charges), but will allow the browser on the kin to connect while you're using wifi.

Pros and Cons between BEx client and Web access

Dear all,
I am quite new to BI 7.0 and have some question about frontend tools.
I am looking for a comparison material describing pros and cons of BEx client application and Web access in BI 7.0.
There are many tools in BEx suite and I am a bit confused about what fuctionality each tool has or what to consider to choose the right tool.
Thanks a lot in advance and appreciate any input.
Regards,
Kazuya

Hello,
Shortly speaking there are 4 tools and you need at least 2 of them:
1. Query Designer: you need it always as this is a tool for defining queries
2. Web Application Designer: you need it if you want create web reports
3. Report Designer: only if you want create formatted reports in web
4. BEx Analyzer: if you want to run queries in Excel (Analyzer is an add-in)
Help on BEx:
[http://help.sap.com/saphelp_nw70/helpdata/en/b2/e50138fede083de10000009b38f8cf/frameset.htm]
-> BI Suite: Business Explorer
Regards, Karol

Publish RD Gateway and Web Access with One-Time Password (OTP) / Two-factor Authentication WITHOUT ISA/TMG server

Hi everybody,
I've been struggeling with this problem for a few weeks now and can't find a way to solve it.
We have an RD farm (Server 2012) which consists of two Remote Desktop Servers with Connection Broker and Web Access.
I've recently published a new server, containing RD Gateway and Web Access in our perimeter network.
Now we've got restrictions that OTP/2FA must be used for the external deployment and we've decided to go for a solution from Gemalto.
The "program" is called IDConfim and the server is called SA Server (Strong Authentication).
Also it's important that NO ISA/TMG server is supposed to be used, the OTP/2FA is supposed to work seamless with the Web Access/Gateway.
After hours discuss we came to a point were their NPS agent setup would be the only way to accomplish our goals.
The setup is supposed to be like this:
LAN:
1 DC (2008 R2)
RD Farm (2012)
1 SA Server (2012)
DMZ:
RD Gateway/Web Access (2012)
Were Gateway and Web Access should forward the authentications with NPS to the NPS agent on the SA server.
When you print your AD account to authenticate you add the 6 digits of OTP which you recieve from you mobile app.
Initially this seems to work, the Gateway forwards the request to the remote NPS server, BUT only if you write the correct AD password
(without the OTP extension).
If you write the correct AD password the authentication is forwarded to out SA Servern and it's beeing rejeced because the password doesn't
contain the correct OTP extension.
The problem comes here.
When you write you AD password along with the OTP extension you get a Windows Security error in the eventlog (On thw Gateway server) like this:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: user
Account Domain: domain
Failure Information:
Failure Reason: Unknown username or password.
Status: 0xc000006d
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: server
Source Network Address: 192.168.x.x
Source Port: 63003
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
What i can see it's a NTLM error, but hey?! aren't we supposed to forward all authentication handeling to the remote NPS server?
The problem is that no matter what i try the above problem stays there.
Is it not possible to just forward ALL authentication handeling to a remote server?
The only solution I've found to get it working someday in the future is this:
"Remote Desktop Pluggable Authentication and Authorization", which is supposed to be introduced in 2012 R2.
Also this link describes it:
http://archive.msdn.microsoft.com/Release/ProjectReleases.aspx?ProjectName=rdsdev&ReleaseId=3745
Please, bring me some answers before my head explodes! :)
PS, long question = maybe some errors, ask me if something is unclear.

Hi,
Based on our experience, if the NTLM error occurs, please check the password.
Regards,
Mike
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Difference between connection pooling and simple connection

Anybody please tell me what is the Difference between connection pooling and simple connection and also where we define connection pooling and how.
Thanks
Please reply soon
amitindia

Creating and closing connection to the database is a relatively slow process. Equally connections use database resources so you can't just open as many as you want.
A connection pool maintains a number of open connections throughout the lifetime of the application. Instead of opening and closing the connections your application just "borrows" them from the pool when they're needed.
If the pool runs out of connections it will usually create new ones as needed until you reach some predefined upper limit.
A good connection pool will also manage connections which have failed for any reason, and report code which fails to return connections to the pool (ie connection leaks).
The number of connections created at startup is referred to as the "low water mark" and the maximum number that the pool will allow to be opened at any given time is the "high water mark". If no connections are available client code will generally block until one is released.
If by "defined" you mean where can you get a working implementation then your database or application server vendor is likely to provide one. Also the Apache Jakarta Commons includes [url http://jakarta.apache.org/commons/dbcp/]an implementation which you can use with any JDBC driver.
Dave.

Which port is open for connection ?

how could I know which port is open for connection ?
In the java, I use JDBC to connect to Oracle,
connection = DriverManager.getConnection("jdbc:oracle:thin:@localhost:1521:sid", "scott","tiger");Do we have a command to show open port ?
Thanks.

What is your Oracle version, and do you use dedicated connections or "shared servers"? From your port number invoked (1521), I'll guess you use dedicated connections. In that case, the listener (located at 1521) will "spawn" a dedicated process for your session, and tell this process to start on another port (usually falling on a certain range, depending on your OS). An easy way to see this would probably to turn listener tracing on. Here's what I found in the log file after I started a new (dedicated) session on my 10.2 DB:
"22-OCT-2006 21:31:16 * (CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=ora102)(CLIENT_REGISTRATION=ora102)(CID=(PROGRAM=C:\oracle92\bin\sqlplusw.exe)(HOST=DANIELROYLAPTOP)(USER=Daniel))(CLIENT_REGISTRATION=ora102)) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.100)(PORT=3198)) * establish * ora102 * 0"
HTH
Daniel

What is the difference between the $19 and $29 iphone wall charger

What is the difference between the $19 and $29 iphone wall charger

Product Information
This 2-meter USB 2.0 cable connects your iPhone, iPad, or iPod with Lightning connector to your computer's USB port for syncing and charging or to the Apple USB Power Adapter for convenient charging from a wall outlet.
Highlights
Reversible design
What's in the Box?
Apple Lightning to USB Cable (2 m)$29
Product Information
This USB 2.0 cable connects your iPhone, iPad, or iPod with Lightning connector to your computer's USB port for syncing and charging or to the Apple USB Power Adapter for convenient charging from a wall outlet.
Highlights
Reversible design
What's in the Box?
Apple Lightning to USB Cable
$19

What is the diffrence between a javabean and EJB

hi!
what is the diffrence between a javabean and entreprise jvaabeans! i mean which are the uitilization featires of eaxh one !

i am seeking for a solution for my problem , in fact i ma trying to implement and develop an application with java that allows a certain range of IP adresses to be connected to a database server in order to extract the suitable data from the server .
let me explain mor ethe suitation , in fact what i am loking for is to use javabeans to grant my application much more consistence and pertinence : si i am asking if it could be possible to use javabeans in my case especially if i am not trying to developp a web application but a cleint /server one allowing some services.
The application is in fact dealing with a stock exchange market and what i am trying to do is to grant particilar registrated customers to have the informations that they need ( portofolio, currency's status, market indicators, .) also drawing some charts decribing rates, variations, and others specefic financial caracterestics .So , if we consider that this application is not a web application ( no HTTP request and no servers like apache or others ) how it is possible to use javabeans and not EJB to build the application? i mean what could be suitable and preferable to rely on and dvelop to ensure a good java application !!
if you need more details to help you find the answer for me don't hesitate to answer me back !!
Someone here gave me that answer
use RMI to code the services and (Updateable) Value Objects to pass the information between tiers.
RMI is an all-java distributed component framework (ie. EJB, CORBA, DCE/RPC, DCOM, etc.), that is very suitable for developing non-containerized multi-tier applications. Refer to the RMI trail in the Java Tutorial as a starting point for coding RMI solutions (http://java.sun.com/docs/books/tutorial/index.html). Under this scenario you would code the database access service as an RMI service (server-side). Client/server communication should be facilitated through the use of JavaBeans/classes that wrap the information being passed (customer information, portfolio details, market information, etc.) - these are refered to as 'Updateable Value Objects' (a design pattern). Graphing and charting would be handled in your client from the information received from the (RMI) server. GUI JavaBeans can be used to provide this functionality as well as other client-side services. There are numerous "shrink-wrapped" components for GUIs available on the market just peruse any Java magazine to find them.
but how comes? how can i do it !! and where can i find more information please about 'Updateable Value Object "
thanks

What is the difference between Video-out and mirroring?

What is the difference between Video-out and mirroring? I can't get iPhone 4 video to work on my TV screen
I have just bought an MD098ZM/A (Apple 30-pin Digital AV Adapter). I am struggling to get it to show a picture on my TV. I know I'm doing something right because the audio is coming out of my TV speakers but no picture on the TV screen.
I have used the same HDMI channel (on the TV side) with the same cable and my thunderbolt port (MacBook Air) without any trouble - and on the same app (BBC iPlayer download then full-screen mode).
Now I note that the packaging for the MD098ZM/A says video-out on iPhone 4 but mirroring only on iPhone 4S. I only have an iPhone 4 (not the 4S). Now if the lack of iPhone 4 support for mirroring means that I can't play video material out to my TV, then in what sense is there any video-out capability at all?
There is only safety and warranty paperwork in the Apple adapter packaging - no help information. And I haven't found further guidance online either.
I do note somewhere online that it suggests that basic non-mirroring video-out (for this adapter) only works with some external TV sets. Any way of finding out which? I'm using a Sanyo CE32LD90-B LCD TV if it helps.
So far not doing very well.

Now found these but have had to give up on this adapter!
http://manuals.info.apple.com/en_US/iphone_user_guide.pdf
http://support.apple.com/kb/HT4108

What is the difference between document class and normal class

Hi,
Please let me know what is the difference between document class and normal class.
And I have no idea which class should call as document class or call as an object.
Thanks
-Actionscript Developer

the document class is invoked immediately when your swf opens. the document class must subclass the sprite or movieclip class.
all other classes are invoked explicitly with code and need not subclass any other class.

In OSX Activity Monitor, what's the difference between 'free' memory and 'inactive' memory

In OS X Activity Monitor, what's the difference between 'free' memory and 'inactive' memory. My daughters 2Gb MacBook Pro is very slow, it probably needs more memory but there is almost 1Gb of 'inactive' memory but no 'free' memory when an application is opened.
Thanks

Free RAM is the one that has not been used by any application since you started up your Mac, and inactive RAM is the one that was used by an application and it is not in use anymore.
1 GB of inactive RAM is a lot, and it may be the cause of the slowness. There are a lot of apps that allows you to turn inactive into free RAM. I use FreeMemory, but have a look at the Mac App Store.
If you are a developer, you can do that with a command you can type into Terminal:
sudo purge

What's the difference between shut down and log out?

Hi,
I have a MacBook Air and will sell it.
I like to take out my name but don't know how.
What will happen if I Log Out (my name comes after that)?
What's the difference between Shut down and Log out?
Help please,
Thanks

Welcome to the Apple Support Communities
The shut down turns off the Mac and a log out closes your user and take your computer to the log in screen. To sell the Mac, you have to reinstall Mac OS X erasing the disk. Open  > About this Mac and copy Version

What ports to open between Connection broker and Web access hosts

Similar Messages

Maybe you are looking for