ZCC remote contol terribly slow over WAN links compared to RC via ZDM 7 or RDC

I think the subject tells all. The connection is via a direct VPN
connection of the remote controlling PC to the LAN of the controlled PC
- so there is no proxy inbetween.
I disabled encryption but that did not help much.
Part of the problem seems to be, that Windows RDC and ZDM 7 remote
control are able to saturate the WAN link during a page refresh,
whereas the ZCC remote viewer only uses 1/4 to 1/2 of the link
bandwidth at most.
W. Prindl

Correct.
If you enable "Password Based" remote control in the RC policy, you can
use that password to remote control the PC from virtually any VNC Client.
Clearly this gets around some of the security features provided with ZCM
Security, but allows for interoperation with other VNC Clients if you
wanted to use them for some reason.
On 5/14/2010 6:06 PM, kjhurni wrote:
>
> craig_wilson;1974693 Wrote:
>> Password vs Rights based Security.
>>
>> Rights Based Security is what Novell provides on top of VNC for added
>> security.
>>
>> Password Based Remote Control is VNC security, but Novell allows for
>> central control of the password as well.
>>
>> Password Based Remote Control can be enabled or disabled via your
>> Remote
>> Control policy.
>>
>>
>> On 5/13/2010 2:22 PM, W_ Prindl wrote:
>>> Same question as you ?
>>
>>
>> --
>> Craig Wilson - MCNE, MCSE, CCNA
>> Novell Knowledge Partner
>>
>> Novell does not officially monitor these forums.
>>
>> Suggestions/Opinions/Statements made by me are solely my own.
>> These thoughts may not be shared by either Novell or any rational
>> human.
>
> So with password-based security you can you "any" VNC viewer, provided
> you enter the correct userid/password to gain access?
>
> With rights-based you have to use the one from ZCM?
>
> (Just checking to make sure I'm understanding correctly)
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Similar Messages

FXO traffic is going over Wan link after enabling QoS

Hi,
We have CCM 5.0,2811 voice gateway,1 4FXO and 1 g.shdsl card on it. 4 Telco lines are on 4FXO card.CCM is at the other side of g.shdsl line.Topology like that,
2811 ---------------- CCM
4fxo g.shdsl
When a call receives from FXO port, system is working normally without QoS. When we enable QoS traffic,traffic is going over wan link then return again.Because of that,delays and timeouts occuring.Router's config is at the attachment. Please Help!
Thank you

Check your H323 gateway config in CCM to be sure the Media Termination Point Required box is unchecked. Using MTP forces the call to terminate on the closest MTP resource which is likely at your CCM site.
Please rate helpful posts.
Dave

SQL Server Connection over WAN Link

I am planning
to setup a BlackBerry server and connect to a remote SQL Server over a
WAN link with 150+ms ping time. Is there a known tolerance for
SQL server connection latency? For example, I have been told by
RIM that ping time for Exchange should be around 35ms so if it is
higher, a BES should be placed next to the Exchange server. Any reply would be greatly appreciated.

There is no problem with slow connection :-)
You might get lots of waits in the SQL side (most likly there will be lots of
ASYNC_NETWORK_IO) which you can monitor using sys.dm_os_waiting_tasks and sys.dm_exec_requests. But if there is no disconnections then most small application will work OK
[Personal Site] [Blog] [Facebook]

Transport dot1q vlan tagging over wan link

Hi,
I would like to transport 802.1Q vlan tagging over a wan link, is it possible ?
I heard about l2tp V3...
Best regards

Hi,
You would have to use a technology such as Ethernet over MPLS (EoMPLS) or VPLS. This technology is referred to as Layer 2 VPNs. You can get more info on this at the following locations:
EoMPLS (part of the Cisco Any Transport over ATM suite):
http://www.cisco.com/en/US/products/ps6646/products_ios_protocol_option_home.html
VPLS:
http://www.cisco.com/en/US/products/ps6648/products_ios_protocol_option_home.html
Hope that helps - pls rate the post if it does.
Regards,
Paresh

User home directory on server over WAN link

Hello all,
I have a performance question about home directories. The situation is:
- 3 locations, 3 servers (OS X server 10.4.7 (Xserves))
- WAN connections are 1 Mbit/s
- All clients running 10.4.7 (imac G5 1.6/1.8 GHz.)
- User home folders are all located on one of the three servers
Two locations are OD replicas from the first location.
User home folders are located on the server at the location where they work most.
Some users work 4 days at location A, and 1 day at location B or C.
For simplicity let's say I have a user called A, with home directory located on server at location A.
User A is now working one day at location B. User logs in successfully, but everything is very slow (1 Mbit WAN link).
I really like the flexibility of server based home folders. Also the fact that there is no data on the local machines is very much appreciated (physical security, backup etc.). I was thinking about portable home directories, but that won't solve my problem, given the fact that all data needs to be copied once from location A to B (especially when users use different machines on the other location). Data will be stored on the local machines as well in that situation (but can be synchronized).
It is of course possible to synchronize data from server A to B and C when a user logs off (rsync). Is there any way to tell OD that it should pick a user home directory based on the location where that specific user logs in? Disk space isn't really an issue.
The performance is really awful using a 1 Mbit connection and upgrading the connections is not really an option (well maybe I could get it to 2 Mbit, but that won't solve this problem).
Thanks for any advice.
Jordi
Powerbook G4 Mac OS X (10.4.7)

How about firewire harddrive or ipod-based home directories which the users could take to different offices with them?
If not... I really think that your best option is to work to get Portable Home Directories working. Remember it is only the data that has been changed that is synced each time. You mention you are concerned about backup, but this will be done from the server after user data is sync'd there. The physical security worries can be taken take of by using open firmware passwords.
Is there any way to tell OD that it should pick a user home directory based
on the location where that specific user logs in?
By using DHCP at each site to bind the clients you can force them to use the Home Diretory you specifiy at each site. But this sounds like a sync & backup nightmare to me and don't forget rsync will mangle your acl's and other meta data.
hth,
b.

Synching/Caching Critical Patches across WAN links

It is my understanding that all Microsoft Critical Patches will automatically cache(download), create themselves as bundles and become part of the content-repo which will automatically sync between all primary servers. If I have the check box for caching to the Satellites, they will also automatically cache to the satellites.
Does this happen immediately upon download/caching of the critical patch? Does this mean that if I have 150 remote sites connected over WAN links, my corporate site will be flooding my WAN links with these updates all AT THE SAME TIME? I have both a 10.2 and a 10.3beta testing - I can at least control in 10.3 that it will only happen at night and only take so much of the remote sites' bandwidth, but that still doesn't help out my corporate site's bandwidth if it's trying to send out to 150 remote sites. Any thoughts, suggestions, workarounds or clarification?
Is there any way to know when/what time a patch actually downloaded/cached to the Primary Servers content-repo OR to the Satellite content-repo?

The "Cache automatically to satellites" specifies what to cache, whereas the replication interval (Under Server Hierarchy->Configure Satellite Server) specifies when. So the sequence would be:
1. Keep the "Cache automatically to satellites" checked.
2. Set the replication inteval for the satellites (ZCC->Configuration->Server Hierarchy->Configure Satellite Server) to something very high (say, 999 days). This will prevent satellites from replicating content by themselves
3. Go ahead and set up a scheduler task to run zac wake-cdp at the required time.
Others,
Any other suggestions?

Slow merge replication over a WAN link - only downloads

Hi all,
We've been using SQL Server merge replication for a few years to synchronise data between our data centres, but we are now suffering with a big performance issue. This may be because the amount of data we are synchronising has increased a lot this year.
Our publisher is an always-on data centre in the UK. Our subscriber is a mobile data centre that travels around the world and is on for periods of up to a week at a time, approx. 25 times a year. However, it also spends the same amount of time (if not more)
switched off whilst on its travels - it is a well travelled data centre!
We have 5 database that we synchronise on these servers. However, one of our databases has high numbers of data changes between periods of subscriber downtime and our issue is that it take days to catch up when the server is powered up - the other databases
are fine.
Downloads from publisher to subscriber run at about 1.5 rows a second (which is annoying when we have hundreds of thousands of rows) but strangely uploads from subscriber to publisher run about ten times faster.
Things I have checked / tried:
all tables have non-clustered primary keys on guid columns that have the rowguid property set
changing the generation levelling threshold doesn't help
setting the agent profile to high volume doesn't help
running a trace at the publisher and subscriber shows the queries are all running very fast (less than 20 m/s generally, but there are gaps of 200 m/s or so between some batches of queries)
analysis on our WAN link shows we have huge amounts of bandwidth spare
analysis on our servers show we have huge amounts of Ram and CPU spare
Some of the places the subscriber is at do suffer from high latency but this doesn't seem to have an impact - 300 m/s or 100m/s and we still get the same poor performance.
One things I did wonder about - does the replication confirm to the publisher every time it has successfully processed a row at the subscriber? If we have thousands of rows and there is a latency on the line will this compound the issue if it confirms each
item? If this does happen, is there a way to batch up messages between publisher and subscriber?
Any help that you can offer will be gladly received!
Thanks
Mark

1) merge replication processes the uploads/downloads in batches. So no, there is no confirmation for each row processes, but there is per batch. If there is an error/conflict a batch is retried as singletons (a single row processed at a time), so you need
to minimize conflicts/errors.
2) No, but you should use pull and wan accelerators for max performance and change your profile to use 2000 for the following:
MaxDownloadChanges
MaxUploadChanges
UploadGenerationsPerBatch
DownloadGenerationsPerBatch
UploadReadChangesPerBatch
DownloadReadChangesPerBatch
UploadWriteChangesPerBatch
DownloadWriteChangesPerBatch
set network packet size to a large value - you will need to work with your wan engineer to find out what works best. 32k will likely be best.
Also you may want to copy a file of a known size from your publisher to your subscriber and then from your subscriber to your publisher to see if there is a significant difference in time. For drives will yield significant differences.
I have found that you may have a trigger which is generating a large volume of unnessary changes. You will need to see what table/article is generating all the changes and evaluate whether the changes are legit.
Precomputed partitions should speed up the enumeration times. Ensure you have supporting indexes - the missing indexes DMV helps here.
Lastly you may find that a reinitialization is faster than processing the changes.
looking for a book on SQL Server 2008 Administration?
http://www.amazon.com/Microsoft-Server-2008-Management-Administration/dp/067233044X looking for a book on SQL Server 2008 Full-Text Search?
http://www.amazon.com/Pro-Full-Text-Search-Server-2008/dp/1430215941

Eigrp - How to modify Admin distance for redistributing connected links and over WAN

We have a single EIGRP domain 101 across 2 locations (A and B) separated by a WAN link. Each location has a number of L3 switches at the IDF behind the router which has the L3 vlans VL1, VL2 etc. We run eigrp 101 across all the switches and on the routers but we dont advertise any of the L3 vlans on them and we do redistribute static and connected for the static and the vlans to be distributed on eigrp.
Qn
1. How do i reduce the admin distance of the directly connected vlan on IDF on our core switch. ie. Vl1 and Vl2 that are distributed via connected has a admin distance of 170 locally as the other switches sees that as External without having to advertise the networks individually on each switch.
2. Is that possible to increase the admin distance over the WAN link without having to create a 2nd eigrp domain. ie.. Add a admin distance of say 50 over the WAN link and that way devices on both sides do see that there is a 130 distance for the remote side and 90 for local for admin distance.
Why?
I am trying to separate two locations and i don't think we will be able to create an additional domain and i am trying to see alternate methods of achieving this.
Additional info-
The design i mentioned has 2 locations with a WAN connection and i have mixed (90/170) distance based on where the routes are coming(eigrp/connected/static) from eventhough everything is within the same network. We only have 1 Eigrp network 101 and was looking to alter the AD for just connected if at all possible.
Assuming i put in all the routes into the network how can i make site 2 see the site 1 network with a larger admin distance and 1 to 2 with a larger admin distance while not altering the admin distance within the local site.
Underlying reason: We are getting a MPLS link(lower bandwidth) connecting to site 3,4 and 5 at both sites and wanted to clear the internal routing first before i can add them or redistribute them into bgp.

If these two sites are connected via a P2P link and you are exchanging EIGRP routes across it then you need to be aware of what you redistribute into BGP because each site will know about it's own subnets but also the other sites subnets.
If you just redistribute all EIGRP at both sites then it's a lottery as to which MPLS connection the non EIGRP sites use.
So you either need to -
1) when you redistribute EIGRP at each site into BGP use a route map and only allow the local networks for that site
or
2) if you want each of the EIGRP sites to back each other's MPLS connection up you could have them both advertise out all networks ie. their own and the other EIGRP site's networks but modify the BGP attributes of the non local networks so they are least preferred.
You still want to use a route map to ensure only the local and other EIGRP sites network are redistributed because remember you are also receiving BGP routes from the non EIGRP sites and redistributing these into EIGRP at each site and these are exchanged via the P2P link as well.
It realty depends on what you are trying to do.
The actual basic redistribution is very straightforward, see this link -
http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/113506-failover-eigrp-bgp-00.html
but you need to decide what you are going to do in terms of EIGRP to BGP advertisements as covered above.
I'm not trying to make things complicated for you but because you have a P2P link connecting these sites and you are running EIGRP over it then any routes received via BGP will be redistributed into EIGRP and you need to make sure they are then not redistributed back into BGP on the other site router.
Jon

Video Conferencing over Low speed WAN links

Hi there,
Can somebody explain possible point-to-nultipoint video conferencing solution over low speed WAN links ?
( I have central site and about 20 remote sites - hub and spoke configuraition)
a. What is the minimum BW requirement
b. If using Cisco Video advantage at users desktop how do we select the proper MCU at the central site ?

Buffer 15 to 30 seconds. Make sure to tell them there will be
a long load time. There really isn't much you can do besides
that.

Java Applet - slow response over WAN and fast on LAN

Hi All,
Using Tomcat we have a Java applet that runs very slow over the Internet but just the opposite on the LAN (fast). On our website we have a link that we click which initializes the application. it is very slow but if the same link is clicked on the LAN it is very fast in responding. We have a 10MB internet connection and even when testing with very little traffic after peak business hours we have same results.When closing the browser and reopening it is much faster the second time. This tells me it is being Cached. If I go to a system that has never accessed the applet we are very slow again. We are hosting this application for a 3rd party so we did not write the code. This company is finger pointing at Router and I am finger pointing at Java application itself maybe not being optimal.
I am attaching "debug" info from Java Console. Can anyone identify any issues from this debug output or familiarity with this type issue. Your insight is greatly appreciated.
Java Plug-in 1.5.0_01
Using JRE version 1.5.0_01 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\Administrator
network: Loading user-defined proxy configuration ...
network: Done.
network: Loading proxy configuration from Netscape Navigator ...
network: Reading user preference file from C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\Mozilla\Profiles\default\4i0ghip7.slt\prefs.js
network: Done.
network: Loading browser proxy configuration ...
network: Done.
network: Proxy Configuration: Browser Proxy Configuration
basic: Cache is enabled
basic: Location: C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0
basic: Maximum size: unlimited
basic: Compression level: 0
basic: Registered modality listener
basic: Referencing classloader: sun.plugin.ClassLoaderInfo@b1b4c3, refcount=1
network: Connecting http://www.mgaucb.com/gottlieb/images/codonix.png with proxy=DIRECT
basic: Loading applet ...
basic: Initializing applet ...
basic: Starting applet ...
Internal Version: 3.0.35 Build id: TB-200402041305-35
Mar 7, 2009 1:12:03 AM com.codonix.trackerboard.gui.TrackerBoardApplet start(null:-1)
INFO: Internal Version: 3.0.35 Build id: TB-200402041305-35
Codebase: http://www.mgaucb.com/gottlieb/
Mar 7, 2009 1:12:03 AM com.codonix.trackerboard.gui.TrackerBoardApplet start(null:-1)
INFO: Codebase: http://www.mgaucb.com/gottlieb/
Documentbase: http://www.mgaucb.com/gottlieb/TBUC.html
Mar 7, 2009 1:12:03 AM com.codonix.trackerboard.gui.TrackerBoardApplet start(null:-1)
INFO: Documentbase: http://www.mgaucb.com/gottlieb/TBUC.html
WebAppPath: /gottlieb
Mar 7, 2009 1:12:03 AM com.codonix.trackerboard.gui.TrackerBoardApplet start(null:-1)
INFO: WebAppPath: /gottlieb
basic: Modality pushed
basic: Modality popped
network: Connecting socket://www.mgaucb.com:80 with proxy=DIRECT
Initial Trackerboard/Table: TBUrgentCare/null
Mar 7, 2009 1:12:35 AM com.codonix.trackerboard.gui.TrackerBoardApplet doLogin(null:-1)
INFO: Initial Trackerboard/Table: TBUrgentCare/null
SiteID: CodoniX
Mar 7, 2009 1:12:35 AM com.codonix.trackerboard.gui.TrackerBoardApplet doLogin(null:-1)
INFO: SiteID: CodoniX
liveconnect: the url of the applet is http://www.mgaucb.com and the permission is = false
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = http://www.mgaucb.com
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = http://www.mgaucb.com
Starting UI Generator....
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = http://www.mgaucb.com
Warning: No permission to control logging.
Mar 7, 2009 1:12:58 AM com.codonix.uigenerator.StartApplet init(null:-1)
WARNING: No permission to control logging.
Warning: No permission to control logging.
Mar 7, 2009 1:12:58 AM com.codonix.uigenerator.StartApplet init(null:-1)
WARNING: No permission to control logging.
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = http://www.mgaucb.com
liveconnect: JavaScript: calling Java system code
liveconnect: JavaScript: default security policy = http://www.mgaucb.com
liveconnect: JavaScript: calling Java system code
network: Connecting socket://www.mgaucb.com:80 with proxy=DIRECT

Hi Geoff,
Thanks for posting here.
Have you checked your internet edge router ? and make sure there is no any speed limitation set on it , like QOS.
You may also try the methods below:
1. Disable RSS, Chimney, AutoTuning on 2008R2
How to know if TCP offload is working
http://blogs.technet.com/b/brad_rutkowski/archive/2007/08/10/how-to-know-if-tcp-offload-is-working.aspx
2. Install Hotfix 982860
A computer that is running Windows 7 or Windows Server 2008 R2 takes four minutes to open a Microsoft Office 2003 document from a network share
http://support.microsoft.com/kb/982860
Thanks.
Tiger Li
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Load balancing over two separate outside routers and two separate WAN Links

Hi everybody,
I have one 2851 setup with two separate ISP links and have it configured for failover with BGP. It works great but doesn't load balance.
Well now I have to new routers (3925's) to replace the single 2851 and I want to configure them to load balance over separate WAN links.
Can someone help figure out the best approach to make this happen? I would really appreciate it.
Thank you,
Thomas Reiling

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
The "best approach", IMO, would be to use PfR (if your routers support it).

Lap not joining over a wan link

hi
i have 2 wism running on 6509 chassis and i have access points in remote branches. the lap is not joining the wism. here is the situation:
lap can ping the controllers
lap is getting ip address
option 43 is there on the vlan
dns entry for the wlc is there.
however, when i checked the lap boot: it s getting an ip address and gives the command prompt.
the below debugging on the wlc gives nothing:
debug capwap events
debug capwap errors
debug mac addr <mac addr>
the wan link is private wan running ospf on both routers from each end.
I see no point why this lap is not joining
any idea?

Hi,
According to your description, I understand that all attachments in Outlook are opened slowly since updating Outlook 2003 to 2013. Please confirm whether all users encounter this issue. Also check whether the issue continues in cached mode and in OWA.
Based on your post, I suggest we can try to disable the following add-ins to check whether the issue persists:
Acrobat PDFMaker office com addin
symantec endpoint protection outlook addin
If there is any updates, please feel free to let us know.
Thanks,
Winnie Liang
TechNet Community Support

EEM -automatic shut down or switch over of WAN link in OSPF when packet drop increase

Hi,
Need help..
can any one help me how can EEM help for automatic shut down or switch over of WAN link in OSPF when packet drop increase a predefined level.
I have a set up different branches connected together...OSPF is the routing protocol and need to communicate with two branches via hub locations.
need to shut or switch some percent of traffic from primary to back up when packet drop in the link.

I am not sure EEM can do what you want.
Another option could be to use SLA tacking/monitoring. But you will fall back to the new route when you lose some percentage of pings, you can't switch only part of the traffic.
I hope it helps.
PK

Windows server 2003 Remote desktop over WAN problem.

Ok so problem is there is a 2003 windows server in my office. Any computer phone etc. can connect to it via Remote desktop if they are in the LAN network. I have port forwarded 3389 , disabled firewalls , there is no antivirus software on the server.
BUT I cannon log in over WAN. Heres the problem.
I type in the WAN ip I connect with credentials.
This is what i get:
Connecting...
Negotiating credentials...
Then it just suddenly force closes.
Also tried from a Windows 8 PC , when trying to connect it INSTANTLY throws me an error saying:
This computer cant connect to the remote computer. If the problem continues contact etc..
No matter where i try , a pc , a laptop , a phone , a tablet it just force closes. I can see that the devices are able to see the server and are trying to connect , but the connection just force closes for no reason and no error is shown. Also I dont see
anything in the event viewer on the server. The credentials are correct also. And the port is forwarded correctly.
Where could the problem be?

Hi,
Thank you for posting in Windows Server Forum.
As you have commented that you have forwarded port correctly at windows end, but still suggest you to check whether you have port forwarded on Router which you are using for WAN connections.
Can your local system can make successful ping to the remote server from WAN connections?
For testing you can telnet <router ip> 3389 and if you get blank screen then it confirm that port has been forwarded.
It might happens that there is port assignment conflict taken place, so check with “netstat –a –o” and see port 3389 is not being used by other application, if that is the case then change the port.
You can refer following article for more troubleshooting steps (Point 2)
Remote Desktop disconnected or can’t connect to remote computer or Remote Desktop server (Terminal Server) that is running Windows Server 2003
http://support.microsoft.com/kb/2477023
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Initial dataload to a remote Golden Gate target site over WAN

We are planning build a GG target at a remote site over WAN. I am wondering how we can do the initial dataload. Should it be done locally and then transport the server to the remote site.In which case we change we build the trial files on the source and then change the datapump to point to the new ip ( at the remote location)?. Or are there any methods available wherein the target resides at the designated target and we do the initial dataload like the way we do it locally
Please give me some ideas.

How much data are you loading? GoldenGate recommends using native RDBMS tools if the amount of data is large (I think "large" was defined somewhere as something just under 2GB).
Which RDBMS, how much data, how long would it take to move files from the source to the remote location?

ZCC remote contol terribly slow over WAN links compared to RC via ZDM 7 or RDC

Similar Messages

Maybe you are looking for