DMVPN & GRE over IPsec on the same physical interface

Similar Questions

• To confirm the network is GRE over IPSEC

  Hello world

  We have Cisco 4500 device GRE tunnel and next hop is that ASA makes the IPSEC VPN over WAN.

  If this type of network is called free WILL on the right of IPSEC?

  Also when I do on 4500 sh int tu0

  reliability 255/255, txload 79/255, rxload 121/255

  5 minute input rate 2228000 bps, 790 packets/s

  5 minute output rate 780000 bps, 351 packets/s

  Need to understand which shows that data transmitted by tunnel LIKING which is not encrypted right?

  To verify ipsec ASA which is encrypted data that we do sh right its isakmp crypto?

  When we apply crypto map on the physical interface ASA here?

  Thank you

  Mahesh

  If your GRE tunnel protection applied to this topic, so I think that the transmitted data is encrypted. GRE over ipsec simply means the application of the protection of tunnel to tunnel will otherwise it's just a simple GRE tunnel.

  Side that Show crypto isakmp his, you can also check if the traffic from one site to another is using GRE or not by issuing crypto ipsec to show its, it will tell you the number of Protocol and it should say 47. And if you use the protection tunnel command to set the ipsec tunnel, you will not need to define cryptographic cards more.

• The GRE over IPSec vpn

  VAC

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a008009438e.shtml#diag

  It's lab that I did today, and offcouse, I am able to understand this laboratory bus are confusion

  1. Why do we use a card encryption on both interfaces (phiycal tunnel interface or interface)

  
  

  2. when I remove the interface tunnel encryption card I have this message

  ( R2691 #* 01:12:54.243 Mar 1: ISAKMP: (1002): purge node 2144544879 )

  Please tell me what is the meaning of this message

  3. but I do not see vpn works great. It comes to cryto his and crypto isakmp his

  R2691 #sh crypto ipsec his

  Interface: Serial0/0

  Crypto map tag: vpn, local addr 30.1.1.21

  protégé of the vrf: (none)

  local ident (addr, mask, prot, port): (30.1.1.21/255.255.255.255/47/0)

  Remote ident (addr, mask, prot, port): (10.1.1.1/255.255.255.255/47/0)

  10.1.1.1 current_peer port 500

  LICENCE, flags is {origin_is_acl},

  #pkts program: 65, #pkts encrypt: 65, #pkts digest: 65

  #pkts decaps: 66, #pkts decrypt: 66, #pkts check: 66

  compressed #pkts: 0, unzipped #pkts: 0

  #pkts uncompressed: 0, #pkts compr. has failed: 0

  #pkts not unpacked: 0, #pkts decompress failed: 0

  Errors in #send 2, #recv 0 errors

  local crypto endpt. : 30.1.1.21, remote Start crypto. : 10.1.1.1

  Path mtu 1500, mtu 1500 ip, ip mtu IDB Serial0/0

  current outbound SPI: 0xDBF65B0E (3690355470)

  SAS of the esp on arrival:

  SPI: 0x44FF512B (1157583147)

  transform: esp-3des esp-md5-hmac.

  running parameters = {Tunnel}

  Conn ID: 5, flow_id: SW:5, crypto card: vpn

  calendar of his: service life remaining (k/s) key: (4598427/3368)

  Size IV: 8 bytes

  support for replay detection: Y

  Status: ACTIVE

  the arrival ah sas:

  SAS of the CFP on arrival:

  outgoing esp sas:

  SPI: 0xDBF65B0E (3690355470)

  transform: esp-3des esp-md5-hmac.

  running parameters = {Tunnel}

  Conn ID: 6, flow_id: SW:6, crypto card: vpn

  calendar of his: service life remaining (k/s) key: (4598427/3368)

  Size IV: 8 bytes

  support for replay detection: Y

  Status: ACTIVE

  outgoing ah sas:

  outgoing CFP sas:

  R2691 #sh crypto isakmp his

  IPv4 Crypto ISAKMP Security Association

  status of DST CBC State conn-id slot

  30.1.1.21 10.1.1.1 QM_IDLE 1002 ASSETS 0

  ISAKMP Crypto IPv6 security association.

  How can 2: I know it using GRE over IPsec.

  I also join my topology on which I made lab

  Also beyond what I remember, in the old codes he was required to have a card encryption on tunnel and physical interface, but now is not.

  Since we use GRE over IPSEC, so for the verification of the tunnel I'll do the following steps:

  (1.) to check if the tunnel interface is in place. "show ip int br".

  2.) check if the statistics of tunnel are increasing and packages are browsing through it. 'show interface '.

  3.) check if crypto ACL includes only interesting traffic listed as GRE counterparts.

  (4.) If Yes, check the IPSEC Security Association statistics. "See the crypto ipsec his."

  If all of them are correct statistical evidence with respective counters increase traffic is passing by GRE and then by wrapping in IPSEC.

  I hope this helps.

  Kind regards

  Anuj

• GRE over IPSec tunnel cannot pass traffic through it

  I am trying to configure a GRE over IPSec tunnel between sites, we use the router cisco 7613 SUP720 (IOS: s72033-advipservicesk9_wan - mz.122 - 18.SXF15a.bin) and 3845 router (IOS:c3845 - advsecurityk9 - mz.124 - 25c.bin), we are facing problems when we use the tunnel because traffic is not passing through it. the configuration was working when we were using two routers cisco 3845 (IOS:c3845 - advsecurityk9 - mz.124 - 25c.bin), but for some reason, it doesn't work anymore when I paste the configuration on the new 7613 router.

  Head office

  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 5
  ISAKMP crypto key T3ST001 address 0.0.0.0 0.0.0.0
  !
  !
  Crypto ipsec transform-set IPSec_PLC aes - esp esp-sha-hmac
  transport mode
  !
  map PLC - CUM 10 ipsec-isakmp crypto
  defined by peer 167.134.216.89
  game of transformation-IPSec_PLC
  match address 100
  !
  !
  !
  Tunnel1 interface
  bandwidth 1984
  IP 167.134.216.94 255.255.255.252
  Mtu 1476 IP
  load-interval 30
  source of tunnel Serial0/1/0:0
  tunnel destination 167.134.216.89

  interface Serial0/1/0:0
  IP 167.134.216.90 255.255.255.252
  card crypto PLC - CUM

  access-list 100 permit gre 167.134.216.90 host 167.134.216.8

  Router eigrp 100
  network 167.134.216.92 0.0.0.3

  Directorate-General of the

  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 5
  ISAKMP crypto key T3ST001 address 0.0.0.0 0.0.0.0
  !
  !
  Crypto ipsec transform-set IPSec_PLC aes - esp esp-sha-hmac
  transport mode
  !
  map PLC - CUM 10 ipsec-isakmp crypto
  defined by peer 167.134.216.90
  game of transformation-IPSec_PLC
  match address 100

  Tunnel1 interface
  bandwidth 1984
  IP 167.134.216.93 255.255.255.252
  Mtu 1476 IP
  load-interval 30
  source of tunnel Serial1/0/0:1
  tunnel destination 167.134.216.90

  interface Serial1/0/0:1
  bandwidth 1984
  IP 167.134.216.89 255.255.255.252
  IP access-group 101 in
  load-interval 30
  no fair queue
  card crypto PLC - CUM

  access-list 100 permit gre 167.134.216.89 host 167.134.216.90

  ER-7600 #sh crypto isakmp his
  conn-id State DST CBC slot
  167.134.216.89 167.134.216.90 QM_IDLE 3 0

  ER-3845 #sh crypto isakmp his
  status of DST CBC State conn-id slot
  167.134.216.89 167.134.216.90 QM_IDLE 3 0 ACTIVE

  ER-3845 #sh active cryptographic engine connections

  Algorithm of address State IP Interface ID encrypt decrypt
  3 Serial0/1/0: 167.134.216.90 0 HMAC_SHA + AES_CBC 0 0 value
  3001 Serial0/1/0: 167.134.216.90 0 set AES + SHA 0 0
  3002 Serial0/1/0: 167.134.216.90 0 set AES + SHA 61 0

  ER-7600 #sh active cryptographic engine connections

  Algorithm of address State IP Interface ID encrypt decrypt
  3 Serial1/0/0:1 167.134.216.89 set HMAC_SHA + AES_CBC 0 0
  2000 Serial1/0/0:1 167.134.216.89 set HMAC_SHA + 0 66 AES_CBC
  2001 Serial1/0/0:1 167.134.216.89 set HMAC_SHA + AES_CBC 0 0

  I had this error on the er-3845: % CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd package not an IPSEC packet and this one on the IPSEC (epa_des_crypt) UH-7600: decrypted packet has no control of his identity

  Please help, it's so frustrating...

  Thanks in advance

  Oscar

  Here is a document from cisco, mentioning clearly for a card encryption on the two physical as tunnel interface well.

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a008009438e.shtml

  It may be useful

  Manish

• GRE over IPSEC

  Hi all

  I am setting up IPSEC tunnel GRE... I am able to get neighbors OSPF looked through the GRE tunnel, but when traffic is sent through the gre tunnel it does not encrypt and transmit through plaintext despite she buy from loopback interfaces

  Here is my config

  Config of R1
  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 5
  test key crypto isakmp 192.168.1.2 address

  Crypto ipsec transform-set test aes - esp esp-sha-hmac

  test card crypto-address Ethernet0/0
  test 10 map ipsec-isakmp crypto
  defined peer 192.168.1.2
  Set transform-set test
  match address WILL

  GRE extended IP access list
  allow gre 10.0.10.0 0.0.0.255 10.0.20.0 0.0.0.255

  interface Ethernet0/0
  No switchport
  IP 192.168.1.1 255.255.255.0
  crypto map test

  interface Loopback0
  IP 10.0.10.1 255.255.255.0
  IP ospf 1 zone 0

  Tunnel1 interface
  10.0.100.2 IP address 255.255.255.0
  IP ospf 1 zone 0
  source of tunnel Ethernet0/0
  tunnel destination 192.168.1.1
  end

  -----------------------------------------------------------
  R2 config

  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 5
  test key crypto isakmp 192.168.1.1 address
  !
  !
  Crypto ipsec transform-set test aes - esp esp-sha-hmac
  !
  !
  !
  test card crypto-address Ethernet0/0
  test 10 map ipsec-isakmp crypto
  defined peer 192.168.1.1
  Set transform-set test
  match address GR
  !

  GR extended IP access list
  allow gre 10.0.20.0 0.0.0.255 10.0.10.0 0.0.0.255

  interface Ethernet0/0
  No switchport
  IP 192.168.1.2 255.255.255.0
  crypto map test

  interface Loopback0
  IP 10.0.20.1 255.255.255.0
  IP ospf 1 zone 0

  Tunnel1 interface
  10.0.100.1 IP address 255.255.255.0
  IP ospf 1 zone 0
  source of tunnel Ethernet0/0
  tunnel destination 192.168.1.2
  end

  -------------------------------------------

  Hello

  With p2p GRE over IPsec solution, all traffic between sites is encapsulated in a GRE p2p package before the process of encryption.

  More info on this link:

  http://www.Cisco.com/c/en/us/TD/docs/solutions/Enterprise/WAN_and_MAN/P2...

  Kind regards

  Aditya

  Please evaluate the useful messages and mark the correct answers.

• Setting KeepAlive on GRE over IPSEC tunnel

  Hello world

  Need to know if there are benefits of the KeepAlive on GRE over IPSEC implementation that goes over the Wan. ?

  We currently have no KeepAlive on GRE tunnel.

  If we config KeepAlive on both ends of the ACCORD it will cause any overload or the CPU load?

  Thank you

  MAhesh

  If you use a routing on the GRE tunnel protocol you should use KeepAlive WILL not, but I would probably recommend use KeepAlive WILL anyway for the following reasons:

  1. the overload caused by the GRE KeepAlive is quite small, it should not affect the ability to pass traffic

  2. If you ever want to use tracking interface for roads or the static routes that you can interface WILL detect it descend as quickly as possible

  I know that your IPSec device is separate, so I'd probably also enable KeepAlive on the IPSec tunnel as well.

• GRE over IPsec, ASA and NAT - t.

  I want to establish WILL IPsec tunnel between four branches and headquarters. In executive offices, I have router 1841 with the advanced security software. At Headquarters, I have a 7.2 ASA5510 as frontend with a IP address public and 1841 router behind him in the private address space. Given that the ASA does not support GRE tunnels, ASA may be endpoint for GRE over IPsec? If this isn't the case, ASA may pass through this tunnel to the router 1841 behind her, 1841 would be endpoint logic tunnel? What should I watch out for? The ASA and each 1841 support NAT - T, or just ASA?

  The ASA does not support GRE.

  The router would be the GRE tunnel endpoint.  The ASA would be endpoint for IPSEC VPN.  NAT - T should not be a matter of concern if the ASA and the remote routers directly connected to the internet.

  HTH.

• GoldenGate replication on the same physical server - REPLICATE always ABENDING

  Dear expert GG,

  I'm completely green with Golden Gate, so I would like to help on why my REPLICAT process abends right after that I put my source database object lines.  I'm following the writeup of Gavin Soorma -.

  http://gavinsoorma.com/2011/08/GoldenGate-replication-with-source-and-target-on-the-same-physical-host/

  I'm trying to implement CDC on the same physical server.  I have a 11g source database that uses ASM and my target is the database 10g that is using traditional file system management.  I am trying to map an object, ggs_owner.myobjects that I created in the two databases.  EXTRACT both REPLICAT start very well, but as soon as I perform an insert in the 11g database and post the lines, my REPLICAT process abends.

  Version information:

  Oracle GoldenGate for Oracle shell
  OGGCORE_11.2.1.0.1_PLATFORMS_120423.0230_FBO version 11.2.1.0.1
  Linux, x 86, 32-bit (optimized), Oracle 11 g on April 23, 2012 08:09:25

  Copyright (C) 1995, 2012, Oracle and/or its affiliates. All rights reserved.

  GGSCI (localhost) 3 > DBLOGIN Userid ggs_owner@ora11g, password ggs_owner
  Connected to the database.

  GGSCI (localhost) 4 > RELEASES
  Operating system:
  Linux
  Version #1 SMP kills Jan 4 15:24:05 EDT 2011 version 2.6.18 - 238.el5
  Node: localhost.localdomain
  Machine: i686

  Database:
  Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
  PL/SQL Release 11.2.0.1.0 - Production
  CORE 11.2.0.1.0 Production
  AMT for Linux: Version 11.2.0.1.0 - Production
  NLSRTL Version 11.2.0.1.0 - Production

  GGSCI (localhost) 7 > DBLOGIN Userid ggs_owner@ora10g, password ggs_owner
  Connected to the database.

  GGSCI (localhost) 8 > VERSIONS
  Operating system:
  Linux
  Version #1 SMP kills Jan 4 15:24:05 EDT 2011 version 2.6.18 - 238.el5
  Node: localhost.localdomain
  Machine: i686

  Database:
  Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Prod
  PL/SQL Release 10.2.0.1.0 - Production
  CORE 10.2.0.1.0 Production
  AMT for Linux: Version 10.2.0.1.0 - Production
  NLSRTL Version 10.2.0.1.0 - Production

  PRM file content

  EXTRACT the content of the Param file

  extract extlocal
  SetEnv (ORACLE_HOME="/u01/app/oracle/product/11.2.0/dbhome_1')
  SetEnv (ORACLE_SID = 'ora11g')
  ggs_owner username, password ggs_owner
  localhost.localdomain, mgrport 7809 rmthost
  rmttrail ./dirdat/aa
  TRANLOGOPTIONS ASMUSER sys@+ASM, oracle ASMPASSWORD
  table ggs_owner.myobjects.

  Content of the file param REPLICAT

  REPLICAT replocal
  SETENV (ORACLE_HOME="/opt/oracle/product/10.2.0.1')
  SETENV (ORACLE_SID = "ora10g")
  ASSUMETARGETDEFS
  Ggs_owner username, PASSWORD ggs_owner
  DISCARDFILE. / dirrpt/discard.txt, APPEND, 20 MEGABYTES
  CARD ggs_owner.myobjects, ggs_owner.myobjects, KEYCOLS (object_id) TARGET;

  Complete the following steps in GGSCI:

  GGSCI (localhost) 103 > add extract extlocal tranlog start now
  Added EXTRACT.

  
  GGSCI (localhost) 104 > add rmttrail ./dirdat/aa gets extlocal
  Added RMTTRAIL.

  
  GGSCI (localhost) 105 > dblogin Userid ggs_owner@ora10g, password ggs_owner
  Connected to the database.

  GGSCI (localhost) 106 > add replicat replocal exttrail ./dirdat/aa
  ERROR: No control points table specified to add REPLICAT.

  
  GGSCI (localhost) 107 > add replicat exttrail ./dirdat/aa NODBCHECKPOINT replocal
  REPLICAT added.

  
  GGSCI (localhost) 108 > dblogin Userid ggs_owner@ora11g, password ggs_owner
  Connected to the database.

  GGSCI (localhost) 109 > start extract extlocal

  Sending START request manager of...
  EXTLOCAL EXTRACT from

  
  GGSCI (localhost) 110 > news

  Program status group Lag time since Chkpt Chkpt

  MANAGER RUNNING
  EXCERPT FROM RUNNING EXTLOCAL 00:00:00 00:00:02
  REPLICAT ORDER REPLOCAL 00:00:00 00:01:27

  
  GGSCI (localhost) 111 > start replicat replocal

  Sending START request manager of...
  REPLICAT REPLOCAL from

  
  GGSCI (localhost) 112 > news

  Program status group Lag time since Chkpt Chkpt

  MANAGER RUNNING
  EXCERPT FROM RUNNING EXTLOCAL 00:00:00 00:00:09
  REPLICAT RUNNING REPLOCAL 00:00:00 00:00:04

  In another window, I do the following:

  SQL > connect ggs_owner@ora11g
  Enter the password:
  Connected.
  SQL > select count (*) from myobjects;

  COUNT (*)
  ----------
  71932

  SQL > truncate table myobjects;

  Table truncated.

  SQL > insert into select MYOBJECTS * from DBA_OBJECTS;

  71932 lines were created.

  SQL > commit;

  Validation complete.

  When I return to GGSCI, I see that the process has added:

  GGSCI (localhost) 132 > news

  Program status group Lag time since Chkpt Chkpt

  MANAGER RUNNING

  EXCERPT FROM RUNNING EXTLOCAL 00:00:00 00:00:07

  REPLICAT REPLOCAL ABENDED 00:00:00 00:00:02

  When I can look at, or what can I add to the param REPLICAT file that might help identify the root cause.

  Any help would be appreciated.

  Thank you

  Prom

  Hello

  Since no one has replied, I can go with my assumptions that replicat process searches across data dictionary, and since he is a 11g Golden Gate executable, its not backward compatible with 10g.  To this end, I have duplicated my database with RMAN DUPLICATE ora11g, creating another database called ora11g2, changed my REPLOCAL. PRM file as follows (changes in bold):

  REPLICAT replocal
  SETENV (ORACLE_HOME = "/u01/app/oracle/product/11.2.0/dbhome_1")
  SETENV (ORACLE_SID = "ora11g2")
  ASSUMETARGETDEFS
  Ggs_owner @ora11g2, ggs_owner PASSWORD username
  DISCARDFILE. / dirrpt/discard.txt, APPEND, 20 MEGABYTES
  DDL INCLUDE ALL
  CARD ggs_owner.golden, TARGET ggs_owner.golden, KEYCOLS (gold);

  I then rebooted the components again, and finally, I was able to replicate the changes to the GGS_OWNER table. GOLD ora11g, at the same table in ora11g2.

  Thank you all.

  Prom

• How to create multiple hierarchies from the same physical table

  Hi all
  
  I have a physical table to join with a fact table: there are 3 different hierarchies, which share the last 2 levels inside the dimension table. It's the logic diagram of hierarchies:
  
  Dimension services
  -Business
  -Sector
  -Type
  -Operator
  -Product
  Partner of dimension
  -Partner
  -Operator
  -Product
  Contractor of dimension
  -Contractor
  -Operator
  -Product
  
  All columns are in the same table physical source. I tried to create 3 table logic source from the same physical table, everyone with all the columns and create a hierarchy for each dimension table, but it gives me nQSError: 15011.
  
  Any suggestion? Maybe the physical table alias can help for the creation of tables of different sizes?
  
  Thanks in advance,
  Concerning

  Hello

  It is a basic rule that you cannot create multiple hierarchies in a single dimension table, so what you do is create three tables of alias and slip into MDB layer in 3 different sizes and on top these tables create 3 different dimension hierarchies.

  Check if useful/correct

  Thank you.

• Pools of multiple connections to the same physical Structure with SPR

  I use OBIEE 10.1.3.4 and have multiple physical databases that contain the exact same structure. Instead of creating the same physical structure in the RPD file with their own pools of connections, I would like to have a physical structure with multiple connections pools. I have this Setup, however, I can only see the data of one of the physical databases by using the right click, view data... option in the physical appearance of the RPD file. I searched and could not find a solution to my particular problem. Can someone point me in the right direction?

  Goal is to get the CPs separated... and then, you can use two data. But better to have 2 separate objects.

• Oracle XE on multiple virtual machines on the same physical machine?

  Hi people,
  
  Can I install Oracle XE on several virtual machines that are on the same physical machine?
  
  Thank you
  
  G. grangier

  I find that this interpretation is questionable.
  Instance, what do mean?
  What they mean by server?
  Unless Oracle explicitly forbids the execution of several databases of XE on different virtual machines at the same time, I don't see violations.

  For example, imagine that the user has runs that XE on AWS and user B running an another XE on AWS.
  They are not running on the same "Server"?

  Flavio
  ----

  http://oraclequirks.blogspot.com

• I have 2 logical filenames for the same physical file (Documents of Kenneth Stewart; My Documents) in the different trees how to solve this without deleting my Documents?

  C:\Kenneth documents Stewart is a tree.
  C:\Documents and owner Documents is the other.
  Physically, this is the same file.

  Documents of the C:\Kenneth Stewart is just a shortcut to the real file which is C:\Documents and owner Documents. At some point you have renamed the owner to Kenneth Stewart, without is realizing that this is a cosmetic change only and does not change the underlying profile files/records. So even if you could say "Kenneth Stewart" on the Welcome screen, the real name of the user account is 'owner '. MS - MVP - Elephant Boy computers - don't panic!

• Performance - GRE over IPSec or without free WILL

  Looking at the configuration of a VPN L2L tunnel between two sites for voice only traffic.  Ask yourself if the configuration of GRE to the IPSec VPN tunnel would add a charge to the performace of the vs configuration voice traffic just an IPSec VPN tunnel?

  You wanted to set up a WILL for future where we might want to add several tunnels and enable EIGRP routing.

  Please any advice would help.

  Karim,

  First GRE (oIPsec) is not the only option. You also VTI, which does not add the GRE overhead and can run on top routing protocols.

  In terms of raw processing, yes GRE encapsulation is indeed a new step on the way, but most platform today are able to handle this in CEF (or similar) or in the material (usually with some limitations) as on 6500 etc..

  Purely for the voice there should be no impact on the performance (also depends on how you measure performance) since fresh added generals will not change much for audio real, no added encapsultation will add a lot of delay.

  However, there are other things to consider (like how to install QoS is not to present the jitter).

  M.

• Two virtual machines share the same physical network adapter

  I have a virtual network adapter that I linked to a physical network adapter on my box where two virtual machines are running.

  I assigned two virtual machines to this vmnet adapter.

  On one I can ping other machines of physics on the same subnet as the physical computer, but the other VM can ping only other virtual machines.

  When I try to ping from one physical computer to this virtual machine I get the error message windows "ping transmission has failed. General failure. ».

  Is what I'm trying to are not not possible?

  First thing to do is to ensure the automatic bypass is enabled disabled in the VMnet virtual network editor your use to the bridge to.

  Second need to see the output of ipconfig/all on the Windows host and guests and or ifconfig on the Linux host and or guests.

  DO NOT copy and paste the output directly in the body of the response rather redirect the output of the commands in a text file and then archive (compress) files in a single zip archive and attach it to an answer.

  You can use the following example:

  Under Windows:

  ipconfig/all > "% USERPROFILE%\Desktop\host_ipconfig.txt".

  ipconfig/all > "%USERPROFILE%\Desktop\guest (n) _ipconfig.txt".

  Linux:

  ifconfig > ~/Desktop/host_ipconfig.txt

  ifconfig > ~/Desktop/guest (n) _ipconfig.txt

  Also include in the archive .zip .vmx and vmware*.log for two Virtual Machines configuration files.

• vCenter and SQL 2005 Express on the same physical machine

  I'm new on the VMware environment and am a little concerned about my VMware infrastructure and design.  I have 3 boxes physical accommodation 15 virtual servers.  I have a 4th server that hosts the database SQL and vcenter.  I am wondering what are my chances of having vCenter and SQL 2005 express installed on the same box?  That suggest VMware as best practices concerning this configuration?  If this configuration is ok, what are my options to protect myself in case the box with vCenter and the SQL database dies?  Thank you

  VMware sets a limitation to 5 guests and 50 wen invited you use SQL Express. I run it with 6 guests and 48 guests (incl. models) on the same machine as the server vcenter. That's not what I want to keep and we will change to a standard SQL 2005 on a separate server from SQL (which we had with SQL 2000 and before VI3).

  But I didn't have one problem with this configuration, again.

  With both on the same server may lead to a conflict: SQL 2005 requires IIS but vCenter uses ports. So I installed it but disabled.

  I think also that separating the two tracks faster that have it all on the same box.

  AWo

  VCP / vEXPERT 2009