Grouping of nodes of the consistency across networks

Hello

It is an extension to the station by Anjani: http://forums.oracle.com/forums/thread.jspa?threadID=1047601 & tstart = 0

I have a question about different oracle coherence nodes through network clustering. I am aware that I can 2 coherence of the cluster nodes if they are on the same intranet. You will find below the description of the problem that I am trying to solve

I tried the steps mentioned in the post that follows: http://forums.oracle.com/forums/thread.jspa?threadID=1047601 & tstart = 0.
It does not work when I run on 2 of my machines connected to my intranet even.
The machine IPs: 10.x.x.x. YYY.64 and 10.x.x.x. YYY.69 where XXX and YYY are the same for both IP addresses

But when I run 2 instances of coherence cache server on my unix boxes, I can't join the cluser
IP addresses are: 10.162.102.233 and 10.163.253.14

IP address, we can see that they do not belong to the same intranet. So, in this case, how can I form a cluster? Is it possible to do?

Thank you!

You can configure your cluster to use WKA.

http://wiki.tangosol.com/display/COH35UG/well-known-addresses

Tags: Fusion Middleware

Similar Questions

  • Can I create different consistency nodes in the same cluster with defferent?

    Can I create consistency different nodes in the same cluster with defferent cache - config.xml file?
    A cache can be distributed in these nodes of deffirent?

    Yes. You can create different consistency nodes in the same cluster with cache files - config.xml defferent as long as you use the same file tangosol - coherence.xml and the same file tangosol-coherence - override.xml. But you can't store the data in the cache in the various nodes (created with different cache-config file). In other words, a node only to create their own Hide modes that are launched with the same cache file - config.Xml.

    See the following demo:
    I start a cache using the cache config examples-cache file server - server.xml. Then I start a console cache storage-disabled people (client cache) by using the config file coherence-cache cache - config.Xml. Two of them using the same file tangosol - coherence.xml and the same file tangosol-coherence - override.xml.
    The cache server uses a cache service PartitionedPofCache. But the client side using the Distributedcache service. The cluster address is same 224.3.5.2.
    The name of the cluster is also samme. They know.

    D:\coherence\lib>D:\examples\java\bin\run-cache-server.cmd

    D:\coherence\lib>D:\examples\java\bin\run-cache-server.cmd
    The system cannot find the file D:\coherence.
    The system cannot find the file C:\Oracle\Middleware\jdk160_11.
    2009-12-22 12:09:31.400/4.987 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Loaded operational configurat
    ion from resource "jar:file:/D:/coherence/lib/coherence.jar!/tangosol-coherence.xml"
    2009-12-22 12:09:31.450/5.037 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Loaded operational overrides
    from resource "jar:file:/D:/coherence/lib/coherence.jar!/tangosol-coherence-override-dev.xml"
    2009-12-22 12:09:31.470/5.057 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Optional configuration override
     "/tangosol-coherence-override.xml" is not specified
    2009-12-22 12:09:31.540/5.127 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Optional configuration override
     "/custom-mbeans.xml" is not specified
    
    Oracle Coherence Version 3.5.2/463
     Grid Edition: Development mode
    Copyright (c) 2000, 2009, Oracle and/or its affiliates. All rights reserved.
    
    2009-12-22 12:09:33.864/7.451 Oracle Coherence GE 3.5.2/463  (thread=main, member=n/a): Loaded cache configuration
     from "file:/D:/examples/java/resource/config/examples-cache-config.xml"
    2009-12-22 12:09:39.983/13.570 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Service Cluster joined t
    he cluster with senior service member n/a
    2009-12-22 12:09:43.187/16.774 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Created a new cluster
    "cluster:0xD3FB" with Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Locatio
    n=process:144, Role=CoherenceServer, Edition=Grid Edition, Mode=Development, CpuCount=1, SocketCount=1) UID=0xC0A8085000
    000125B75D888C60501F98
    2009-12-22 12:09:43.508/17.095 Oracle Coherence GE 3.5.2/463  (thread=Invocation:Management, member=1): Service Mana
    gement joined the cluster with senior service member 1
    2009-12-22 12:09:46.582/20.169 Oracle Coherence GE 3.5.2/463  (thread=DistributedCache:PartitionedPofCache, member=1
    ): Service PartitionedPofCache joined the cluster with senior service member 1
    2009-12-22 12:09:46.672/20.259 Oracle Coherence GE 3.5.2/463  (thread=DistributedCache:PartitionedPofCache, member
    =1): Loading POF configuration from resource "file:/D:/examples/java/resource/config/examples-pof-config.xml"
    2009-12-22 12:09:46.702/20.289 Oracle Coherence GE 3.5.2/463  (thread=DistributedCache:PartitionedPofCache, member
    =1): Loading POF configuration from resource "jar:file:/D:/coherence/lib/coherence.jar!/coherence-pof-config.xml"
    2009-12-22 12:09:47.734/21.321 Oracle Coherence GE 3.5.2/463  (thread=main, member=1): Started DefaultCacheServer.
    ..
    
    SafeCluster: Name=cluster:0xD3FB
    
    Group{Address=224.3.5.2, Port=35463, TTL=4}
    
    MasterMemberSet
      (
      ThisMember=Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=process
    :144, Role=CoherenceServer)
      OldestMember=Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=proce
    ss:144, Role=CoherenceServer)
      ActualMemberSet=MemberSet(Size=1, BitSetCount=2
        Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=process:144, Rol
    e=CoherenceServer)
        )
      RecycleMillis=120000
      RecycleSet=MemberSet(Size=0, BitSetCount=0
        )
      )
    
    Services
      (
      TcpRing{TcpSocketAccepter{State=STATE_OPEN, ServerSocket=192.168.8.80:8088}, Connections=[]}
      ClusterService{Name=Cluster, State=(SERVICE_STARTED, STATE_JOINED), Id=0, Version=3.5, OldestMemberId=1}
      InvocationService{Name=Management, State=(SERVICE_STARTED), Id=1, Version=3.1, OldestMemberId=1}
      DistributedCache{Name=PartitionedPofCache, State=(SERVICE_STARTED), LocalStorage=enabled, PartitionCount=257, BackupCo
    unt=1, AssignedPartitions=257, BackupPartitions=0}
      )
    
    2009-12-22 12:12:29.737/183.324 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=1): Member(Id=2, Timestamp=20
    09-12-22 12:12:29.541, Address=192.168.8.80:8089, MachineId=24656, Location=process:1188, Role=CoherenceConsole) joined
    Cluster with senior member 1
    2009-12-22 12:12:30.498/184.085 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=1): Member 2 joined Service M
    anagement with senior member 1
    2009-12-22 12:12:31.860/185.447 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=1): TcpRing: connecting to me
    mber 2 using TcpSocket{State=STATE_OPEN, Socket=Socket[addr=/192.168.8.80,port=8089,localport=2463]}
    2009-12-22 12:12:51.338/204.925 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=1): Member 2 joined Service D
    istributedCache with senior member 2
    

    The following command starts a cache client.
    D:\coherence\bin>coherence.cmd

    D:\coherence\bin>coherence.cmd
    ** Starting storage disabled console **
    java version "1.6.0_11"
    Java(TM) SE Runtime Environment (build 1.6.0_11-b03)
    Java HotSpot(TM) Server VM (build 11.0-b16, mixed mode)
    
    2009-12-22 12:12:21.054/3.425 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Loaded operational configurat
    ion from resource "jar:file:/D:/coherence/lib/coherence.jar!/tangosol-coherence.xml"
    2009-12-22 12:12:21.355/3.726 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Loaded operational overrides
    from resource "jar:file:/D:/coherence/lib/coherence.jar!/tangosol-coherence-override-dev.xml"
    2009-12-22 12:12:21.365/3.736 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Optional configuration override
     "/tangosol-coherence-override.xml" is not specified
    2009-12-22 12:12:21.415/3.786 Oracle Coherence 3.5.2/463  (thread=main, member=n/a): Optional configuration override
     "/custom-mbeans.xml" is not specified
    
    Oracle Coherence Version 3.5.2/463
     Grid Edition: Development mode
    Copyright (c) 2000, 2009, Oracle and/or its affiliates. All rights reserved.
    
    2009-12-22 12:12:29.316/11.687 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Service Cluster joined t
    he cluster with senior service member n/a
    2009-12-22 12:12:29.356/11.727 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Failed to satisfy the
    variance: allowed=16, actual=20
    2009-12-22 12:12:29.356/11.727 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Increasing allowable v
    ariance to 17
    2009-12-22 12:12:29.807/12.178 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): This Member(Id=2, Time
    stamp=2009-12-22 12:12:29.541, Address=192.168.8.80:8089, MachineId=24656, Location=process:1188, Role=CoherenceConsole,
     Edition=Grid Edition, Mode=Development, CpuCount=1, SocketCount=1) joined cluster "cluster:0xD3FB" with senior Member(I
    d=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=process:144, Role=CoherenceS
    erver, Edition=Grid Edition, Mode=Development, CpuCount=1, SocketCount=1)
    2009-12-22 12:12:29.977/12.348 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Member 1 joined Service
    Management with senior member 1
    2009-12-22 12:12:29.977/12.348 Oracle Coherence GE 3.5.2/463  (thread=Cluster, member=n/a): Member 1 joined Service
    PartitionedPofCache with senior member 1
    2009-12-22 12:12:30.578/12.949 Oracle Coherence GE 3.5.2/463  (thread=Invocation:Management, member=2): Service Mana
    gement joined the cluster with senior service member 1
    SafeCluster: Name=cluster:0xD3FB
    
    Group{Address=224.3.5.2, Port=35463, TTL=4}
    
    MasterMemberSet
      (
      ThisMember=Member(Id=2, Timestamp=2009-12-22 12:12:29.541, Address=192.168.8.80:8089, MachineId=24656, Location=proces
    s:1188, Role=CoherenceConsole)
      OldestMember=Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=proce
    ss:144, Role=CoherenceServer)
      ActualMemberSet=MemberSet(Size=2, BitSetCount=2
        Member(Id=1, Timestamp=2009-12-22 12:09:38.06, Address=192.168.8.80:8088, MachineId=24656, Location=process:144, Rol
    e=CoherenceServer)
        Member(Id=2, Timestamp=2009-12-22 12:12:29.541, Address=192.168.8.80:8089, MachineId=24656, Location=process:1188, R
    ole=CoherenceConsole)
        )
      RecycleMillis=120000
      RecycleSet=MemberSet(Size=0, BitSetCount=0
        )
      )
    
    Services
      (
      TcpRing{TcpSocketAccepter{State=STATE_OPEN, ServerSocket=192.168.8.80:8089}, Connections=[]}
      ClusterService{Name=Cluster, State=(SERVICE_STARTED, STATE_JOINED), Id=0, Version=3.5, OldestMemberId=1}
      InvocationService{Name=Management, State=(SERVICE_STARTED), Id=1, Version=3.1, OldestMemberId=1}
      )
    
    Map (?):
    
    2009-12-22 12:12:49.505/31.906 Oracle Coherence GE 3.5.2/463  (thread=main, member=2): Loaded cache configuration
    from "jar:file:/D:/coherence/lib/coherence.jar!/coherence-cache-config.xml"
    2009-12-22 12:12:51.358/33.729 Oracle Coherence GE 3.5.2/463  (thread=DistributedCache, member=2): Service Distribut
    edCache joined the cluster with senior service member 2
    
      
      example-distributed
      DistributedCache
      
        
          example-binary-backing-map
        
      
      true
    
    

    But when I try to store data cached from the client side, it reports the error message: it is staorage-disabled people. It shows that this console cache cannot store data in the server cache existing since then using different cache config files.

    Map (ca3): cache ca2
    
      
      example-distributed
      DistributedCache
      
        
          example-binary-backing-map
        
      
      true
    
    
    Map (ca2): put 1 one
    2009-12-22 14:00:04.999/6467.370 Oracle Coherence GE 3.5.2/463  (thread=main, member=2):
    java.lang.RuntimeException: Storage is not configured
            at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.DistributedCache$BinaryMap.onMissing
    Storage(DistributedCache.CDB:9)
            at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.DistributedCache$BinaryMap.ensureReq
    uestTarget(DistributedCache.CDB:34)
            at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.DistributedCache$BinaryMap.put(Distr
    ibutedCache.CDB:22)
            at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.DistributedCache$BinaryMap.put(Distr
    ibutedCache.CDB:1)
            at com.tangosol.util.ConverterCollections$ConverterMap.put(ConverterCollections.java:1541)
            at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.DistributedCache$ViewMap.put(Distrib
    utedCache.CDB:1)
            at com.tangosol.coherence.component.util.SafeNamedCache.put(SafeNamedCache.CDB:1)
            at com.tangosol.coherence.component.application.console.Coherence.processCommand(Coherence.CDB:581)
            at com.tangosol.coherence.component.application.console.Coherence.run(Coherence.CDB:39)
            at com.tangosol.coherence.component.application.console.Coherence.main(Coherence.CDB:3)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at com.tangosol.net.CacheFactory.main(CacheFactory.java:1400)
    
  • Mapping of LUNS ESX - id scsi is not consistent across the cluster - problem or not?

    Hello

    as a parenthesis in an associated storage workshop, the instructor said that on some site of the client, there was silence damaged metadata vmfs happening and the reason for it was locking issues that concerned the fact that the SAN LUNS Hat different scsi id on different Cluster nodes.

    I asked for references for this, but I got information on the verification of metadata etc.

    now, the reason why I'm asking here is, I found that some in our environment vmfs data warehouses do not have compatible scsi-id numbering on the Cluster. I thought it was just mostly a cosmetic problem...

    Two questions:

    1 are warehouses of VMFS data really at risk with this? Any reference to a KB or some experience on site? We have never had a problem with the warehouses of data so far.

    2. about the setting of this (we do it anyway), which is the recommended best practices to do?  Shouldn't a data store with a different ID Scsi remapping result in the data store that is detected as a snapshot?  Think we need to do some additional precautionary measures to avoid what is happening

    Thank you!

    regads

    Roland

    Take a look at this article for possible problems: VMware KB: can not see some or all VMware vCenter Server or VirtualCenter storage devices

    A requirement is to have uniform or a coherent presentation of the LUNS across managed VMware ESX servers. More specifically, must match the LUN ID for each respective LUN between all of the VMware ESX servers.

  • How to set of Cluster nodes on the same network but on different gateways

    Hello
    We want to set of Cluster nodes on the same network but the connection through different gateways for Unicast (WKA). We strive to add sockets for < cluster-config > tangosol-coherence - override.xml file, pls help how to set.

    Looks like you are using the default configuration for the system property:

    8088
    true

    The probable reason for this question, it's the localport is unaffected as 8088 for communication on the machines. Either use the property system - Dtangosol.coherence.localport = 8088 and - Dtangosol.coherence.localport.adjust = false or see the node will connect and find node assigned to each node and open the nodes; recommended to use multiple addresses node as in unicast configuration below:

    well-known-address >


    XXX

    8088


    YYY

    8088

    See you soon,.
    Neeraj

  • Calculate the fastest path between 2 nodes with the data model for the Oracle network

    Hi all,

    I have Oracle 10 g 2.

    My problem is the following:

    I created a network named ITALIA_NET in the data model for the Oracle network.
    The table of links of this network is named: ITALIA_NET_LINK$.
    The table of the nodes of this network is named: ITALIA_NET_NODE$.

    The table ITALIA_NET_LINK$ contains a field named COST that contains links (in meters) lengths.

    I've already calculated the SHORTEST PATH between two nodes of the network, by using the method of shortestPath() (using the Java API) as shown on "Pro Oracle Spatial for Oracle Database 11 g" manual. Infact, this method makes reference to the COST field for $ ITALIA_NET_LINK to make this calculation.

    Now, I want to calculate the FASTER PATH between two nodes of the network. I have the links (in hours) travel time to make this calculation.

    My idea is to create a new field in ITALIA_NET_LINK$ named Cost2 containing the travel time from the links and then do the math by using the shorthestPath() method, referring to the Cost2 field to $ ITALIA_NET_LINK COST field instead.
    By default, I know that the shorthestPath() method returns the COST field for $ ITALIA_NET_LINK. Is possible to change this setting and do that this method refers to the Cost2 field?

    In the alternative, is another way for the calculation of the fastest way?
    I want to leave the creation of another network as last solution, because I will have other costs of field (Cost3, cos4t,...)

    Thank you much in advance.

    Your approach is good. You will have two networks and you can read them in memory and analyze of shortest path. The shortestPath method is static for the class of NetworkManager. You can use the same method for both networks, once they are read into memory.

    ...
    read the network with time as cost of link
    NetTime network = NetworkManager.readNetwork (dbConnection, 'ITALIA_NET_TIME');
    read the network length as cost of link
    Network netLength = NetworkManager.readNetwork (dbConnection, 'ITALIA_NET_LENGTH');

    calculate the quickest way
    PathTime path = NetworkManager.shortestPath (netTime, startNodeID, endNodeID);
    calculate the shortest path
    PathLength path = NetworkManager.shortestPath (netLength, startNodeID, endNodeID);
    ...

    In the future, if you upgrade to 11g, network data model provides a load on demand (LOD) API that loads only the scores of necessary network in memory during the analysis. This command removes the restriction of the memory of the 10g (in memory API you use) API. API of LOD can handle very large networks and offers more features analysis and modeling capabilities.

    The following link contains the tutorial of NDM LOD API ready for download. Just for your information.
    https://spatial.SampleCode.Oracle.com/servlets/ProjectProcess?PageID=0Zl7oV

    Kind regards
    Jack

  • Error "host cannot communicate with all other nodes in the cluster of enabeld VSAN.

    Hello community,

    We have a problem (?).

    We have a cluster VSAN enabled with four hosts. Everything seems perfect,

    -the configuration is good,

    -Displays the page state VSAN "network status: (green arrow) Normal."

    -Displays the disk management page "status: healthy" for all of our groups of disks.

    -Same 'esxcli vsan cluster get"on each host returns a 'HEALTHY '.

    But we have a yellow exclamation littly on each host 'host cannot communicate with all other nodes in the cluster of enabeld VSAN.

    Anyone with the same problem? Anyone with an idea or a hint?

    Thank you!

    Update vcenter to the latest version and the error disappears. Problem solved! The 'old' version of vcenter performed since September 2014, strange.

    Thank you very much for your help!

  • The consistency API documentation

    Hi guys!
    Does anyone know where can I find javadoc for package com.tangosol.coherence.component. *? Because http://docs.oracle.com/cd/E24290_01/coh.371/e22843/index.html page main javadoc does not contain such documentation, but this package is a part of the coherence - 3.7.1.5.jar.

    Thank you in advance.

    Alexey O wrote:
    I try to force the execution of a code (not related to consistency) across the cluster by request. At first so I decided to use some messaging system consistency (I mean ClusterService.send (com.tangosol.coherence.component.net.Message)), but because it is intrinsic things, I think I can affect the stability of the cluster by my messages.
    Now, there is only one suggestion to create "message-cache" and use MapListener to trigger actions on the event 'Add '.
    Are there other mechanisms to implement such behavior? I can't use JMS.

    Alexey salvation,

    According to what reliability guarantees you want to achieve, there are some features and solutions that you can use.

    The thing out-of-the-box, that seems closer to what you want to do is the InvocationService which can be used to send your logic (indeed one implementation of an interface equivalent executable called remained) to an arbitrary set of cluster nodes (or all the) either wait or not waiting for all these nodes to treat your invoked implementation (often referred to as agent in the documentation).

    That would leave your shipment code be informed of the success or failure of your performance on each node targeted (as long as the sender node is around), but no automatic retry is provided by InvocationService. There are synchronous calls and call-back in the InvocationService. The callback-based approach is more versatile.

    Other approaches correspond to the storage of data and targeting of these approaches is not a member, but data-oriented.

    A list of these approaches include:
    -entry processors
    -model command
    -model of functor
    -e-mail template
    -processing model

    These each provide different safeguards all are targeted by the one or more key cache, so they are not so much alignment for "run once on each node" - like of scenarios.

    Best regards

    Robert

  • labView send data wireless node for the excel file

    Hi all

    I used the basic tutorial for the network of wireless sensors OR. http://www.ni.com/tutorial/8890/en/. I finished it with a single node. The next phase of my project is to send the data from the node and the date and time in an excel file every hour. Is there any advice I can get to at least send the date and the data in the excel file? I'm using labView in 2012

    I change, because I put the text instead of excel file

    You cannot connect a scalar to the entry level that is needed. A solution would be to insert a table to build before the writing on the worksheet.

  • The program is blocked by group policy, you contact the administrator

    original title: group policy

    I get an error when I try to play legally purchased game just cause 2

    the program is blocked by the foundations of the group, contact your administrator

    I have legal win 7 ultimate

    I don't know where or how or why this restriction is in Group Policy (you are on a domain network or is it a computer sttand-only or only connected to an ad hoc network).  If connected to a domain, the restriction may be from the server in which case you need to talk to the server administrator to understand why it is there and if it can be removed.

    If it is a home network or a stand-alone computer, access you group policy editor by going to start / search box and type in the Group Policy Editor, and then double-click on the icon for the program that apppears.  You will now be in the editor.  That is the problem - there is no way to search for the Publisher, so essentially you must check all entries to find the one that is blocking you.  On my system, no policy was in place by default, so I don't know how your got policies implemented - but if she says that group policy is causing this program is the solution.  I wish there were an easier way, but I know not at all.

    Sometimes blocks of security software programs by using Group Policy, so it is possible, this is how it happened--unfortunately, it does not help us find the location of the block, so it can be deleted.

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • The iis path network not found

    How to connect to my network from windows XP x 32 to a window 7 64 X from the computer of the tree, no one can conect they can see each other, but no ore file shear connection

    Hello
    Maybe this can help.

    ---------------------

    Win7 when configured on the peer-to-peer network has three types of configurations of sharing.

    Homegroup = only works between Win 7 computers. This type of configuration, it is very easy to entry level users to start sharing network.

    Network of home or work = fundamentally similar (and better) to the previous methods of theWorking Group sharing which allow you to control what, how and to whom the records would be shared with.

    Public share
    = network Public (as Internet Café) in order to reduce security risks.

    For the best newspaper of the results of each computer screen system and together all computers on a network of the same name, while each computer has its own unique name.

    http://www.ezlan.NET/Win7/net_name.jpg

    Make sure that the software firewall on each computer allows free local traffic. If you use 3rd party Firewall on, Vista/XP Firewall Native should be disabled, and the active firewall has adjusted to your network numbers IP on what is sometimes called the Zone of confidence (see part 3 firewall instructions

    General example, http://www.ezlan.net/faq.html#trusted
    Please Note that some 3rd party software firewall continue to block the same aspects it traffic Local, they are turned Off (disabled).
    If possible, configure the firewall correctly or completely uninstall to allow a clean flow of local network traffic.

    If you end up with the 3rd party software uninstalled or disabled, make sure that Windows native firewall is active .

    ------------------------------

    Network Win 7 with another version of Windows as a work network (works very well if all computers are Win 7 also).

    In the center of the network, by clicking on the type of network opens the window to the right.

    Choose your network type. Note the check box at the bottom and check/uncheck depending on your needs.

    http://www.ezlan.NET/Win7/net_type.jpg

    Win 7 - http://windows.microsoft.com/en-us/windows7/Networking-home-computers-running-different-versions-of-Windows

    Win 7 network sharing folder specific work - http://www.onecomputerguy.com/windows7/windows7_sharing.htm

    Windows XP file sharing - http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

    In Win XP Pro with simple sharing Off, you can visually see the Permission/security level and set them up at your convenience.

    http://www.Microsoft.com/windowsxp/using/security/learnmore/AccessControl.mspx#securityTab

    Sharing printer XP - http://www.microsoft.com/windowsxp/using/networking/expert/honeycutt_july2.mspx

    Setting Windows native firewall for sharing XP - http://support.microsoft.com/kb/875357

    When you have finished the configuration of the system, it is recommended to restart everything the router and all computers involved.

    -------------

    If you have permission and security issues with Vista/Win7, check the following settings.

    Point to a folder that wants to share do right click and choose Properties.

    In the properties

    Click on the Security tab shown in the bellows of the photo on the right) and verify that users and their permissions (see photo below Centre and left) are configured correctly. Then do the same for the authorization tab.

    This screen shot is to Win 7, Vista menus are similar.

    http://www.ezlan.NET/Win7/permission-security.jpg

    The Security Panel and the authorization Panel, you need to highlight each user/group and consider that the authorization controls are verified correctly.

    When everything is OK, restart the network (router and computer).

    * Note . The groups and users listed in the screen-shoot are just an example. Your list will focus on how your system is configured.

    * Note . All the users who are allowed to share need to have an account onall computers that they are allowed to connect to.

    Everyone is an account, that means a group of all users who already have an account now as users. It is available to avoid the need to configure permission for each on its own, it does not mean all those who feel that they would like to connect.

    Jack - Microsoft MVP, Windows networking. WWW.EZLAN.NET

  • Best practices for the restart of the nodes of the ISE?

    Hello community,

    I administer an ISE installation with two nodes (I'm not a specialist of the ISE, my job is simply to manage the user/mac-addresses... but now I have to move my ISE a VMWare Cluster nodes to another VMWare Cluster.

    (Both VMWare environments are connected to our network of the company, but are different environments. vMotion is not possible)

    I want to stop ISE02, move it to our new VMWare environment and start it again.

    That I could do this with our ISE01 node...

    Are there best practices to achieve this? (Stop request first, stopl replikation etc.) ?

    Can I really just reboot a node ISE - or I have consider something before I do this? After I did this?

    All tasks after reboot?

    Thanks for any answer!

    ISE01
    Administration, monitoring, Service policy
    PRI (A), DRY (M)

    ISE02
    Administration, monitoring, Service policy
    SEC (A), PRI (M)

    There is a lot to consider here.  If changing environments involves a change of IP address and IP extended, then your policies, profiles and DACL would also change among other things.  If this is the case, create a new VM ISE in the new environment in evaluation license using the and recreate the old environment deployment by using the address of the new environment scheme.  Then a new secondary node set rotation and enter it on the primary.  Once this is done, you can re - host license from your old environment on your new environment.  You can use this tool to re - host:

    https://Tools.Cisco.com/swift/LicensingUI/loadDemoLicensee?formid=3999

    If IP addressing is to stay the same, it becomes simpler.

    First and always, perform an operational backup and configuration.

    If the downtime is not a problem, or if you have a window of maintenance of an hour or so: just to close the two nodes.  Transfer to the new environment and light them, head node first, of course.

    If the downtime is a problem, stop the secondary node and transfer it to the new environment.  Start the secondary node and when he comes back, stop the main node.  Once that stopped services on the head node, promote the secondary node to the primary node.

    Transfer of the FORMER primary node to the new environment and turn it on.  She should play the role of secondary node.  If it is not the case, assign this role through the GUI.

    Remember, the proper way to shut down a node of ISE is:

    request stop ise

    Halt

    By using these commands, the risk of database corruption decreases by 90% (remember to always backup).

    Please rate useful messages and mark this question as answered if, in fact, does that answer your question.  Otherwise, feel free to post additional questions.

    Charles Moreton

  • AAA accounting in charge of the Windows 2008 network POLICY server log

    Hello world

    We have configured our Cisco devices to use Windows 2008 network POLICY server for RADIUS.  However, we cannot configure aaa represents priv 15 commands to use the same radius servers for recording of commands in privileged mode.  When you set up by using the following command:

    AAA commands 15 arrhythmic default accounting RADIUS_SERVERS group

    I noticed that there is only GANYMEDE + servers 'group' categories and optional.  After entering the server radius group, I realized that the command is not saved and by inspecting the logs I saw the following:

    The 'MF_RAD' server group is not a Ganymede server group. Please define "RADIUS_SERVERS" as a Ganymede server group.

    This means that the function of accounting 'orders' (and probably most others) can be activated only when you use a GANYMEDE Server +?

    Thanks in advance

    You're absolutely right. Accounting command only works with Ganymede. We cannot have the command for the radius Protocol accounting. RADIUS accounting only gives you start and stop sessions package.

    ~ BR
    Jatin kone

    * Does the rate of useful messages *.

  • I'm unable to start the service for the name of the account to Network Service on Windows Server 2008.

    Original title: name of the account network Service can be resolved correctly on windows French

    I have a service, I want to run under the network service on windows French account. Computer is not in the field, but in the working group.

    Service is installed via install and uses the WinAPI functions to get the name of a valid account of localized, which is the AUTHORITY NT\SERVICE NETWORK.

    The problem is that service fails with errors in the following event viewer:

    (1) service depends on the Net Logon service which failed to start because of the following error:
    The operation was successful.

    (2) this computer is configured as a member of a workgroup, and not as a member of a domain. It is not necessary to perform the service access network in this configuration.

    However, if I go to the properties of this Service, Log On tab and button Browse... to address the NETWORK SERVICE account, it sticks "Network Service" value in field and function successfully starts. Note that it may not resolve the display name 'AUTHORITY NT\SERVICE NETWORK'.

    Another thing is that when I put the computer in the domain that manages all the service suddenly starting with 'AUTHORITY NT\SERVICE NETWORK' account but the system does not transform it in "Network Service" on English windows.

    So is this a bug on a French OS? Is there a solution? How can I get programmatically "converted" version of the account name ('AUTHORITY NT\SERVICE NETWORK'-> 'Network Service')?

    System: Windows 2008 R2 SP1 with the latest updates to the 01/10/2013

    Hi Vadim,

    I would have you post your query in the TechNet Forums because it caters to an audience of it professionals.

    Your question would be more out there.

    Check out the link-

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

    Back to us for any issues related to Windows in the future. We will be happy to help you.

    Thank you.

  • Twice NAT on Site at the tunnel with the same private networks.

    Hello

    Currently, I am trying to configure a Site to Site tunnel between an IOS router and an ASA 5505 running 9.1

    When deprived of the IOS router subnet was 10.0.0.0/24 and the subnet private SAA was 172.16.1.0/24, it connected properly.

    I'm now putting in place where the two private networks is 10.0.0.0/24 and objects network created, edited the ACL for interesting traffic and created the rule of NAT translation and twice, but the tunnels are not coming. I was hoping someone could shed some light on where I'm wrong.

    There are route it (R1) IOS and ASA (F2). Between them is an Internet addresses asking the router which is just set up to allow both sides to achieve their WAN.

    R1 and F2 have private network (10.0.0.0/24) need to communicate. Twice NAT can be done on the ASA to allow this, but I have to do something wrong. The way I understand it, is that the R1 should see traffic coming from 10.51.0.0/24 and send to this traffic. The ASA will have this traffic and the inside network should see it coming entering as 10.50.0.0/24. If F2's private network communicates with 10.50.0.0/24, and the private network R1 sends traffic to 10.51.0.0/24.

    I turned on "Debug crypto ipsec" and "debug crypto isakmp" but no output is appear or give any indication that she is trying to establish anything.

    Any help would be greatly appreciated! Thank you!

    R1 #show run

    version 12.4

    hostname R1

    crypto ISAKMP policy 50
    BA 3des
    preshared authentication
    Group 2
    address of cisco crypto isakmp 10.2.0.254 keys

    Crypto ipsec transform-set esp-3des esp-sha-hmac L2L_SET

    50 CRYPTO ipsec-isakmp crypto map
    defined by peer 10.2.0.254
    game of transformation-L2L_SET
    match address CRYPTO

    interface FastEthernet0/0
    10.0.0.253 IP address 255.255.255.0
    IP nat inside
    IP virtual-reassembly
    IP ospf message digest authentication
    Cisco IP ospf authentication key
    automatic duplex
    automatic speed

    interface FastEthernet0/1
    IP 10.1.0.254 255.255.255.0
    NAT outside IP
    IP virtual-reassembly
    IP ospf message digest authentication
    Cisco IP ospf authentication key
    automatic duplex
    automatic speed
    Crypto card CRYPTO

    IP classless
    IP route 0.0.0.0 0.0.0.0 10.1.0.253
    IP route 10.2.0.0 255.255.255.0 10.1.0.253
    !
    !
    IP http server
    no ip http secure server
    overload of IP nat inside source list SHEEP interface FastEthernet0/1
    !
    IP extended CRYPTO access list
    Licensing ip 10.0.0.0 0.0.0.255 10.51.0.0 0.0.0.255
    SHEEP extended IP access list
    deny ip 10.0.0.0 0.0.0.255 10.51.0.0 0.0.0.255
    allow an ip

    =========================================================================

    See the F2 # running
    : Saved
    :
    ASA Version 9.1 (1)
    !
    hostname F2
    activate 3a57ZsZ4Kgc.ZsL0 encrypted password
    3a57ZsZ4Kgc.ZsL0 encrypted passwd
    names of

    interface Vlan1
    nameif inside
    security-level 100
    IP 10.0.0.254 255.255.255.0
    !
    interface Vlan2
    nameif outside
    security-level 0
    IP 10.2.0.254 255.255.255.0

    network of the PRIVATE object
    10.0.0.0 subnet 255.255.255.0

    network of the PARTNER_PRIVATE object
    10.0.0.0 subnet 255.255.255.0
    network of the PARTNER_VPN_INBOUND object
    10.50.0.0 subnet 255.255.255.0
    network of the PARTNER_VPN_OUTBOUND object
    10.51.0.0 subnet 255.255.255.0

    Access extensive list permits all ip a OUTSIDE_IN
    CRYPTO extended access list ip 10.0.0.0 allow 255.255.255.0 10.50.0.0 255.255.255.0

    NAT static (inside, outside) PARTNER_VPN_OUTBOUND PRIVATE destination static source PARTNER_PRIVATE PARTNER_VPN_INBOUND
    !
    network of the PRIVATE object
    NAT dynamic interface (indoor, outdoor)
    Access-group OUTSIDE_IN in interface outside
    Route outside 0.0.0.0 0.0.0.0 10.2.0.253 1
    outdoor 10.1.0.0 255.255.255.0 10.2.0.253 1
    the ssh LOCAL console AAA authentication

    Crypto ipsec transform-set esp-3des esp-sha-hmac L2L_SET ikev1
    Crypto ipsec pmtu aging infinite - the security association
    crypto L2L_MAP 50 card matches the address CRYPTO
    card crypto L2L_MAP 50 set peer 10.1.0.254
    card crypto L2L_MAP 50 set transform-set L2L_SET ikev1
    L2L_MAP interface card crypto outside
    trustpool crypto ca policy
    Crypto ikev1 allow outside
    IKEv1 crypto policy 50
    preshared authentication
    3des encryption
    sha hash
    Group 2
    life 86400

    tunnel-group 10.1.0.254 type ipsec-l2l
    IPSec-attributes tunnel-group 10.1.0.254
    IKEv1 pre-shared-key *.

    object network PRIVATE
    subnet 10.0.0.0 255.255.255.0

    object network PARTNER_PRIVATE
    subnet 10.0.0.0 255.255.255.0
    object network PARTNER_VPN_INBOUND
    subnet 10.50.0.0 255.255.255.0
    object network PARTNER_VPN_OUTBOUND
    subnet 10.51.0.0 255.255.255.0

    access-list OUTSIDE_IN extended permit ip any any
    access-list CRYPTO extended permit ip 10.0.0.0 255.255.255.0 10.50.0.0 255.255.255.0

    nat (inside,outside) source static PRIVATE PARTNER_VPN_OUTBOUND destination static PARTNER_PRIVATE PARTNER_VPN_INBOUND

    Here in nat rule u use subnet PARTNER_PRIVATE, which is the same as a local, so the devices never send this traffic to the ASA, cause they know that this subnet (10.0.0.0/24) is in their local subnet. Therefore, you must write the nat rule in this way (i.e. the change of objects Web places):

    nat (inside,outside) source static PRIVATE PARTNER_VPN_OUTBOUND destination
    static  PARTNER_VPN_INBOUND PARTNER_PRIVATE

    So the hosts on the subnet behind ASA will see the hosts on the subnet behind SRI as 10.50.0.0/24 and trying to reach the subnet behind SRI, you must use the 10.50.0.x one-to-one wich addresses correspond to 10.0.0.x it.

    In addition, your proxy-acl on asa must use post-nat addresses, which should look like this:

    IP 10.51.0.0 allow CRYPTO access list 255.255.255.0 10.0.0.0 255.255.255.0

  • Who decides the surviving node during the detection of split brain?

    How oracle decides which node be deported upon detection of split brain when all nodes have written in the voting record, but unable to check the heart rate through interconnection.

    Ajay

    Hi Ajay,

    the complexity of this depends on the amount of nodes in the cluster and how is isolated (and how), but generally speaking "the cluster creates an invisible group (cohorts) between nodes, which could potentially cause corruption and should be resolved. » Oracle Clusterware manages the "split brain" scenario in putting an end to all nodes in the smallest cohort. "If the cohorts are the same size, the cohort with the smallest number node inside survives." (Cited in Apress - Expert Oracle RAC diagnostic Performance and Tuning by Murali vandenberghe)

    Best regards

    Stefan Koehler

    Researcher and consultant independent of Oracle performance

    Twitter: @OracleSK

Maybe you are looking for