SpacemanSpiff's questions

So here's the scenario, and I'm hoping @Chopper3 can chime in here. For our SAN fabric, we have a pair of Cisco MDS 9513 FC switches with three EMC frames and four Cisco UCS domains directly attached.

The behavior we are seeing is that the CNA's on the blades are sending FC aborts as a result of the fabric interconnect transmitting FCoE pause frames. Cisco TAC explains this behavior is a result of upstream congestion or latency. We do see a corresponding spike in our data from the 200 or so ESXi servers in the environment reporting latency spikes from 100ms to 2000ms. Some frames and paths seem hit a little harder than the others, which leads me to believe that we're hot-spotting one or more of the links.

The blades are B200M2, B200M3, and B420M3 servers, using. The M2 series use the "Palo" adapter the M81KR, and the M3 series use the VIC1240 adapter.

Since I'm not too depth FC knowledgeable, I'd appreciate some suggestions on how to hunt this down.

I currently have two separate AD forests that exist within the same subnet. The two forests have independent copies of the reverse lookup zone for that subnet.

Example:

Domain A DC1: 10.1.1.1/24

Domain A DC2: 10.1.1.2/24

Domain A AppServer1:10.1.1.3/24

Domain B DC1: 10.1.1.11/24

Domain B DC2: 10.1.1.12/24

Domain B Appserver1:10.1.1.13/24

What I'm after, is a configuration that allows this reverse zone to be shared between them so that both sets of DNS servers can make updates to the zone.

This kind of thing is a little far from my everday work, so a kick in the right direction is a welcome suggestion as well. Decoupling one AD into new segments is a possibility I'm open to but would like to avoid if possible. If there is a DNS related solution I'd prefer that.

I'm attempting to move a GroupWise POA from a crippled SLES cluster to a 2008R2 server, it appears all the binaries meet the requirements, but where the documentation fails me are for a few questions:

1) Is a local installation of eDirectory required on the Windows server?

2) There are references to using a DBcopy utility when migrating TO Linux due to filename case changes, is this a concern going the other direction? I suspect not.

In order to support desktop imaging requirements I need to correct the multicast design on an existing network, but am not well versed in this subject. The diagram below gives a basic example of the topology. The Juniper EX8200 is the hub in a simple hub and spoke design. It has 1Gb L3 interfaces directly connected to each of the other sites. OSPF is enabled on these interfaces to exchange routes with Cisco devices at the other sites. The hub and each site will have one or more VLANS trunked to closet switches. My understanding up to this point is that on each of the VLAN interfaces at each site, I should have both IGMP and IGMP-Snooping enabled. On the WAN connections, I should have PIM dense mode enabled on the Juniper side, and sparse-dense-mode enabled on the Cisco side. For the Juniper's directly connected VLANs, I'm unsure which mode to use, but since its the largest environment with the most clients, I would expect to simply use dense mode on all of them. So here are my questions:

1) Do I have to concern myself with assigning addressing anywhere here? 2) Are there any major flaws in this design?

I'm trying to figure out how to use ECMP load balancing in JUNOS. I know this isn't the best way to load balance, but its quick and dirty and gets done what I need to. In ScreenOS this was pretty easy.

Device: SRX220 JunOS: 10.3R2.11

Here's what I've got so far:

routing-options {
    static {
        route 0.0.0.0/0 {
            next-hop [ 1.1.1.1 1.1.1.2 ];
            metric 10;
        }
    }
    maximum-paths 2;

Will that do it?

Tom

Here's what I'm trying to accomplish:

Existing Setup:

2 x Netopia ADSL 3347 Gateways that are each connected to a Juniper SSG140 via Ethernet. The Netopia boxes appear to each have a PPPoE interface bridged to the Ethernet side of things that is taking one of the 5 IP addresses in the /29 they've assigned to us. The SSG has two untrust interfaces set with equal cost routing to give us a pseudo load balance.

Desired Setup:

New Juniper SRX220 w/integred ADSL PIM cards

Frustration:

The DSL interface at-1/0/0 and at-2/0/0 appear to be configured properly, physical sync is fine. When I configure the PPPoE interface (pp0 unit 0 and pp0 unit 1) if I set the family inet section to negotiate address I get a /32 address and the connection does work, but this is not my assigned range it appears random as it changes if I down the interface and reconnect. If I set the family inet address section to xxx.xxx.xxx.xxx/29 it takes the configuration and the tunnel comes up bet there clearly is no peer to communicate with. My thought is that under negotiate I'm being given some kind of default gateway and I need to put it in statically.

Where I get confused is when I look at the Netopia's routing table for reference and it shows the default route to be in another network thats it not connected to.

Any thoughts? I figure I'm missing something simple.

Thanks, Tom

Can someone tell me what the Juniper JUNOS equivalent is for Cisco's spanning tree portfast command? My google-fu keeps leading me to long whitepapers on Spanning tree and not so much configuration examples.

When I configured my Droid 2 (Android 2.2) to communicate with our Exchange 2007 client access server, it appeared to apply a policy that forced me to use a password lock on the device.

Curious, I went to look and the default ActiveSync policy that we are using does not appear to have this enforcement configured, so it must be the device doing this.

My question is, is there a way to override this? On either end?

Our clients use the domain handed out by our DHCP server ourcompany.com as their default search suffix. I would like to add a second domain for them to search. /etc/resolv.conf looks like it will be overwritten on startup by some other process. I'm assuming I will need to run a defaults write com.apple.blahblahblah command or script.

Has anyone done this?

Thanks, Tom

Environment:

Windows 2008R2 and 2003 DCs Exchange 2007 two servers, one client access/hub server, one mailbox server. Outlook Anywhere is configured. Windows Vista, Windows 7 Clients, Mix of Outlook 2007/2010.

Here's what's happening:

On the LAN: Clients occasionally get prompted for password, never fails to authenticate.

From the Outside: Clients almost always get prompted for password, it will either work, or prompt for password over and over and over.

I see three places for me to make adjustments here:

1. The client and choose NTLM or Basic authentication, since this is over HTTPS, I have no preference.

2. The directories in IIS on the OWA server have authentication properties you can set, I've ticked a few of these on and off to no avail (basic, windows integrated, etc).

3. From Exchange Management Console, you can choose basic or NTLM.

I imagine these all need to align, but what's the RIGHT way to set this up? I've tried to find some authoritative Microsoft articles, but I'm banging my head on the table here.

I'm kind of scratching my head here.

One of our clients has a DL180 with 4 x 146GB SAS drives, they show up in ACU as 147GB drives. We ordered spares from HP, and they show as 146GB in ACU and therefore it will not rebuild! I'm a little confused.

I've never seen a 147GB sas drive. Checking some compatibility lists against the part numbers we do see that the different the disks are supposed to be compatible or interchangeable.

Has anyone had to deal with this?

Thanks, Tom

I'm trying to figure out what's going on here. I migrated a server from NW6.5SP8 to OES2 Linux. All the trustees on the NSS volumes came over and at some point in the past week, they started being ignored. It's almost as if all the users have supervisor rights from the top down. I don't see this set anywhere. What's going on?

Tom

In the past with NetWare we could use Remote Manager to see what user had a file locked, and clear the connection. How is this accomplished for an NSS volume hosted on OES2 Linux?

Thanks, Tom

Is there an easy way to restart the Novell Remote Manager on NetWare? I tried to unload/release HTTPSTKD.nlm but there are WAY too many dependencies.

I've tried many different variations of http(s)://ip:8008(8009) and to no avail. I think the daemon is simply not responding.

Thanks, Tom

I have all my older ZENworks objects separate into an OU in eDirectory. I'd like to remove all the associations to those objects (as in, they're assigned to users, ou's, etc.) in mass. I'd imagine I could do this with LDIF, but don't have much experience doing so. Suggestions for mass changes?

Thanks, Tom

I'd like to copy my SLES10SP3 and OES2SP2 disks to the system so I don't need to continually insert them for package management. What's the best way to do this?

I'm trying to find a modern version of modrdirs.nlm that was for Apache 1.3 on NetWare. Does this work on Apache 2.0/2.2? Is there an OES2 Linux equivalent modules?

Thanks, Tom

I have a NetWare server running Apache that has directory aliases that call out to other NetWare servers. I'm about to migrate one of those NetWare servers to SLES10SP3 with OES2. When I test the Apache config with a new alias calling to a SLES server, I can get a directory listing of files truncated to 8 characters. I cannot download said files, just get a listing of them. I do have long namespace set on the NSS volume of the SLES server, and indeed if I light up Apache2 on there and call the same directory as an alias, it serves up fine.

So, the only thing that DOESN'T work, is calling it through Apache on the NetWare box.

Any ideas, are appreciated.

Tom