Lance's questions

I'm probably missing something obvious here, but, I am trying to make some adjustments to the Vkernel Port management interface on vSwitch0 that is set to VLAN ID: All (4095).

So I don't disconnect myself, I have added a second switch (vSwitch1), added the secondary NIC on my host to it and connected it to my switch.

I have connectivity to vSphere and via ping.

If I shut the port that connects vSwitch0 to my network infrastructure, my ping is maintained to my secondary vKernal Port, but I am unable to connect to vSphere...

Any tips greatly appreciated as always.

I have configured my esxi host vSwitch1 to use the secondary NIC on my VMware host.

On vSwitch1 configuration I have set the VLAN to 4095 which specifies to allow all VLANs.

If my cisco switch port configuration is set to an access port my server can ping the vlan interface on the switch.

If my cisco switch port configuration is set to a trunk, whilst it stays UP UP and CDP information is available, I lose my ping from VMware VM server to the local vlan interface on the switch and I lose any server connectivity to my network.

• Switch NIC teaming policy to Route based on originating virtual port ID

• Configuration based on: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006628

  interface GigabitEthernet0/42
  description Host Port
  switchport trunk encapsulation dot1q
  switchport trunk allowed vlan 18,220
  switchport mode trunk
  switchport nonegotiate
  spanning-tree portfast trunk
  end
  
  

Output from ESXI CLI esxcfg-vswitch -l:

~ # esxcfg-vswitch -l
Switch Name Num Ports Used Ports Configured Ports MTU Uplinks
vSwitch0 128 5 128 1500 vmnic0

PortGroup Name VLAN ID Used Ports Uplinks
VM Network 4095 1 vmnic0
Management Network 4095 1 vmnic0

Switch Name Num Ports Used Ports Configured Ports MTU Uplinks
vSwitch1 128 4 128 1500 vmnic1

PortGroup Name VLAN ID Used Ports Uplinks
VM Network 2 4095 1 vmnic1

Any tips welcome!!!

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable.

My goal is for it to check the TACACS server first, then failover if it is not contactable.

It is my understanding that the below configuration line would achieve this, with the word "local" coming AFTER the "group tacacs+" command to achieve this:

aaa authentication login vtymethod group tacacs+ local

Test: I disable the TACACS service on the server and try and authenticate with a local user and am told that the user is not in a group (like it was being rejected by TACACS).

I can achieve the end goal as stated above with the following command line instead:

aaa authentication login vtymethod local group tacacs+

So that it checks if the user is firstly available locally first... it was ALWAYS my understanding that putting it last would allow it to failover and would like TACACS to be checked first...

Any tips on where I am going wrong here?

I have set 100GB as the limit of my VMDK. I can reduce the size by using the vmkfstools -k my.vmdk

What I would really like to do is take 20GB off the thick size of the disk.

Any advice? I would prefer something in the CLI vs using the converter but open to advice :).

We are using the cisco IOS feature of configuration archiving and it has been very useful.

One thing we are finding is that we have set the maximum file count to 14, which is fine.

Except when we reboot the router, the counter is reset and it creates another 14 files.

This could end up filling up the flash which would not be desired.

Does anyone know how we can best deal with this?

Thanks!!

We have a fresh requirement to log information to do with vpn connections.

The ultimate goal would be facilitating IT management being able to easily review when someone had been connecting / disconnecting over a period of time.

I have the information being syslogged to our NAS, but this doesn’t quite fit the bill due to the amount of information presented.

Do you know if there is an easy way for us to facilitate this or any tools that might parse the data?

Thanks in advance!

We have been facing a lot of issues where users will copy large amounts of data from network shares across the WAN onto their local computers.

This causes a lot of congestion on the network and we would like to somehow restrict it :)

Any suggestions?

We host a site with a 2900 series router with 3x 3G-HWIC cards installed.

It is hosted with telstra and plugs into our corporate WAN.

The card authenticates against radius and advertises a route into the WAN for which subnet it routes for.

We have always used the same advertised subnet on each.

Telstra have advised us that this could be the cause of some drop out issues whereby some services will work for some people and not for others and are saying effectively that their system will only use one of these at a time even though we can see the interface is online and assigned a WAN IP address.

Has anyone out there configured a multi HWIC setup before and if so are they using different subnets for each or the same?

We have a cisco phone system setup successfully.

I am setting up a bunch of phones, of which, one keeps getting an data vlan ip address from the DHCP server.

Any suggestions?

I have factory reset the phone a number of times.

I was wondering if anyone could give me any information regarding the dependencies for this?

I can see the lists just fine within the website.

I can load up the sharepoint admin central site in sharepoint designer and see lists.

Permissions are all turned on but not love.

returns 404 - not sure if required or not.

NEW INFO:

This issue has occurred after updating Sharepoint to 2010.

I setup logging so that I could see if there were any errors and sure enough there were.

"Failed to determine the setup path of the list schema for feature {75a0fea7-040e-4abb-b94b-32f1e7572840}, list template 106.

I think I have to either install this feature or remove the list item that uses it.

EDIT SOLUTION: So ... this GUID refers to a list item that is using a particular template or something from 40 fab templates. In upgrading to sharepoint 2010 these no longer worked.

So there were three lists: Absences Absence Types Google Maps .. something.

Deleting these from powershell was the resolution.

A tell tale sign of which items were causing the dramas was that when you clicked on it from within the website it errored.

I'm using WDS to deploy a windows 7 image that I've captured.

Unfortunately, the AMD PCnet-FAST III is not recognised by windows 7 with VirtualBox.

Can anyone help me find a driver and or suggest another NIC to use with VirtualBox?

I know this is a particularly difficult thing to troubleshoot as there are various complexities in the setup, but wondering if anyone has experienced this and can recognise the issue / offer some steps to troubleshoot.

Firstl, is WAIK required before you can use WDS for a capture?

I'm running virtualbox on a macbook pro.

Setup:

• Server 2008 Roles: DHCP, Active Directory, DC, WDS

• Windows 7 - receives DHCP from the PDC and receives DHCP upon PXE Boot

Both VMs have bridged adapters.

I have added windows 7 install and boot images and gone through the process of creating a Capture Image in preparation for the PXE Boot to capture the installed OS.

My Windows 7 virtualbox is set to network boot, it runs through the PXE Boot obtains DHCP but then states "No filename" and continues to boot off the hard disk.

Hope I have included all the information you will need to know! Any help would be greatly appreciated.

I'm new to TLS Authentication but have read and followed the following document with fine detail: http://technet.microsoft.com/en-us/library/bb266978(EXCHG.80).aspx

I have configured this in a virtual test environment and all appears to be working... mail flows... I can inspect the verbose email logs and I can see the certificate being sent and received within the log.

I am just not 100% sure that this means that TLS is working!

Does anyone know specifically with 100% certainty what fields in the message headers and/or the verbose logging which indicate that TLS is enabled and operational?

I have an SBS 2003 machine to configure.

I am required to host both webmail.company.com:443 & intranet.company.com:443 on the same IIS server using the one IP address and of course the same port (443).

I am able to configure IIS to do this using host headers and updating the metabase using adsutil.vbs, but when I do, ActiveSync stops pushing emails and starts throwing this application error:

Event Type: Error
Event Source: Server ActiveSync
Event Category: None
Event ID: 3005 Date:
Time:
User: domain\user
Computer: domain
Description: Unexpected Exchange mailbox Server error: Server: [domain.local] User: [[email protected]] HTTP status code: [400]. Verify that the Exchange mailbox Server is working correctly.

Notably being an SBS box its both a frontend and backend server so many of the tips around regarding requiring SSL access do not apply.

Any help would be most greatly appreciated!

EDIT: In reading this: http://support.microsoft.com/kb/324287 I have noticed it may be because I shouldn't put host headers on the default website where my exchange virtual folders live. Any confirmation would be great!

I have the need to receive requests for intranet.domain.com and webmail.domain.com on the same IIS webserver.

This webserver has two internal IP addresses which host each of these two subdomains.

Is anyone able to suggest how I might go about using the Cisco ASA 5505 I have implemented to redirect queries for each URL through to the corresponding private internal IP hosted on the web server?

Both websites are hosted on port 443 using the same digital (wildcard) certificate.

I am able to do this using host headers and updating the SecureBindings attribute in the metabase but this has killed off ActiveSync's ability to push emails.