Friday, October 24, 2014

vDisk owned by Control Domain

VM disks becoming “owned by the Control Domain”.

You know: you tried to migrate a VM, move a disk, or take a snapshot and POW: you look on your SR to find that your VM’s disk is owned by “the control domain”.

1.  Why does this happen?
Basically it boils down to disk operations on/from a VM failing.  Operations such as move, copy, snapshot, export, etc.

2.  How do I get around it?
One answer is to reboot.
Another way is to find the link between your virtual disk and DOM0 (the control domain) from your stand-alone XenServer (or primary server if you have a pool).

Use  list_domains to get the UUID of DOM0 (the control domain):
[root@rightserver boot]# list_domains
id |                                                        uuid |  state
 0 | 09dffafe-5bec-430d-bc80-6ddb2313beff |     R
1 | 94c63c12-0851-708d-7f95-c011f2760649   |    RH
21 | a8f76fee-0b45-b5ee-7d83-14f6b530141f   |    B H
The control domain UUID is 09dffafe-5bec-430d-bc80-6ddb2313beff

Now we have to  find the VBD(s) that DOM0 (the control domain) owns:
xe vbd-list vm-uuid=<DOM0 UUID, such as 09dffafe-5bec-430d-bc80-6ddb2313beff id>

This will show information about any Virtual Block Device (VBD) that DOM0 (the control domain) may be hanging onto.  What we are interested in is the UUID of the VBD(s).

Grab the VBD’s UUID and execute:
xe vbd-unplug uuid=<UUID of the VBD being held by DOM0>

Finally, run:
xe vbd-destroy uuid=<UUID of the VBD being held by DOM0>



And there – rescan your storage repository and your VDI (virtual disk interface) should be free for your use.

Wednesday, July 30, 2014

Prevent users from auto-forwarding their email to an external domain


In Exchange Server 2007

Exchange Management Console | Hub Transport | Remote Domains | Default -> properties | Message Formats tab | "Allow Automatic Forward" - uncheck this.

Monday, July 28, 2014

XenApp 6.x terminology mapped to XenApp 7.x

XenApp 6
Instead of…
XenApp 7
Think of…
Independent Management Architecture (IMA)
FlexCast Management Architecture (FMA)
Farm
Delivery Site
Worker Group
Session Machine Catalog
Delivery Group
Worker
Virtual Delivery Agent
Server OS Machine
Desktop OS Machine
Zone and Data Collector
Delivery Controller
Delivery Services Console
Citrix Studio and Citrix Director
Publishing applications
Delivering applications
Data store
Database
Load Evaluator
Load Management Policy
Administrator
Delegated Administrator
Role
Scope


Send mail via telnet

1. Telnet mail.domain.com 25 (obviously replace mail.domain.com with whichever mail server you want to    use.)

2. helo your domain name

3. mail from:your email address

4. rcpt to:destination address

5. data

6. Type your message

7. . (type a period and hit enter)

Configure users for internal mail routing only

You should be able to use Transport Rules to do that. Make sure those groups are Distribution Groups (they can eventually be hidden from Address Lists).

To forbid sending E-mails outside of Exchange, create a rule:
  • if sender is member of group2
  • and message is sent outside the organization
  • then drop the message
  • and send NDR with status code (choose code and message)

To forbid receiving E-mails from the Internet:
  • either use the same principle (if user is member of group2 and sender is outside the organization, drop with a custom message
  • or in the delivery options for those users, only allow messages from authenticated users
  • you can make exceptions, for instance if you have custom applications sending messages directly to Exchange

For group3, then
  • create a rule that forbids sending to member of a distribution list when sender is member of group3
  • and send NDR etc

Link:
http://social.technet.microsoft.com/Forums/en-US/aeece703-a5b9-40ff-9ec1-e2977f7d6a56/how-to-configure-users-for-internal-mail-routing-only

Thursday, July 24, 2014

vLAN Tagged/Untagged

Assigning Ports to vLANs

Before enabling vLANs for the switch, you must first assign each port to the vLAN groups in which it will participate. By default, all ports are assigned to vLAN 1 as untagged ports. You should add a tagged port (a port attached to a vLAN-aware device) if you want it to carry traffic for one or more vLANs and the device at the other end of the link also supports vLANs. Assign the port at the other end of the link to the same vLANs. However, if you want a port on this switch to participate in one or more vLANs and the device at the other end of the link does not support vLANs, you must add an untagged port (a port attached to a vLAN-unaware device).
Port-based vLANs are tied to specific ports. The switch's forwarding determination is based on the destination MAC address and its associated port. Therefore, to make valid forwarding and flooding decisions, the switch learns the relationship of the MAC address to its related port (and to the vLAN) at run-time.


Think of it this way - untagged port is when you have an end device that doesn't know what tagging is, but you still need to assign it to a particular vLAN. Basically, you're telling the switch that "All traffic in from this port that doesn't explicitly have a tag will get tagged with this vLAN ID"

If your switches understand vLANs, then you would tag the ports between them. You tell the switch that traffic with these vLAN tags is allowed to pass.

For inter vLAN routing you need to either go through your router, or enable routing in your switches. You need to explicitly allow this, otherwise you can't reach one vLAN from another

"Trunk" ports are those between switches or a switch and a device like an access point or firewall, where you could need more than one vLAN to pass.

Cisco Router Interface Status

The first line of the show interface command is the most important one. The first parameter refers to the physical layer, therefore in this case FastEthernet 0 is up and operating. The second part of the line refers to the Data Link Layer; therefore here line protocol is up means that we have layer 2 connectivity as well.

There are four possible outputs that you may come across:

FastEthernet0 is up, line protocol is up: Both the Physical and Data Link layers on the interface are functioning correctly.
FastEthernet0 is down, line protocol is down: This output indicates a physical interface problem. For example, the cable on this interface or on the remote interface is disconnected.
FastEthernet0 is up, line protocol is down: In this case, Physical layer is operational. The line protocol being down indicates a clocking or framing problem. Probable reasons for this are encapsulation and clock rate mismatches.
Ethernet0 is administratively down, line protocol is down: This output indicates that a local interface has been manually shut down using the shutdown command.

===============================================================================================================
#1: The "?"

It may seem entirely too obvious that you should know how to type ? to ask for help when using the Cisco IOS. However, the Cisco IOS is completely different from other operating systems when it comes to using the question mark (help key). As the IOS is a command-line operating system with thousands of possible commands and parameters, using the ? can save your day.

You can use the command in many ways. First, use it when you don't know what command to type. For example, type ? at the command line for a list of all possible commands. You can also use ? when don't know what a command's next parameter should be. For example, you might type show ip ? If the router requires no other parameters for the command, the router will offer CR as the only option. Finally, use ? to see all commands that start with a particular letter. For example, show c? will return a list of commands that start with the letter c.

#2: show running-configuration

The show running-config command shows the router, switch, or firewall's current configuration. The running-configuration is the config that is in the router's memory. You change this config when you makes changes to the router. Keep in mind that that config is not saved until you do a copy running-configuration startup-configuration. This command can be abbreviated sh run.

#3: copy running-configuration startup-configuration

This command will save the configuration that is currently being modified (in RAM), also known as the running-configuration, to the nonvolatile RAM (NVRAM). If the power is lost, the NVRAM will preserve this configuration. In other words, if you edit the router's configuration, don't use this command and reboot the router--those changes will be lost. This command can be abbreviated copy run start. The copy command can also be used to copy the running or startup configuration from the router to a TFTP server in case something happens to the router.

#4: show interface

The show interface command displays the status of the router's interfaces. Among other things, this output provides the following:

Interface status (up/down)
Protocol status on the interface<
Utilization
Errors
MTU
This command is essential for troubleshooting a router or switch. It can also be used by specifying a certain interface, like shint fa0/0.

#5: show ip interface

Even more popular than show interface are show ip interface and show ip interface brief. The show ip interface command provides tons of useful information about the configuration and status of the IP protocol and its services, on all interfaces. The show ip interface brief command provides a quick status of the interfaces on the router, including their IP address, Layer 2 status, and Layer 3 status.

#6: config terminal, enable, interface, and router

Cisco routers have different modes where only certain things can be shown or certain things can be changed. Being able to move between these modes is critical to successfully configuring the router.

For example, when logging in, you start off at the user mode (where the prompt looks like >). From there, you type enable to move to privileged mode (where the prompt looks like #). In privileged mode, you can show anything but not make changes. Next, type config terminal (or config t) to go to global configuration mode (where the prompt looks like router(config)# ). From here, you can change global parameters. To change a parameter on an interface (like the IP address), go to interface configuration mode with the interface command (where the prompt looks like router(config-if)#). Also from the global configuration mode, you can go into router configuration using the router {protocol} command. To exit from a mode, type exit.

#7: no shutdown

The no shutdown command enables an interface (brings it up). This command must be used in interface configuration mode. It is useful for new interfaces and for troubleshooting. When you're having trouble with an interface, you may want to try a shut and no shut. Of course, to bring the interface down, reverse the command and just say shutdown. This command can be abbreviated no shut.

#8: show ip route

The show ip route command is used to show the router's routing table. This is the list of all networks that the router can reach, their metric (the router's preference for them), and how to get there. This command can be abbreviated shipro and can have parameters after it, like shiproospf for all OSPF routers. To clear the routing table of all routes, you do clear ip route *. To clear it of just one route, do clear ip route 1.1.1.1 for clearing out that particular network.

#9: show version

The show version command gives you the router's configuration register (essentially, the router's firmware settings for booting up), the last time the router was booted, the version of the IOS, the name of the IOS file, the model of the router, and the router's amount of RAM and Flash. This command can be abbreviated shver.

#10: debug

The debug command has many options and does not work by itself. It provides detailed debugging output on a certain application, protocol, or service. For example, debug ip route will tell you every time a router is added to or removed from the router.