Hello: This issue started few days ago. This building is a L3 segment to the CAS. New students can get a IP address and can install the CCA agent just fine. But after that the agent never pops up and let them login. If the users moves to another building which is a L2 segment to CAS, the agent pops up just fine. Now, if I use an laptop with CCA agent installed which worked previously from the L3 building works just fine now. But now the problem is isolated to only new CCA agent installation. After the agent gets installed, I can ping both the CAS and CAM from the laptop. So, IP connectivity is there from the laptop to the CAS and CAM server. There is not access list on the any routers that will prevent UDP 8906 packets.
I did a tcpdump and grepped for udp 8906 on the cas server and found the following: 11:31:48.555663 IP dhcp-10-12-0-186.dyn.csudh.edu.37597 > cam1.8906: UDP, length 83 11:31:48.555674 IP cam1 > dhcp-10-12-0-186.dyn.csudh.edu: icmp 119: cam1 udp port 8906 unreachable 11:31:50.352120 IP A01270-39XV741.dyn.csudh.edu.1317 > cam1.8906: UDP, length 92 11:31:50.352127 IP cam1 > A01270-39XV741.dyn.csudh.edu: icmp 128: cam1 udp port 8906 unreachable 11:31:50.506156 IP 10.148.0.195.1404 > cam1.8906: UDP, length 83 11:31:50.506164 IP cam1 > 10.148.0.195: icmp 119: cam1 udp port 8906 unreachable 11:31:50.885464 IP A01270-39XV741.dyn.csudh.edu.1317 > cam1.8906: UDP, length 92 11:31:50.885471 IP cam1 > A01270-39XV741.dyn.csudh.edu: icmp 128: cam1 udp port 8906 unreachable I am not sure what this port 8906 unreachable means. Does it mean that CAM is not listening on 8906 and it is supposed to? This is a very weird problem and is frustrating. Hope someone can help. Thanks. ------------------------------------ CSU Dominguez Hills Mahabub Alam Network Analyst [EMAIL PROTECTED] 1000 East Victoria St, Carson, CA 90747 tel: 310-243-2430 ------------------------------------ -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Michael Grinnell Sent: Wednesday, November 07, 2007 8:36 PM To: [email protected] Subject: Re: CCA Reporting about OS Service Pack It does look like the API can handle this now, but again, I'm testing against 4.1.1, YMMV with other versions. See attached perl example. Note that Audit rule failures will not cause a report to fail, so you need to look in all reports.
