<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
sounds like something is inspecting/corrupting the certificates
advertised by cluster manager. that communication takes place over
UDP:8500.<br>
<br>
cluster manager logs may also show a bit more insight.<br>
<br>
/Wes<br>
<br>
Joe Pollere (US) wrote:
<blockquote
cite="mid:C65033A817B5734392E55CB9DF446104137BF7B0@USNAEXCH.na.didata.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Tahoma","sans-serif";
color:windowtext;
font-weight:normal;
font-style:normal;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Were
you able to get this resolved?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">We
are having the same issue. We have a 6.1.2 pub located in a
Colo and are trying to bring up a subscriber at another site. All
licenses have
been loaded and the sub is in the DB as well as services turned on but
am
getting the same error:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoPlainText">Configuration validation with jmecoloccm01
(10.10.100.10)
failed.<o:p></o:p></p>
<p class="MsoPlainText">Configured first node jmecoloccm01 is not
first node.<o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">I’ve
checked the MTU on the PUB & it is set for the
default 1500 as well as the host names in Unified Reporting Tool. There
are not
any duplicate names or IPs.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">I
do see this error in the application Event Log:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal" style=""><span
style="font-size: 10pt; font-family: "Courier New"; color: windowtext;">Aug
5 04:49:52, jmecoloccm01,
Error, Cisco Cluster Manager, : 4348: Aug 05 11:49:52.235 UTC :
%CCM_CLUSTERMANAGER-CLUSTERMANAGER-3-CLM_MsgIntChkError: ClusterMgr
message
integrity check error. Sender's IP address:10.52.100.10 Cluster ID:
Node
ID:jmecoloccm01, 4642<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Any
Suggestions to troubleshoot this further?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">joe<o:p></o:p></span></p>
<div>
<div
style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p class="MsoNormal"><b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif"; color: windowtext;">From:</span></b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif"; color: windowtext;">
<a class="moz-txt-link-abbreviated" href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>
[<a class="moz-txt-link-freetext" href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Mike
Hawley
(AU)<br>
<b>Sent:</b> Saturday, August 02, 2008 7:04 PM<br>
<b>To:</b> Wes Sisk<br>
<b>Cc:</b> Steve Parrish; <a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Adding a CUCM Subscriber<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU">Thanks Wes, I will give it a try and let you know.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size: 10.5pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU">All the best<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 10.5pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 10.5pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU">Mike </span><span
style="font-size: 9pt; font-family: "Arial","sans-serif"; color: rgb(41, 41, 41);"
lang="EN-AU"><o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-right: 2.85pt; margin-bottom: 3pt; margin-left: 2.85pt;"><span
style="font-size: 9pt; font-family: "Arial","sans-serif"; color: rgb(41, 41, 41);"
lang="EN-AU"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Tahoma","sans-serif"; color: windowtext;"
lang="EN-AU"><o:p> </o:p></span></p>
<div>
<div
style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p class="MsoNormal"><b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif"; color: windowtext;">From:</span></b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif"; color: windowtext;">
Wes Sisk [<a class="moz-txt-link-freetext" href="mailto:wsisk@cisco.com">mailto:wsisk@cisco.com</a>] <br>
<b>Sent:</b> Saturday, 2 August 2008 1:08 PM<br>
<b>To:</b> Mike Hawley (AU)<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>; <a class="moz-txt-link-abbreviated" href="mailto:jonvoip@gmail.com">jonvoip@gmail.com</a>; Steve
Parrish<br>
<b>Subject:</b> Re: [cisco-voip] Adding a CUCM Subscriber<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-AU">check mtu settings on pub. if
MTU on pub is
< default then install will silently fail.<br>
<br>
other causes: subscriber name or IP has already been used.<br>
<br>
Unified Reporting Tool from the web page will show existing hosts,
.rhosts, and
sqlhosts entries allowing you to check for inconsistencies.<br>
<br>
otherwise the certificate exchange between pub/sub is in plain text/xml
in a
packet capture so you can watch the conversation and identify problem.<br>
<br>
clustermanager logs on the publisher may also be helpful.<br>
<br>
/Wes<br>
<br>
Mike Hawley (AU) wrote: <o:p></o:p></span></p>
<pre><span lang="EN-AU">Hi Jon,<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">6.1.2 - yes 8 node licenses , it does join the local cluster if on the local subnet ok, only when it is on different subnet.<o:p></o:p></span></pre>
<pre><span lang="EN-AU">We are not using DNS at this stage, relying on CUCM to create host files for name resolution. It is possible to ping the ip address of the new sub from the pub. But it is unable to join the cluster. No firewalls etc between subnets.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Was thinking of setting up DNS and trying it again.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Thanks<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">________________________________<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">From: Jonathan Charles [<a
moz-do-not-send="true" href="mailto:jonvoip@gmail.com">mailto:jonvoip@gmail.com</a>]<o:p></o:p></span></pre>
<pre><span lang="EN-AU">Sent: Sat 2/08/2008 12:58 a.m.<o:p></o:p></span></pre>
<pre><span lang="EN-AU">To: Mike Hawley (AU)<o:p></o:p></span></pre>
<pre><span lang="EN-AU">Cc: <a moz-do-not-send="true"
href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>; Steve Parrish<o:p></o:p></span></pre>
<pre><span lang="EN-AU">Subject: Re: [cisco-voip] Adding a CUCM Subscriber<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Do you have node and feature licenses loaded on the Publisher? Are the<o:p></o:p></span></pre>
<pre><span lang="EN-AU">services started (not just activated)... what version of CCM? I am<o:p></o:p></span></pre>
<pre><span lang="EN-AU">guessing 6.X...<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Jonathan<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">On Fri, Aug 1, 2008 at 3:57 AM, Mike Hawley (AU)<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><a moz-do-not-send="true"
href="mailto:Mike.Hawley@didata.com.au"><Mike.Hawley@didata.com.au></a> wrote:<o:p></o:p></span></pre>
<pre><span lang="EN-AU"> <o:p></o:p></span></pre>
<blockquote style="margin-top: 5pt; margin-bottom: 5pt;">
<pre><span lang="EN-AU">Hi, I have an issue when I am trying to add a Subscriber server to a new<o:p></o:p></span></pre>
<pre><span lang="EN-AU">Publisher. They are in different subnets (10.111.128.x, and 10.111.144.x)<o:p></o:p></span></pre>
<pre><span lang="EN-AU">but within the same lab setup.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">What happens is the first Subscriber server fails to add itself to the new<o:p></o:p></span></pre>
<pre><span lang="EN-AU">database, and gives me an error of "Configuration validation with ANBAK2-C1<o:p></o:p></span></pre>
<pre><span lang="EN-AU">(10.111.128.10) failed"<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">We get asked if it is the first node and we say no, but we still get the<o:p></o:p></span></pre>
<pre><span lang="EN-AU">following message; "Configured 1st node ANBAK2-C1 is not a 1st node "<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">I have done the following so far;<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">1. Setup SUB as a new server in database<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">2. Started all the CUCM services on Pub<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">We moved the sub server to the same subnet, which works successfully. I<o:p></o:p></span></pre>
<pre><span lang="EN-AU">cannot leave it like this as my customer wants the servers in different<o:p></o:p></span></pre>
<pre><span lang="EN-AU">geographic locations.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Any help appreciated...<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Mike<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">******************************************************************************<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">- NOTICE FROM DIMENSION DATA AUSTRALIA<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">This message is confidential, and may contain proprietary or legally<o:p></o:p></span></pre>
<pre><span lang="EN-AU">privileged information. If you have received this email in error, please<o:p></o:p></span></pre>
<pre><span lang="EN-AU">notify the sender and delete it immediately.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">Internet communications are not secure. You should scan this message and any<o:p></o:p></span></pre>
<pre><span lang="EN-AU">attachments for viruses. Under no circumstances do we accept liability for<o:p></o:p></span></pre>
<pre><span lang="EN-AU">any loss or damage which may result from your receipt of this message or any<o:p></o:p></span></pre>
<pre><span lang="EN-AU">attachments.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">******************************************************************************<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">_______________________________________________<o:p></o:p></span></pre>
<pre><span lang="EN-AU">cisco-voip mailing list<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><a moz-do-not-send="true"
href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><o:p></o:p></span></pre>
<pre><span lang="EN-AU"><a moz-do-not-send="true"
href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"> <o:p></o:p></span></pre>
</blockquote>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><o:p> </o:p></span></pre>
<pre><span lang="EN-AU">_______________________________________________<o:p></o:p></span></pre>
<pre><span lang="EN-AU">cisco-voip mailing list<o:p></o:p></span></pre>
<pre><span lang="EN-AU"><a moz-do-not-send="true"
href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><o:p></o:p></span></pre>
<pre><span lang="EN-AU"><a moz-do-not-send="true"
href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></span></pre>
<pre><span lang="EN-AU"> <o:p></o:p></span></pre>
</div>
<hr size="1">
<p><strong>Disclaimer:
This e-mail communication and any attachments may contain confidential
and privileged information and is for use by the designated
addressee(s) named above only. If you are not the intended addressee,
you are hereby notified that you have received this communication in
error and that any use or reproduction of this email or its contents is
strictly prohibited and may be unlawful. If you have received this
communication in error, please notify us immediately by replying to
this message and deleting it from your computer. Thank you.
</strong></p>
</blockquote>
</body>
</html>