 Feedback
|
Table Of Contents
Release Notes for Cisco ACNS Software, Release 5.1.7
ACNS 5.1.7 Program Manager Interoperability
New Fields in the RTSP Gateway Window and the Corresponding CLI Command
Changes to Content Engine Statistics
Filtering Support for HTTPS Requests with SmartFilter
Manually Downloading the SmartFilter Control List
Fetching the Preload URL List File over HTTPS
Media File System Issues When Downgrading to ACNS 5.0 Software
Websense Issues When Downgrading to ACNS 5.0 Software or ACNS 5.1 Software
Scheduling Live Events for Multiple Content Engines
Multicast Sender Nonretroactive Scheduling Rule
Open Caveats - ACNS Software, Release 5.1.7
Open ACNS-IP/TV Software Integration Caveats, Release 5.1.7
Other Open ACNS Software, Release 5.1.7 Caveats
Resolved Caveats - ACNS Software, Release 5.1.7
Resolved ACNS-IP/TV Software Integration Caveats, Release 5.1.7
Other Resolved ACNS Software, Release 5.1.7 Caveats
TACACS+ Enable Password Attribute
Configuration Requirements for Managed Live Events
Multicast Sender Interoperability
Restrictions Regarding Native FTP Caching in ACNS 5.1 and 5.1.x Software
FTP Caching Support in the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1
FTP Caching Support in the Cisco ACNS Software Command Reference, Release 5.1 Publication
Group-Type Patterns in Rule Pattern Lists
SmartFilter Software and the rule action no-auth Command Rule Interaction
Bandwidth Configuration for Interfaces and Content Services
Default Port of the Content Engine GUI
Playing Nonhinted IP/TV On-Demand Programs over an ACNS Network
Restriction on IP/TV Program Manager Configuration
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Release Notes for Cisco ACNS Software, Release 5.1.7
August 4, 2005
ACNS Build 5.1.7b7
Note
The most current Cisco documentation for released products is available at Cisco.com at http://www.cisco.com. The online documents may contain updates and modifications made after the hardcopy documents were printed.
Contents
These release notes contain information about the Cisco Application and Content Networking System (ACNS) software, Release 5.1.7. These release notes describe the following topics:
•
•
•
Introduction
ACNS software combines the technologies of demand-pull caching and pre-positioning for accelerated delivery of web applications, objects, files, and streaming media; ACNS software runs on Cisco Content Engines, Content Distribution Manager, and Content Router hardware platforms.
Note
These release notes are intended for administrators who will be configuring, monitoring, and managing devices that are running ACNS 5.1.7 software. These release notes describe the open and resolved caveats regarding ACNS software, Release 5.1.7.
System Requirements
This section describes the hardware supported by ACNS software, Release 5.1.7.
Hardware Supported
ACNS software, Release 5.1.7 supports the same hardware platforms that were supported in the ACNS 5.1, 5.1.3, and 5.1.5 releases. The following hardware platforms are supported:
New or Changed Information
This section describes new or changed information that is pertinent to the ACNS 5.1.7 release. It covers the following topics:
•
•
•
•
•
•
Note
ACNS 5.1.7 Program Manager Interoperability
IP/TV Broadcast server and IP/TV Viewer Version 5.1.5 are compatible with ACNS 5.1.7 Program Manager. ACNS 5.1.7 Program Manager is inter-operable with IP/TV Broadcast server Version 5.1.x.
New Fields in the RTSP Gateway Window and the Corresponding CLI Command
In ACNS software, Release 5.1.7, two fields were added to the RTSP Gateway window to allow you to obtain information about the RTSP gateway maximum initial setup delay and the maximum request rate through the Content Distribution Manager GUI. The names of the two new fields are:
•
•
In ACNS software, Release 5.1.7, the corresponding CLI command, the rtsp advanced global configuration command, was also added.
ContentEngine(config)# rtsp advanced ?max-initial-setup-delay Max delay in sec between TCP accept and first RTSPmsg from client. Default: 10.max-request-rate Max incoming requests allowed by RTSP Gateway persecond. Default: 40.Changes to Content Engine Statistics
In ACNS software, Release 5.1.7, the following changes were made to the Content Engine statistics in the Content Distribution Manager GUI and in the comma separated values (CSV) data.
•
•
•
Custom Login Window
In ACNS software, Release 5.1.5 or later, the Content Distribution Manager GUI no longer uses your browser's standard popup login dialog for entering username and password. Instead, it uses a custom login window that was added in the ACNS 5.1.5 software release. With this change, you are no longer required to close your browser window on logout or GUI timeout. Instead, your browser will automatically be redirected to the login window.
Manifest File Attribute
In ACNS software, Release 5.1.5, a new manifest file attribute, ignoreOriginPort, was added. The ignoreOriginPort attribute controls content playback and allows the use of nonstandard ports to play back pre-positioned content. In releases of ACNS software prior to Version 5.1.5, playback of pre-positioned content using nonstandard ports was not supported (see the "Pre-Positioned Content" section).
The ignoreOriginPort attribute is supported under the following tags:
•
•
•
•
The ignoreOriginPort attribute is optional. Valid values for the ignoreOriginPort attribute are true or false. The default is false. In the following example, the ignoreOriginPort attribute is specified in the <item> tag and is set to true.
<item scr="<http//10.77.155.211/abc.html>http//10.77.155.211/abc.html" ignoreOriginPort="true" />If an item is acquired with the attribute set to true (ignoreOriginPort=true), then the content is played back even if the incoming URL that was used to request the content contains a nonstandard port. For example, if content is acquired as:
<http//www.foo.com/abcd.xml>http//www.foo.com/abcd.xmlthen the content can be played back as:
<http//www.foo.comXXXX/abcd.xml>http//www.foo.comXXXX/abcd.xmlwhere XXXX is the port number.
For more information about using a manifest file to acquire and distribute content in an ACNS 5.1 network, refer to Chapter 7, "Creating Manifest Files," in the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
Filtering Support for HTTPS Requests with SmartFilter
In ACNS 5.1.5 software, support for filtering HTTPS WCCP-intercepted requests with SmartFilter was added.
Manually Downloading the SmartFilter Control List
The intent of the SmartFilter Control List is not to categorize every available URL on the Internet. Instead, it focuses on categorizing those Internet sites that are considered unproductive or inappropriate for typical business or educational environments. The 30 predefined SmartFilter Control List categories encompass a wide variety of material. Some categories are focused on reducing legal liability of a company. These 30 categories are set to "Deny" in the default SmartFilter software policy. Some categories contain such sites as MP3 sites (sites that content that consumes excessive bandwidth). The remainder of these 30 categories are considered unproductive or inappropriate for business or educational environments.
SmartFilter software also provides ten user-defined categories that allow you to further tailor access by defining and filtering sites that are not included in the SmartFilter Control List. Additionally, you can exempt any site that you would like specific groups or individuals to access quickly and easily.
Secure Computing uses automated tools to search the Internet continuously for new sites and pages that meet the content criteria for the 30 predefined Control List categories. Candidate sites are presented to Secure Computing Control List technicians for personal review. As a rule, sites are not added to the SmartFilter Control List without first being viewed and approved by Secure Computing Control List technicians.
Note
You can use the SmartFilter Administration Console to define a SmartFilter Control List download schedule. The Download Setup window tracks the download site, your username, and your password. If you do not download an updated SmartFilter Control List at least monthly, the SmartFilter software considers the Control List "expired," and invokes the action that you specified in the SmartFilter License window.
If the SmartFilter Control List (sfcontrol file) was not properly downloaded from the Secure Computing FTP site and you used FTP to transfer this sfcontrol file from one Content Engine to another, this can cause the cache process to restart.
To stop SmartFilter from restarting the cache process, complete the following tasks, which include manually downloading the SmartFilter control list to the Content Engine:
1.
For example, enter the no url-filter http smartfilter enable global configuration command to disable this feature through the Content Engine CLI.
2.
3.
For example, enter the url-filter http smartfilter enable global configuration command to disable this feature through the Content Engine CLI.
4.
a.
b.
c.
d.
e.
f.
Note
Fetching the Preload URL List File over HTTPS
When configuring a preload URL list file in the Content Engine CLI, the pre-load global configuration command only had the HTTP or FTP option in ACNS 5.1.x software earlier than Release 5.1.5. There was no mechanism in place to fetch the preload file securely. In ACNS software, Release 5.1.5, the ability to fetch the preload URL list file over HTTPS was added.
Important Notes
This section emphasizes important information regarding ACNS 5.1.x software.
•
•
•
•
Media File System Issues When Downgrading to ACNS 5.0 Software
If you have configured the media file system (mediafs) with ACNS 5.1 software or later, and then downgrade to ACNS 5.0 software, the mediafs disk space assignment is lost and it reverts to ACNS network file system (cdnfs) disk space. (The mediafs is used for on-demand content that is fetched through the two streaming protocols [RTSP and WMT]. The cdnfs is used for pre-positioned content in the ACNS network.)
This situation occurs because of a design change that was implemented in ACNS 5.1 software. Because ACNS 5.0 software is not compatible with this change, the disk space becomes assigned to cdnfs instead of mediafs. To work around this problem, follow these steps:
1.
Use the Content Distribution Manager GUI for Content Engines that are registered with a Content Distribution Manager. Use the Content Engine GUI for standalone Content Engines (that is, Content Engines that are not registered with a Content Distribution Manager and are being managed through the Content Engine GUI or CLI).
2.
Websense Issues When Downgrading to ACNS 5.0 Software or ACNS 5.1 Software
If the local (internal) Websense server is enabled on the Content Engine and you downgrade from the ACNS 5.2.x software to ACNS 5.0 software or ACNS 5.1 software, the WebsenseEnterprise directory is removed from the Content Engine and the local Websense server stops working. Note that the ACNS 5.2.x software does not generate an error message indicating that the WebsenseEnterprise directory has been removed.
To avoid this problem when downgrading from ACNS 5.2.x software to ACNS software 5.1 or ACNS 5.0 software, follow these steps:
1.
2.
3.
Scheduling Live Events for Multiple Content Engines
When you schedule a program for a live event, we strongly recommend that you use Greenwich Mean Time (GMT) instead of the local time of the Content Engine that is delivering the program. If you are transmitting the live event across multiple Content Engines that span different time zones, and you schedule local time on each Content Engine instead of GMT, the live transmission is likely to fail.
Multicast Sender Nonretroactive Scheduling Rule
In ACNS 5.1 software, a primary multicast sender automatically schedules the first carousel pass, which sends multicast content to receiver Content Engines. However, ACNS software enforces a nonretroactive scheduling rule, which states that a multicast sender cannot send any files that arrived 10 minutes before it became a multicast sender. Thus, in ACNS software, Release 5.1, when a Content Engine becomes the active primary sender, it does not automatically schedule the first carousel pass to include content that is over 10 minutes old. If you want the old content sent, you must use the distribution multicast resend EXEC command without the on-demand-only option specified. (The on-demand-only option triggers a resend only when a negative acknowledgement [NACK] is issued. In this instance, you want to trigger the resend without a NACK from the receiver.)
After the first multicast carousel pass is complete (whether you manually triggered the resend using the distribution multicast resend command or whether the primary sender completed the pass automatically), the primary sender then determines whether the next carousel pass for content will follow a fixed schedule or whether it will be triggered by NACKs from receiver Content Engines.
In ACNS 5.1 software, you can configure the primary sender to disregard NACKs from receiver Content Engines and send content based on a fixed schedule of carousel passes. To enable this behavior, use the multicast fixed-carousel enable global configuration command. In contrast, a backup multicast sender cannot be enabled for fixed carousel passes; on backup senders, carousel passes must always be triggered by NACKs from receiver Content Engines.
Note
The multicast fixed-carousel enable command is only available for the ACNS 5.1 software primary multicast sender. The default is no fixed carousel; the first carousel pass is automatic and future carousel passes are ondemand only, that is, they are triggered by NACKs.
Caveats
This section lists and describes the open and resolved caveats in ACNS software, Release 5.1.7. Caveats describe unexpected behavior in ACNS 5.1.7 software. Severity 1 caveats are the most serious; severity 2 caveats are less serious. Severity 3 caveats are moderate caveats.
Open Caveats - ACNS Software, Release 5.1.7
This section lists caveats that have not been resolved in ACNS software, Release 5.1.7. The open caveats are grouped into two categories:
•
•
Open ACNS-IP/TV Software Integration Caveats, Release 5.1.7
This section lists and describes caveats that are open in ACNS software, Release 5.1.7, and are related to ACNS-IP/TV software integration.
•
Symptom: Requests for on-demand programs from clients in an ACNS network are sent to IP/TV Program Manager. IP/TV Program Manager treats these requests as standalone IP/TV on-demand program requests and directs them to the IP/TV Broadcast Server that can serve the request. This causes bandwidth issues and affects the functioning of IP/TV Server.
Condition: This problem occurs when IP/TV has been integrated in an ACNS network. It occurs when requests for on-demand programs that are exported to the ACNS network reach IP/TV Program Manager instead of being routed to the Content Engine that has the programs. This problem is related to routing failure or a routing error.
Workaround: Configure routing correctly in ACNS networks so that on-demand requests are directed to the nearest Content Engine that is capable of serving the program. Alternatively, you can change the proximity settings in IP/TV Program Manager so that it does not redirect the on-demand program requests to IP/TV Broadcast Servers. However, the second approach can also affect the serving of standalone on-demand programs.
•
Symptom: The audio stream sounds discontinuous when you listen to a rebroadcast or video on demand (VOD) of a recorded MP4 file.
Condition: The symptom occurs with IP/TV-generated MP4 files that are streamed from a Cisco Streaming Engine. The problem only occurs with MP4 files that contain an MP3 audio track sampled at 8000 Hz. Streaming the file directly from IP/TV Server does not result in this problem.
Workaround: Use a sampling frequency of 11025 Hz or 22050 Hz while creating a live program with MP3 audio if the recorded file is to be deployed in an ACNS network. Alternatively, use the AAC codec instead of MP3.
•
Symptom: When upgrading from IP/TV Version 3.5 to Version 5.1 software, the functionality of the Archive Server has been replaced by the Content Engines in your ACNS network. The Content Engines need to have the content present on a broadcast server but broadcast servers often have limited disk space.
Condition: This problem is only applicable if you are planning to upgrade from IP/TV Version 3.5 to Version 5.1 software, which will require that you use broadcast servers that have limited disk space.
Workaround: Import this data into your ACNS network by moving the media to a web server (origin server), and then creating a manifest file and an associated channel.
•
Symptom: For ACNS-based IP/TV scheduled programs that use live-split-only content delivery mode, IP/TV Program Manager allocates multicast addresses to individual streams that are never used along the content delivery path.
Condition: The problem is observed with live-split-only programs.
Workaround: There is no known workaround.
Other Open ACNS Software, Release 5.1.7 Caveats
This section lists and describes caveats that are open in ACNS software, Release 5.1.7 and are not related to ACNS-IP/TV software integration.
•
Symptom: Content cannot be acquired using strong authentication from secure origin servers that use certificates from nonstandard certificate authorities (CAs). If strong authentication was chosen for content acquisitions from such a site, the acquirer error statistics will contain a 401 (Unauthorized) error code, and the acquirer error log contains the following error message:
Strong Cert Authentication rejects certificate due to error: ssl error codeCondition: This problem occurs if the origin server uses a certificate that is not known as a standard certificate to the ACNS software acquirer. For content acquisition from secure sites over HTTPS using strong authentication, only sites with certificates from standard certificate authorities are supported.
Note
Workaround: Use one of these workarounds:
–
–
•
Symptom: When a Content Engine model CE-565 is attached to a Storage Array SA-7 device, if too large of a CFS partition is configured, and a combined streaming/caching workload is used, then a lower HTTP performance is observed.
Condition: This problem occurs when the CE-565 has Windows Media Technologies (WMT) enabled, a combined streaming/caching workload is used, and the Content Engine is attached to an SA-7 device.
Note
Workaround: Allocate less space to the cfs if a Storage Array is attached to the Content Engine.
•
Symptom: When you use Windows XP with Windows Media Player Version 9.0.0.3008 installed, embedded Microsoft media files (for example, .asf files) cannot be retrieved over HTTP from a Content Engine that has the media files pre-positioned.
Condition: When the Content Engine has media files pre-positioned, and the Content Engine is not configured for either WMT or HTTP proxy services, media files must be retrieved over HTTP from a pre-positioned store on the Content Engine.
Workaround: Choose one of these workarounds:
–
–
•
Symptom: Windows Media Technologies (WMT) is enabled with no media file system (mediafs) after you downgrade from ACNS 5.1b300 software to ACNS 5.0.7b8 software.
Condition: This occurs if you upgrade from ACNS 5.0.7b8 to ACNS 5.1bx software, configure the disk, and then downgrade to ACNS 5.0.7b4 software.
Workaround: Reconfigure the disk with a mediafs partition and reload the software.
•
Symptom: Using FTP inside of the .meta file to have the Content Engine obtain the .bin file for a Content Distribution Manager GUI-initiated upgrade is unsuccessful if the user's home directory differs from the FTP root.
Condition: Either you will receive an error in the Content Distribution Manager GUI when you are creating the definition for the upgrade (when the .bin file does not exist in the user's home directory), or the Content Engine will error on the upgrade (when the .bin file does not exist in the FTP root directory).
Workaround: Copy the .bin file to both the FTP root and the user's home directory, or use a user whose home directory is the FTP root.
•
Symptom: The following error is reported when ceApiServlet is called:
type Exception reportmessagedescription The server encountered an internal error () that prevented it fromfulfilling this request.exceptionjava.lang.NullPointerExceptionCondition: This problem occurs if the Content Engine does not have an explicit management IP address configured.
Workaround: Configure a management IP address for the Content Engine's Activation page.
•
Symptom: If you edit a file-based scheduled program and the Quality of Service (QoS) feature is configured, the revised program retains the QoS configuration even if you disable the QoS feature.
Condition: This problem occurs only with file-based scheduled programs; it does not occur with live programs.
Workaround: The only known workaround is re-creation. To remove the QoS configuration, delete the program and then re-create the program without configuring the QoS feature.
•
Symptom: The following error messages occur after you enter the write memory EXEC command:
CE# write memoryopen cli lock tmp_uids: Permission deniedexec_copy: Copy adm_b_db to SS failed. status = (1,12).Ignore if you didn't change RealServer config.After these errors occur, the configuration for the system's nonadministrative users, who have a privilege level of 15, is lost after the reload.
Condition: This problem occurs if the following conditions exist:
–
–
Workaround: Log in to the Content Engine as a user who is configured with a privilege level of 15 before you issue the write memory command.
•
Symptom: The Content Engine is not able to use Microsoft Network Messenger when port 1863 is blocked and WCCP transparent redirection is enabled.
Condition: This problem occurs when the http persistent-connections server-only global configuration command is used.
Workaround: Disable the http persistent-connections server-only command.
•
Condition: The API program is created with multicast settings, with no multicast address ports specified within the program file. The program address pool is configured including the pool TTL.
Symptom: This problem occurs if the program multicast TTL is set to 255 instead of the address pool TTL value.
Workaround: Set the required TTL value within the program file.
•
Symptom: Users must reenter their username and password information in the login popup window in order to be authenticated.
Condition: This problem occurs when the authentication realm is changed on the Content Engine and the users have been authenticated with the old realm and have checked the Save username and password check box in the popup window. Users must then reenter their username and password information.
Workaround: There is no known workaround.
•
Symptom: A constant stream of bandwidth error messages (one about every 2 seconds) is reported in the syslog. As the following sample messages indicate, these messages are not very useful.
Feb 11 13:24:26 webcache01 bandwd: %CE-BANDWD-3-115002: BANDWD: Trying again in two secondsFeb 11 13:24:28 webcache01 bandwd: %CE-BANDWD-3-115003: BANDWD: verification registration failed, err=30Workaround: There is no known workaround.
•
Symptom: The cache application exits because of an intentional error checking in the code that fails, which causes a brief interruption in caching services while the application restarts. Output from the show tech-support EXEC command shows a crash trace with "eip=0x2599bd51" for ACNS build 5.1.3.b14 software, as shown below:
Begin stack trace:signal(6), bin size(1717100), version (5.1.3.b14), built by (jsmith) at Feb 22004 18:27:42, crash time(Thu Feb 19 14:47:19 2004)Working Thread 1: Process 13116 stack(esp=0xbffff2dc, ebp=0xbffff308, eip=0x2599bd51)Condition: The Content Engine is configured with the following command to cache HTTP responses that contain the response header "Vary: User-Agent"
Content Engine (config)# http cache-vary-user-agent enableWorkaround: Remove the configuration for caching responses with the "Vary: User-Agent" response header by using the following global configuration command.
ContentEngine(config)# no http cache-vary-user-agent enable•
Symptom: The Content Engine stops spoofing the client IP address, and uses its own IP address to fetch content from the origin server.
Condition: The http l4-switch spoof-client-ip enable global configuration command turns on IP spoofing on the Content Engine that is functioning as a caching engine. When a rule action user-server global configuration command is used, the Content Engine stops spoofing the client IP address and instead uses its own IP address to fetch the content.
Workaround: There is no known workaround.
•
Symptom: The network management system (NMS) host does not know where the SNMP traps are coming from.
Condition: This problem occurs if there are two interfaces and you configure interface redundancy using both interfaces. You must use a dummy address for the physical addresses. You then configure a real address that floats between the two interfaces. If you then configure SNMP traps, the traps are being sourced from the dummy address and not the routable address. Therefore, the NMS host does not know where the trap is coming from.
Workaround: There is no known workaround.
•
Symptom: The client browser time outs when trying to access protected sites.
Condition: This problem can occur under the following conditions:
–
–
–
Workaround: Reload the Content Engine.
•
Symptom: Users experience problems when they access FTP servers that require a username and password.
Condition: When using FTP-over-HTTP to access an FTP server, users are not prompted under the following situations:
–
–
Workaround: There is no known workaround.
•
Symptom: Retrieving a URL of the form ftp://username@host.com fails if the intended password is empty.
Condition: The FTP-over-HTTP proxy server (Content Engine) sends the configured anonymous password while retrieving URLs of the format ftp://username@host.com. Instead, the Content Engine should send an empty password.
Workaround: There is no known workaround.
•
Symptom: You experience problems when trying to add rules that have the pipe character (|).
Condition: You cannot add rules that contain the pipe character (|).
Workaround: Add multiple rules for the OR functionality.
•
Symptom: The cache process restarts when the ICAP feature is enabled.
Condition: The problem occurs if the ICAP functionality is in an unstable state.
Workaround: Reboot the Content Engine to restart the ICAP daemon and bring it back to its normal state.
•
Symptom: On one system the Centralized Management System (CMS) database was corrupted when the Content Distribution Manager was upgraded from ACNS 5.1.3 software to Version 5.1.5. This made the Content Distribution Manager GUI unreachable immediately following the upgrade. This has not been seen on any other system, and the cause is not yet known.
Condition: This problem occurred on this one system immediately after the upgrade described above.
Workaround: There is no known workaround.
•
Symptom: Syslog messages contain the following text:
uns-server: %CE-CDNFS-0-480000: uns_read_meta: WOW! url mismatch: wanted '<URL>', swaw '^C'Condition: This problem occurs because of an apparent file system corruption; the cdnfs metadata files have the wrong content (the content is internally consistent but in the wrong file). This happens infrequently. For example, in this case, cdnfs content was being updated and a crash occurred because of a kernel panic (which occurs infrequently).
Workaround: Although there is no known workaround to stop the syslog messages shown above, lookups for the target URL (listed in the syslog message) may succeed if the ACNS software has created a new cdnfs entry for the target URL.
A way to test this is to use the cdnfs lookup url EXEC command and see if the URL is found. If the URL is not found, a way to force it to be replicated would be to modify the file on the origin server (for example, by using the touch command on a UNIX-based origin server).
Alternatively, you can enter the acquisition-distribution database-cleanup start command on the affected Content Engine; this queries the cdnfs for all the objects that are supposed to be on the Content Engine. Missing objects should be detected and replicated.
•
Symptom: Content Engine device deregistration fails when the Content Engine is assigned to a device group that is assigned to channels.
Condition: A Content Engine deregistration may fail if the Content Engine is the last remaining Content Engine in a device group and there are more than five channels assigned to the device group at the moment that the Content Engine is deregistered.
Workaround: Manually remove the channel assignments from the device group so that the Content Engine can then be deregistered.
•
Symptom: The Websense server cannot be enabled or disabled.
Condition: This problem occurs if the user enters the cms enable global configuration command, and tries to enable or disable the Websense server before the cache process is completely operational. The attempt to enable or disable the Websense server fails because of its dependency on the verifier that is running in the cache process. In this situation, subsequent commands to enable or disable the Websense server will also fail.
Workaround: Reload the Content Engine.
•
Symptom: After a Content Distribution Manager is upgraded from ACNS Version 5.0 software to Version 5.1 software, the syslog setting is copied from device group to device. Settings, however, are unchanged.
Condition: This problem occurs if any logging priority value is set to "warning."
Workaround: First go to the device group syslog setting window, and without making any changes in the displayed window, click the Submit button in the window. Next, go to the Syslog Settings for Content Engine window for each affected Content Engine, and choose the desired device group.
•
Symptom: Certain encoded WMT files cannot be served to Windows Media Player Version 6.4 or Version 7.0 through a Content Engine using the MMST protocol. (The MMSU protocol works properly, and Windows Media Player Version 9 also works properly.)
Condition: This problem can occur if the following conditions exist:
–
–
Workaround: Choose one of the following workarounds:
–
–
–
•
Symptom: The CE/CR/Standby_CDM status frequently switches between online and offline.
Condition: This problem occurs after you change the system.datafeed.pollRate from a small value to a large value.
Workaround: Restart the Centralized Management System (CMS) on the Content Distribution Manager.
•
Symptom: When you click links from the table of contents or the index of the ACNS Content Distribution Manager online help, the links open in the same pane, that is, the left pane, which contains the table of contents and the index, instead of opening in the right pane, which contains the help topics.
Condition: This problem occurs after you install Microsoft security update MS05-026. This security patch disables cross-frame navigation features that are based on HTML Help ActiveX control (HHCTRL).
Workaround: To reenable cross-frame navigation features that are based on HHCTRL, modify your Windows registry as explained in Microsoft Knowledge Base article 896905, which is available at this URL:
http://support.microsoft.com/kb/896905/
•
Symptom: Websense Manager cannot connect to the local Websense server (the Websense server runs as a separate process on the Content Engine instead of running on a separate system).
Condition: This problem occurs if an external IP address is used from Websense Manager to connect to the local Websense server (Version 5.0.1) that is running on the Content Engine.
Workaround: There is no known workaround.
•
Symptom: A pre-positioned content object is lost after you configure a disk and reload the Content Engine.
Condition: If the amount of cdnfs content approaches the amount of disk space allocated to the cdnfs, then cdnfs content is removed to ensure that the cdnfs file system can be resized properly to hold the saved content. In ACNS 5.0.x software, the content is moved out of the file system (if other file systems that can hold the content are detected) or is deleted (if other file systems that can hold the content are not detected) when a disk configuration is performed and 90 percent or more of the cdnfs file system is used.
Workaround: Choose one of the following workarounds:
–
–
–
•
Symptom: The Websense policy server and user server generate core files.
Condition: This problem occurs when the Websense server is running on ACNS 5.1.x software with a version of the Websense Manager that is earlier than Version 5.0.1 build 20030722. This problem does not exist when the Websense server is running on ACNS 5.0.3 software.
Workaround: Download Websense Manager Version 5.0.1 build 20030722.
•
Symptom: If there is a WCCP transparent proxy between the ACNS network root Content Engine and the content origin server, and the proxy requires NTLM authentication, then the ACNS network acquirer may fail to acquire content in the following scenario:
1.
2.
3.
Condition: This occurs with ACNS 5.1.x software.
Workaround: Restart the acquirer through the acquisition-distribution stop and acquisition-distribution start commands.
•
Symptom: In ACNS 4.2 software, rules are configured only for HTTP and not for streaming protocols. If a Content Engine that is configured with rules and is running ACNS 4.2 software is upgraded to ACNS 5.1.x software, then these rules are configured with the protocol type "all."
Condition: This occurs when the software is upgraded to ACNS software Release 5.1.x from ACNS software Release 4.2.
Workaround: If you do not want the rule to be applied for some of the rule actions, you can change the rule configuration as required.
•
Symptom: An FTP client application stops receiving data for a data transfer operation such as a directory listing (ls) or file transfer (GET). The same symptom can occur for FTP-over-HTTP data transfers from the FTP server to the Content Engine.
Condition: For FTP client applications, the Content Engine must be using the FTP proxy through WCCP redirection, configured for following the FTP client's mode for establishing a data connection. The FTP client application must have also been set to use active mode to the FTP server.
ContentEngine(config)# wccp ftp router-list-num numberContentEngine(config)# wccp version 2ContentEngine(config)# ftp proxy active-mode enableFor FTP-over-HTTP data transfers, the Content Engine must be configured for an FTP incoming proxy and configured to use active mode to the FTP server. The client browser must be configured to use the Content Engine FTP proxy for FTP URLs.
ContentEngine(config)# ftp proxy incoming portContentEngine(config)# ftp proxy active-mode enableThe symptoms can occur with the configurations described above and when the FTP server starts sending data packets that are received out of order by the Content Engine before the Content Engine sends the TCP connection establishment SYN-ACK packet to the FTP server.
Workaround: Remove the Content Engine active mode configuration by issuing the following configuration command:
ContentEngine(config)# no ftp proxy active-mode enableWhen this symptom occurs on an FTP client application, press Ctrl-C simultaneously to stop the partial data transfer operation.
When this symptom occurs on a browser configured for FTP-over-HTTP, click the STOP button to stop the partial data transfer operation.
•
Symptom: In ACNS 5.0 software, only "AND" is allowed between group of patterns with the same pattern list number. While downgrading from ACNS 5.1 software to ACNS 5.0 software, the ORing of patterns configuration is not supported and is converted to ANDing of patterns. For example:
–
rule action block pattern-list 3 protocol httprule pattern-list 3 url-regex senrule pattern-list 3 domain ciscoIn ACNS 5.1 software, the default behavior is ORing of patterns.
–
rule action block pattern-list 3 protocol httprule pattern-list 3 url-regex senrule pattern-list 3 domain ciscoIn ACNS 5.0 software, the only behavior is ANDing of patterns.
Condition: The problem occurs when the configuration on the Content Engine has many pattern lists that are configured (ORed together) in ACNS 5.1 software and it is downgraded to ACNS 5.0 software, then only the first pattern-list configuration is used.
Workaround: There is no known workaround.
•
Symptom: After downgrading a Content Engine from ACNS 5.1 software to ACNS 4.2 software, some patterns in the pattern list are lost. For example:
–
rule action block pattern-list 3 protocol httprule pattern-list 3 url-regex senrule pattern-list 3 domain cisco–
rule block url-regex senCondition: This problem occurs when the configuration on the Content Engine has many pattern lists that are configured (ORed together) in ACNS 5.1 software and it is downgraded to ACNS 4.2 software, then only the first pattern-list configuration is used. All other pattern lists are lost.
Workaround: There is no known workaround.
•
Symptom: The cache process crashes while passing traffic for both the standard and the dynamic HTTPS service.
Condition: This problem can occur when heavy HTTPS traffic is passing through the Content Engine. Using standard and dynamic WCCP services and having the debug function enabled when the HTTPS traffic is heavy may contribute to this problem.
Workaround: There is no known workaround. However, the cache process will restart and work normally after such a crash.
•
Symptom: When a rule with the redirect action is configured with a URL of 0 and with a matching pattern (no replacing pattern), the cache process crashes if the request matches the pattern.
Condition: This occurs when you configure a numeric value of 0 for the redirected URL (for example, if www.yahoo.com is redirected to 0). If you want the Content Engine to redirect URL x to URL y, then you can configure the rule redirect action. While doing so, you must configure URL x and URL y.
Workaround: There is no known workaround.
•
Symptom: When MPEG-2 is specified as the preferred format in a channel, programs cannot be created in that channel.
Condition: This problem occurs only if MPEG-2 is the preferred format.
Workaround: When MPEG-2 is chosen as the preferred format for a channel-based program, the default bandwidth is set to 1150 (the default for non-MPEG-2 programs). The default bandwidth for MPEG-2-based programs should be 2000 for MPEG-2 half duplex, and 3000 for MPEG-2 full duplex. Manually set the bandwidth while creating the program as follows:
–
–
•
Symptom: If Quality of Service (QoS) for MP2T audio-only programs is set, QoS parameters are not included in the Session Description Protocol (SDP) information for the program. Consequently, the MP2T stream is streamed without the intended QoS characteristics.
Condition: The problem is observed with MP2T audio-only programs and when the audio QoS option is specified.
Workaround: There is no known workaround.
•
Symptom: The manifest validator fails to fetch the XML file if the source is authenticated.
Condition: This problem occurs only if the file is located at an authenticated location.
Workaround: Put a copy of the manifest file in a non-authentication location to use the manifest validator.
Resolved Caveats - ACNS Software, Release 5.1.7
This section lists caveats that have been resolved in ACNS software, Release 5.1.7. The resolved caveats are grouped into two categories:
•
•
Resolved ACNS-IP/TV Software Integration Caveats, Release 5.1.7
•
When selecting a program using IP/TV Web Program Guide on an Apple Macintosh computer as the client, you are prompted to download the QuickTime plug-in even though it is already installed on your desktop. Even if you remove QuickTime and reinstall it, you are still prompted to download QuickTime.
Other Resolved ACNS Software, Release 5.1.7 Caveats
•
If a request for a Synchronized Multimedia Integration Language (SMIL) file (not the requests for streams inside the SMIL file) is issued through RTSP by RealPlayer, under some conditions, the RTSP gateway has difficulty serving these requests. The problem occurs if the URL for the SMIL file has the same host name or IP address as the stream URLs inside the SMIL file. In this case, RealPlayer uses the same TCP connection for both the RTSP request to retrieve the SMIL file itself and the RTSP requests for the streams.
•
You configured disk partitions through the Content Distribution Manager GUI or CLI, and the Content Engine has received a full update. Following this full configuration, the output of the show disks configured EXEC command shows that there is a pending configuration, even though you did not change the disk configuration settings through the Content Distribution Manager GUI or CLI. After you reboot the next time, the following message appears in the syslog, and the disks are reconfigured to the same size.
Using new disk configuration you specified before reboot.•
When you attempt to edit the list of locations through the Content Distribution Manager GUI, a processing error for the request occurs. This problem can occur when there are a large number of locations and you try to edit the list of locations before the entire list is populated in the Content Distribution Manager GUI.
•
The Content Engine's error log file under /local1/errorlog/errlog-cache* contains many of the following error messages
Thu Dec 18 14:41:59 2003: 257: dir(0x91c5440) val 5937736 link list length 13where the link list length is greater than 5, and the string /local1/errorlog/errlog-cache* refers to the filenames with this pattern. These files are the error logs of the cache process. This problem occurs when there are duplicate cache disk file system object entries for the same object. When a record is inserted into the hash table, there can be slower performance for a long list of duplicates because the entire list is searched.
•
ACNS 5.x software WMT transaction logs do not conform to Windows Media Server Version 4.1 logs. Some third-party applications that are based on Windows logging format may not work with the ACNS WMT transaction logs.
•
The client makes a request for some Windows Media content using a simplified hybrid routing (SHR)-style URL (http://FQDN/path/file.asf.asx) and receives a 404 error message.
•
The Content Engine shows slower HTTP caching performance when it is attached to a Storage Array SA-14 device, and its syslog contains log messages such as the following:
%CE-SYS-5-900000: __alloc_pages: 0-order allocation failed%CE-SYS-5-900000: Out of socket memory•
The show rule all EXEC command shows the group-type "AND" for a pattern list, but the functionality seems to work as group-type "OR." For example:
rule pattern-list 1 group-type andrule pattern-list 1 url-regex yyyrule pattern-list 1 domain zzzThe above pattern is expected to match only if url-regex is yyy and the domain of the request is zzz. However, the rule match is seen if either of them matches, meaning group-type "OR" is effected. This problem occurs when all of the following three conditions exist:
–
–
–
•
A request for a large pre-positioned file over HTTP results in packets that appear to be fragmented. This problem occurs if the IP fragmentation bit is not set but the packet seems to be fragmented (for example, adding the total packet size of the larger packet to the data portion of the second packet equals 1,514 total bytes).
•
When you enter the URL to a software upgrade meta file in the Content Distribution Manager software upgrade registration window, and you include a space when specifying the meta file URL, you receive an error message such as the following:
Transaction Not CompletedURL http://examplehost/test space/ACNS-5.1.3.15-K9.meta.txt is unreachable.•
When streaming WMT content through an HTTP URL, the WMT streaming statistics displayed in the Content Distribution Manager GUI show the request but do not show a cache hit; the HTTP statistics show the cache hit and the service time.
•
A core file from the ICAP service is seen in the core directory. (The ICAP service is immediately restarted by the system.) This problem only occurs with some websites.
•
The transaction log records the incorrect server name. This problem can occur when certain requests are redirected to different servers because of the defined rules.
•
Even if "no http object url-validation enable" is configured on the Content Engine, the statistics indicate DNS lookups for transparently redirected requests in ACNS 5.x software. This problem occurs when an HTTP request is issued in a WCCP set up.
•
The Content Distribution Manager may not return to full service after a reboot. Specifically, the Content Distribution Manager boots, but the Centralized Management System (CMS) service does not restart. Consequently, the Content Distribution Manager GUI is not available. This problem occurs because the disk partition on the Content Distribution Manager is full because of a high rate of error messages from the Content Engines that are under its control.
•
Some specially encoded WMT content is not played back properly from a rebroadcast (a multicast).
•
The preloading of NTLM-protected objects onto a Content Engine fails intermittently.
•
When you use the Content Distribution Manager GUI to monitor the WMT statistics, the bytes/sec statistics are reported as zero (0) even though WMT traffic is passing through the Content Engine.
•
If you reset the clock on a Content Engine that is running ACNS 5.x software, (especially if the time is moved backward instead of forward), some content acquisition fails and there is a long lapse before a content recheck is performed on the root Content Engine. On the receiver Content Engine, content replication stops.
•
Requests for pre-positioned content that is larger than 256 kilobytes return an error message that indicates the bandwidth has been exceeded. Similar error messages are reported in /local1/logs/apache/error_log.
•
If the client browser forces a refresh through the Content Engine cache, the Content Engine issues a request to the origin server that returns the requested content (object) to the Content Engine. The Content Engine returns the new object to the client but does not clear the previously cached "stale" object from its local cache.
•
If the acquirer is stopped in the middle of a crawl, although the AcqCrawlNode is updated as "Done," some items are not be written to the database. In these cases, dropped content is not acquired because the page is not recrawled after the acquirer is restarted.
•
The acquirer fails to log MPEG contents into the ACNS transaction logs.
•
If you change the bitrate-in-bps or bitrate-in-kbps or bitrate-in-mbps attributes in the manifest file after content has been acquired, the new values are not used on the root Content Engine. This problem occurs with Content Engines that are running ACNS software, Version 5.0.x, 5.1.3, or 5.1.5.
•
If you use the Content Distribution Manager GUI or a comma separated values (CSV) export to display any of the following Content Engine statistics, the statistics are inconsistent with those shown through the Content Engine CLI (the show EXEC commands).
–
–
–
The following changes were made in ACNS software, Release 5.1.7:
–
–
–
In ACNS software, Release 5.1.7, there were also some changes to the names of the Content Engine statistics, as described in the "Changes to Content Engine Statistics" section of these release notes.
•
For Content Router-redirected WMT requests, the URL in the first entry of the WMT transaction logs is different from the subsequent entries for the same request.
•
In WMT transaction logs, sc-bytes is logged correctly the first time. It is logged incorrectly for the subsequent control events.
•
The ICAP daemon crashes and causes a temporary service disruption when the ICAP feature (respmod) is enabled on the Content Engine. This usually occurs when there is a heavy load on the third-party ICAP server, which causes the ICAP server to reply to the Content Engine with illegal ICAP response codes. This problem can occur on Content Engines that are running ACNS 5.1 software and that have the ICAP service enabled.
•
The ICAP daemon crashes while processing long URLs (more than 1800 bytes). This could cause temporary service disruption when the ICAP service is enabled. This problem can occur on Content Engines that are running ACNS 5.1 software and that have the ICAP service enabled.
•
The system file system (sysfs) partition fills up because RealSubscriber live archiving has created unusually large archive log.
•
A Content Router that is running ACNS 5.1.x software stops routing requests to any Content Engine when the Content Distribution Manager is running a version earlier than ACNS software, Release 5.1. The output of the show content-routing route EXEC command on the Content Router shows an empty routing table even though there are active Content Engines and the Content Engines are correctly assigned to channels.
•
The Content Engine bypasses the ICAP server even though the server is up and running. This condition can be triggered by an ICAP server, which is being rebooted or is going down and up. The other condition that can trigger this problem is that CLI commands that are related to the ICAP configuration were executed when the ICAP server was down.
•
When you try to start up a WMT multicast station, it fails to start, and a usage error message is reported.
•
If WCCP and ICAP are configured on a Content Engine, the Content Engine does not have any cache hits.
•
If the specified default gateway is unreachable when you boot the Content Engine, the default gateway configuration on the Content Engine may be lost. In this case, you may have to reconfigure the default gateway configuration on the Content Engine in order for the Content Engine to be accessible on the network. The default gateway may be unreachable from the Content Engine because the IP address is incorrect, the physical connectivity is down, or the interface is being shut down.
•
A vulnerability in the Transmission Control Protocol (TCP) specification (RFC 793) has been discovered by an external researcher. The successful exploitation enables an adversary to reset any established TCP connection in a much shorter time than was previously discussed publicly. Depending on the application, the connection may be automatically reestablished. In other cases, a user must repeat the action (for example, open a new Telnet or SSH session). Depending upon which protocol is attacked, a successful attack may have additional consequences beyond terminated connection which must be considered. This attack vector is only applicable to sessions that are terminating on a device (such as a router, switch, or computer) and not to sessions that are only passing through the device (for example, transit traffic that is being routed by a router). In addition, this attack vector does not directly compromise data integrity or confidentiality.
All Cisco products that contain a TCP stack are susceptible to this vulnerability.
This advisory is available at:
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
and it describes this vulnerability as it applies to Cisco products that run Cisco IOS software.
A companion advisory that describes this vulnerability for products that do not run Cisco IOS software is available at:
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-nonios.shtml
•
The RTSP proxy on the Content Engine exits without proxying the WCCP-redirected request.
•
When the Content Engine is acting as the HTTP proxy in Microsoft Internet Explorer, (the proxy setting on Windows Media Player does not affect the problem), and the user is using Windows Media Player Version 9, the play back of certain video-on-demand (VOD) file fails. This problem can occur if the client is accessing the streaming through the special authentication scheme used to deliver mms://*.vm.akamaistream.net/... streams.
•
After you enter the clear cache all command, the RealMedia cache is not cleared and a core file is generated. This problem occurs when the number of mediafs partitions exceeds 8.
•
ACNS users may experience problems retrieving compressed .pdf files if HTTP persistence is disabled on the Content Engine.
•
The Content Engine has a high CPU usage and the L2 Bypass statistics are significantly increasing. This problem can occur when a CSS is being used for load balancing and it is sending traffic to a Content Engine.
•
The transaction log on the Content Engine contains multiple entries of the Content Engine requesting an HTTPS request from itself to itself. This problem can occur if all of the following conditions exist: the Content Engine is set up as a proxy for HTTP and HTTPS, the client browser is Microsoft Internet Explorer Version 5.5, and the client browser makes a request such as the following:
https://ce_ip_address:80
The Content Engine requests the HTTPS page from itself and gets into a temporary looping condition.
•
In HTTPS acquisition with directory indexing crawling, when the starting URL lacks a forward slash (/) at the end, the acquirer fails with a 700 error message.
•
The root Content Engine does not start acquiring content when it is changed back to a root Content Engine from a receiver Content Engine. For example, if the root Content Engine is acquiring a big crawl, and in the middle of the crawl you set the receiver Content Engine as the root Content Engine, the following occurs. The original root Content Engine stops acquiring content, and the new root Content Engine starts acquiring the content. Then if you change back to the original root Content Engine in the middle of the crawl, although the original root Content Engine will obtain the manifest file it reports that there is no updated content. All counters in the original root Content Engine are zero (0), and the crawl does not have a time to live (TTL).
•
The cache process restarts. This problem can occur in the following situation. The certificate key of the origin server has been imported to the Content Engine. An HTTPS transaction is SSL-terminated at the Content Engine, rules are enabled, and the rule rewrite action is configured to match the destination IP address of the HTTPS server.
Documentation Updates
This section describes documentation updates.
•
•
•
•
•
•
•
•
•
•
TACACS+ Enable Password Attribute
This documentation update applies to the following three ACNS Release 5.1 software guides:
•
•
•
The ACNS software CLI EXEC mode is used for setting, viewing, and testing system operations. It is divided into two access levels, user and privileged. To access privileged-level EXEC mode, enter the enable EXEC command at the user access level prompt and specify a privileged EXEC password (superuser or admin-equivalent password) when prompted for a password.
In TACACS+ there is an "enable password" feature that allows an administrator to define a different enable password for each user. If an ACNS user logs in to the Content Engine with a normal user account (privilege level of 0) instead of an admin or admin-equivalent user account (privilege level of 15), the user must enter the admin password in order to access privileged-level EXEC mode.
ContentEngine> enablePassword:
This caveat applies even if these ACNS users are using TACACS+ for login authentication.
Pre-Positioned Content
This documentation update applies to the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
In ACNS 5.1.x software earlier than Release 5.1.5, pre-positioned content is served only on ports that are standard for the protocol. If the incoming URL contains a port number other than the standard port for that protocol (for example, HTTP uses port 80, RTSP uses port 554, and WMT uses port 1755), then the Content Engine does not attempt to serve the content from the pre-positioned file system (cdnfs). Instead, the Content Engine tries to serve the content from the cache file system (cfs) or tries to fetch the content from the origin server, depending on the existing configuration of the Content Engine.
In ACNS software, Release 5.1.5, the ignoreOriginPort attribute was added to support the playback of pre-positioned content using nonstandard ports. The ignoreOriginPort attribute controls content playback and allows the use of nonstandard ports to play back pre-positioned content. In releases of ACNS software prior to Release 5.1.5, playback of pre-positioned content using nonstandard ports was not supported.
The ignoreOriginPort attribute is supported under the following tags in the manifest file:
•
•
•
•
The ignoreOriginPort attribute is optional. Valid values for the ignoreOriginPort attribute are true or false. The default is false. In the following example, the ignoreOriginPort attribute is specified in the <item> tag and is set to true.
<item scr="<http//10.77.155.211/abc.html>http//10.77.155.211/abc.html" ignoreOriginPort="true" />If an item is acquired with the attribute set to true (ignoreOriginPort=true), then the content is played back even if the incoming URL that was used to request the content contains a nonstandard port. For example, if content is acquired as:
<http//www.foo.com/abcd.xml>http//www.foo.com/abcd.xmlthen the content can be played back as:
<http//www.foo.comXXXX/abcd.xml>http//www.foo.comXXXX/abcd.xmlwhere XXXX is the port number.
For more information about using a manifest file to acquire and distribute content in an ACNS 5.1 network, refer to Chapter 7, "Creating Manifest Files," in the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
Configuration Requirements for Managed Live Events
This documentation update applies to the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
If you have channels for live programs configured in your ACNS 5.1 network, make sure that there are no external proxy servers physically located between your ACNS 5.1 receiver Content Engines and your ACNS 5.1 root Content Engine that require proxy authentication. Also, make sure that proxy authentication is not enabled on any receiver Content Engines that might be in the logical, hierarchical path between the root Content Engine and the receiver Content Engine that is going to serve the live stream to the requesting clients. If a live stream encounters any device that requires proxy authentication, the stream will be dropped before it reaches its destination.
If your network is set up with intermediary devices that require proxy authentication, you can work around the problem by configuring rules to bypass authentication on these devices.
For example, to enable the formation of a unicast splitting tree and, in turn, enable live broadcasting from all receiver Content Engines, you can specify the following rule on all of the parent Content Engines in the channel:
ContentEngine(config)# rule pattern-list 1 downstream-CE-ipaddressContentEngine(config)# rule no-auth pattern-list 1cdn-url Attribute Description
This documentation update applies to the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
With ACNS software, you can use cdn-url as an optional attribute of distributed content. This option only works when the media is pre-positioned on the Content Engine and the origin server does not have to be contacted for any reason to fulfill the request. You cannot use the cdn-url attribute if the origin server needs to be contacted to fulfill the request, for example, in such situations as the following:
•
•
•
Note
On page 7-44, replace the bulleted item under the "Item" section with the following.
•
The cdn-url attribute is optional and is used when content needs to be acquired from one URL (the content acquisition URL) and published using another URL (the publishing URL). The cdn-url attribute is the relative ACNS network URL that end users use to access this content. If no cdn-url attribute is specified, then the src attribute is used as the relative ACNS network URL.
In the following sample manifest file, the content item being acquired contains the file path /RemAdmin/InternalReview/firstpage.htm. By specifying a new file path (RemAdmin/Production/firstpage.htm) using the cdn-url attribute, the publishing URL disguises the fact that the content originated from an internal review.
<CdnManifest><server name="ultra-server"><host name="http://ultra-server" /></server><item src="RemAdmin/InternalReview/firstpage.htm" cdn-url="RemAdmin/Production/firstpage.htm" /></CdnManifest>In the preceding example, src is the content acquisition URL and cdn-url is the publishing URL.
Note
If the content is live or requires playback authentication, the origin server from which the content is acquired must be contacted. Therefore, two URLs must exist for the same content item, and the URL specified in the cdn-url attribute must exist on the origin server at all times.
For example, if the content item "RemAdmin/Production/firstpage.htm" requires playback authentication, this content must exist on the "ultra-server" origin server. Otherwise, pre-positioned content playback will fail.
In general, you should not use the cdn-url, cdnPrefix, or srcPrefix attributes if playback authentication is required or if the content is live.
If you use FTP to acquire content and the content type is not specified in the manifest file and the cdn-url attribute is used to alter your publishing URL, the cdn-url attribute must have the correct file path extension (for example, .jpg). Otherwise, the incorrect content type will be generated and you cannot play the content.
The following example correctly shows the publishing URL with the same file path extension (.jpg) as that of the origin server URL.
<item src="ftp://ftp-server.abc.com/pictures/pic.jpg" cdn-url="pic.jpg" />The following example is incorrectly written, because it does not specify the file path extension (.jpg) in the cdn-url attribute.
<item src="ftp://ftp-server.abc.com/pictures/pic.jpg" cdn-url="pic" />Multicast Sender Interoperability
This documentation update applies to the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1. The following is additional information regarding multicast sender interoperability.
•
Symptom:
–
–
Note
Case 1: The primary sender is using an ACNS software release earlier than ACNS 5.1.x. The backup sender is using ACNS 5.1.x software, as is the receiver.
–
–
–
Case 2: Both the primary sender and the backup sender are using ACNS 5.1.x software. The receiver is using an ACNS software release earlier than ACNS Release 5.1.x.
–
–
Case 3: Both the primary sender and the receiver are using an ACNS software release earlier than ACNS Release 5.1.x. The backup sender is using ACNS 5.1 software.
–
–
–
Condition 2: Although you may have received a warning message from the Content Distribution Manager, you can still configure a Content Engine as a backup sender if the Content Engine is registered with a Content Distribution Manager running ACNS 5.1.x software and the Content Engine is running ACNS software earlier than ACNS Release 5.1.x. Cases 4 through 6 discuss the backup sender operating under these conditions.
Symptom: The Content Distribution Manager does not send related configuration information and configuration changes to the Content Engine running the earlier software version. This results in the the Content Engine not being able to identify itself as the multicast backup sender. This scenario might also occur if a backup sender using ACNS 5.1.x software is downgraded to an earlier software version through the Content Engine CLI.
Case 4: Both the primary sender and the backup sender are using an ACNS software release earlier than ACNS Release 5.1.x. The receiver is running ACNS 5.1 software.
–
–
Case 5: The primary sender and the receiver are using ACNS 5.1 software. The backup sender is using an ACNS software release earlier than ACNS Release 5.1.x.
–
–
Case 6: The primary sender is using ACNS 5.1.x software. Both the backup sender and the receiver are using an ACNS software release earlier than ACNS Release 5.1.x.
–
–
Condition 3: The Content Distribution Manager is using an ACNS software release earlier than ACNS Release 5.1.x. In software releases earlier than ACNS Release 5.1.x, only one sender is configurable for each multicast cloud.
Case 7: The sender is using ACNS 5.1.x software. The receiver is using a software release earlier than ACNS Release 5.1.x.
The sender behaves like a primary sender running ACNS 5.1.x software. That is, it sends the first round of content without requiring a NACK to trigger the carousel pass. However, the sender is unable to continue making carousel passes because the receiver is unable to send NACKs.
Case 8: Both the sender and the receiver are using ACNS 5.1.x software.
The sender is able to perform carousel passes and the receiver is able to send NACKs for missing content; however, there is no support for a backup sender or for configuring the NACK interval multiplier.
Case 9: The sender is using an ACNS software release earlier than ACNS Release 5.1.x. The receiver is using ACNS 5.1.x software.
–
–
Workaround for Cases 1 through 9: Upgrade both senders and receivers to ACNS 5.1.x software. Upgrade the sender first, and then upgrade the receivers.
Workarounds for Case 7 only:
–
–
FTP Caching Support
This documentation update applies to the following three ACNS 5.1 software guides unless otherwise stated:
•
•
•
A Content Engine that is running ACNS 5.1 software can be configured for FTP caching in either of the following two usage modes:
•
•
In both of these usage modes, the Content Engine uses the FTP protocol to retrieve and locally cache the content of the FTP requests. These two usage modes differ in the protocol used by the client to issue the FTP request. In FTP-over-HTTP mode, clients use their browsers (the HTTP protocol) to issue FTP requests. In native FTP mode, clients use the native FTP protocol to issue FTP requests, as shown in the following example:
ContentEngine# ftp server.cisco.com
Note
Native FTP requests are logged in the HTTP transaction log on the Content Engine.
FTP-over-HTTP Caching Support
The ACNS 5.1 software supports proxying and caching of FTP URL client requests using proxy-mode HTTP requests when URLs specify the FTP protocol (for example, ftp://ftp.mycompany.com/ftpdir/ftp_file). For instance, the following is an example of an FTP-over-HTTP request that allows the end user to use a browser to access public files from an FTP server:
ftp://ftp.funet.fi/pub/cbm/crossplatform/converters/unix/For these requests, the client uses HTTP as the transport protocol with the Content Engine, whereas the Content Engine uses FTP with the FTP server. When the Content Engine receives an FTP request from the web client, it first looks in its cache. If the object is not in its cache, it fetches the object from an upstream FTP proxy server (if one is configured), or directly from the origin FTP server.
The FTP proxy supports anonymous as well as authenticated FTP requests. Only base64 encoding is supported for authentication. The FTP proxy accepts all FTP URL schemes defined in RFC 1738. In the case of a URL in the form ftp://user@site/dir/file, the proxy sends back an authentication failure reply and the browser supplies a popup window for the user to enter login information.
The FTP proxy supports commonly used MIME types, attaches the corresponding header to the client, chooses the appropriate transfer type (binary or ASCII), and enables the browser to open the FTP file with the configured application. For unknown file types, the proxy uses binary transfer as the default and instructs the browser to save the downloaded file instead of opening it. The FTP proxy returns a formatted directory listing to the client if the FTP server replies with a known format directory listing. The formatted directory listing has full information about the file or directory and provides the ability for users to choose the download transfer type.
Native FTP Caching Support
On page 2-8 of the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1, and on page 2-120 ("Usage Guidelines") of the Cisco ACNS Software Command Reference, Release 5.1 publication, replace the information about native FTP caching with the following information.
The Content Engine operating as an FTP proxy supports passive and active mode for fetching files and directories. In native FTP caching mode, if the ftp proxy active-mode enable global configuration command is used, then the Content Engine uses the same mode with the FTP server for the data connection as the client used to reach the Content Engine, which can be either active or passive. If the ftp proxy active-mode enable command is not used, the Content Engine uses passive mode with the FTP server for the data connection.
As the following partial output of the show ftp command shows, if you have used the ftp proxy active-mode enable command, the Content Engine (the nontransparent proxy server that is functioning as a native FTP proxy server) adheres to the client's mode (active or passive):
•
•
ContentEngine# show ftpFTP Configuration-----------------WCCP FTP service status: ENABLEDMaximum size of a FTP cacheable object: 204800 KBytesFTP data connection mode with Server: Adhere to Client's mode (active or passive)Note that the format of the URL that the Content Engine (nontransparent proxy server that is functioning as a native FTP proxy server) creates for a native FTP request depends on the FTP login name and the transfer mode (binary or ACSII file transfer mode).
•
•
ftp://*user*:*password*@10.100.200.5/home/myhome/mybinfile.obj;type=iThe URL for an "anonymous" user login and an ACSII file transfer mode will not have any fields embedded in the URL, as shown in the following example:
ftp://10.100.200.5/home/myhome/mytextfile.txtThe following two examples demonstrate the use of native FTP with a Content Engine. In the first example, the user logs in with an actual username name ("huff") and is able to retrieve the requested file (test.c) from the FTP server. Note that in this case, the current directory for the user named "huff" is "/home/huff."
ContentEngine# ftp server.cisco.comConnected to server.cisco.com.220 server.cisco.com FTP server (Version wu-2.6.0(1) Mon Feb 28 10:30:36 EST 2000) ready.Name (server:huff): huff331 Password required for myserver.Password:230 User huff logged in.Remote system type is UNIX.Using binary mode to transfer files.ftp> pwd257 "/home/huff" is current directory.ftp> get /tmp/test.c200 PORT command successful.150 Opening BINARY mode data connection for /tmp/test.c (645 bytes).226 Transfer complete.645 bytes received in 0.00077 seconds (8.2e+02 Kbytes/s)ftp> quitContentEngine#In the second example (shown below), the user logs in as an anonymous user and cannot retrieve the requested file (test.c) because the file is not located in the document root directory of the FTP server ("/"), which is the current directory for any anonymous user.
ContentEngine# ftp server.cisco.comConnected to server.cisco.com.220 server.cisco.com FTP server (Version wu-2.6.0(1) Mon Feb 28 10:30:36 EST 2000) ready.Name (server:huff): anonymous331 Guest login ok, send your complete e-mail address as password.Password: test@cisco.com230 Guest login ok, access restrictions apply.Remote system type is UNIX.Using binary mode to transfer files.ftp> pwd257 "/" is current directory.ftp>ftp> passivePassive mode onftp> get(remote-file) /tmp/test.c(local-file) test.clocal: test.c remote: /tmp/test.c227 Entering Passive Mode (172.31.255.255)550 /tmp/test.c: No such file or directory.ftp>ContentEngine#In ACNS 5.1 software, the wccp ftp router-list-number and wccp ftp mask global configuration commands were added to support native FTP caching on a Content Engine that is operating in transparent proxy mode.
The wccp ftp command is used to configure the WCCP interception of FTP protocol traffic from FTP clients to FTP servers.
ContentEngine(config)# wccp ftp ?mask Specify mask used for CE assignmentrouter-list-num Router list numberContentEngine(config)# wccp ftp mask ?dst-ip-mask Specify sub-mask used in packet destination-IP addresssrc-ip-mask Specify sub-mask used in packet source-IP addressContentEngine(config)# wccp ftp router-list-num ?<1-8> Router List NumberThe following example shows how to configure native FTP caching on a WCCP Version 2 router:
1.
Router(config)# ip wccp 602.
Router(config)# interface type number3.
Router(config-if)# ip wccp 60 redirect out
The associated show wccp services EXEC command was modified in ACNS software, Release 5.1 to show the configuration information associated with the FTP proxy.
ContentEngine# show wccp servicesServices configured on this Content EngineWeb CacheCustom Web CacheFTP CacheRTSPThe show wccp modules EXEC command was modified in ACNS software, Release 5.1 to include an entry for the FTP caching service:
ContentEngine# show wccp modulesModules registered with WCCP on this Content EngineModule Socket Expire(sec) Name Supported Services------ ------ ----------- --------------- ------------------5 6 3 FTP Proxy FTP Cache1 7 3 RTSP Proxy RTSP0 8 3 HTTP Proxy Web CacheReverse ProxyCustom Web CacheWCCPv2 Service 90WCCPv2 Service 91WCCPv2 Service 92WCCPv2 Service 93WCCPv2 Service 94WCCPv2 Service 95WCCPv2 Service 96WCCPv2 Service 97ContentEngine# show wccp masks ?custom-web-cache Custom web caching serviceftp FTP Proxy caching servicereverse-proxy Reverse Proxy web caching servicertsp Media caching serviceweb-cache Standard web caching serviceFor more information about these commands, refer to the Cisco ACNS Software Command Reference, Release 5.1.
Restrictions Regarding Native FTP Caching in ACNS 5.1 and 5.1.x Software
Restrictions regarding native FTP caching support in ACNS 5.1 and 5.1.x software are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
FTP Caching Support in the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1
Updates to the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1 regarding FTP caching support are:
•
•
•
•
The ftp proxy active-mode global configuration command applies to FTP (native FTP) caching as well as to FTP-over-HTTP caching.
–
–
•
•
ContentEngine# show ftpFTP over HTTP Configuration---------------------------FTP heuristic age-multipliers: directory-listing 30% file 60%Maximum time to live in days: directory-listing 3 file 7Minimum time to live for all objects in minutes: 30Incoming Proxy-Mode:Configured Proxy mode FTP connections on ports: 80 8080Outgoing Proxy-Mode:Not using outgoing proxy mode.Active mode of FTP transfer is enabledMaximum size of a FTP cacheable object is 204800 KBytesNo object is revalidated on each requestFTP Configuration-----------------WCCP FTP service status: ENABLEDMaximum size of a FTP cacheable object: 204800 KBytesFTP data connection mode with Server: Adhere to Client's mode (active or passive)•
0
Web caching
53
DNS caching
60
FTP caching
80
RTSP
81
MMST
82
MMSU
90-97
User-configurable
98
Custom web caching
99
Reverse proxy web caching
•
1.
Router(config)# ip wccp 602.
Router(config)# interface type number3.
Router(config-if)# ip wccp 60 redirect outFTP Caching Support in the Cisco ACNS Software Command Reference, Release 5.1 Publication
Updates to the Cisco ACNS Software Command Reference, Release 5.1 publication regarding FTP caching support are:
•
•
The ftp proxy active-mode command applies to FTP (native FTP) caching as well as FTP-over-HTTP caching.
–
–
•
•
ContentEngine# show ftpFTP over HTTP Configuration---------------------------FTP heuristic age-multipliers: directory-listing 30% file 60%Maximum time to live in days: directory-listing 3 file 7Minimum time to live for all objects in minutes: 30Incoming Proxy-Mode:Configured Proxy mode FTP connections on ports: 80 8080Outgoing Proxy-Mode:Not using outgoing proxy mode.Active mode of FTP transfer is enabledMaximum size of a FTP cacheable object is 204800 KBytesNo object is revalidated on each requestFTP Configuration-----------------WCCP FTP service status: ENABLEDMaximum size of a FTP cacheable object: 204800 KBytesFTP data connection mode with Server: Adhere to Client's mode (active or passive)•
ContentEngine# show wccp servicesServices configured on this Content EngineWeb CacheCustom Web CacheFTP CacheRTSP•
ContentEngine# show wccp routersRouter Information for Service: FTP CacheRouters Configured and Seeing this Content Engine(1)Router Id Sent To Recv ID0.0.0.0 10.1.94.1 00000000Routers not Seeing this Content Engine10.1.94.1Routers Notified of but not Configured-NONE-Multicast Addresses Configured-NONE-•
Note
•
Group-Type Patterns in Rule Pattern Lists
A group-type pattern is one of the types of rule patterns that you can add to a pattern list. The default operation for the group-type pattern is an OR operation.
In the "List of Rule Patterns" section on page 14-4 of the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1, replace the syntax description for the group-type pattern with the following description:
In the "Patterns" section on page 2-281 of the Cisco ACNS Software Command Reference, Release 5.1 publication, replace the bulleted description for the group-type pattern with the following description:
•
SmartFilter Software and the rule action no-auth Command Rule Interaction
This documentation update applies to the following three ACNS 5.1 software guides:
•
•
•
The rule action no-auth global configuration command permits specific login and content requests to bypass authentication and authorization features such as LDAP, RADIUS, SSH, or TACACS+. In the following example, any requests from the source IP address (src-ip) 172.16.53.88 are not authenticated.
ContentEngine(config)# rule enableContentEngine(config)# rule action no-auth pattern-list 1 protocol allContentEngine(config)# rule pattern-list 1 src-ip 172.16.53.88 255.255.255.255If ACNS 5.1 software is configured for authentication and SmartFilter URL filtering, requests that are allowed to bypass authentication will also bypass the SmartFilter URL filter.
Bandwidth Configuration for Interfaces and Content Services
On page 3-19 of the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1, the tip states that Gigabit Ethernet interfaces run only at 1000 Mbps. This restriction only applies to a Content Engine CE-7320 model that has an optical Gigabit Ethernet interface; the speed of this interface cannot be changed.
For newer models of the Content Engine (for example, the CE-510, CE-565, CE-7305, and CE-7325) that have a Gigabit Ethernet interface over copper, this restriction does not apply; you can configure these Gigabit Ethernet interfaces to run at 10, 100, or 1000 Mbps. Note that on these newer Content Engine models, the 1000 Mbps setting implies autosense (for example, you cannot configure the Gigabit Ethernet interface to run at 1000 Mbps and half duplex). The ACNS 5.x software automatically enables autosense if the speed is set to 1000 Mbps.
pace Command
The pace global configuration command is no longer supported as a separate command in ACNS software, Release 5.1 and later. The functions of the pace command have been incorporated into the bitrate and bandwidth global configuration commands.
Updates to the Cisco ACNS Software Command Reference, Release 5.1 publication are as follows:
•
•
Note
•
pre-load Command
In the pre-load url-list-file path global configuration command, the value for path can be a URL as well as a local file path.
In the Cisco ACNS Software Command Reference, Release 5.1 publication, in the "pre-load" section on page 2-238, replace the syntax description for path with the following description:
In ACNS 5.1.5 software, the pre-load depth-level-default command was enhanced to support 0 as a preload depth level. Setting the depth level default to 0 would be useful if you have specified URLs in preload.txt files and you do not want the Content Engine to try to preload other URLs.
In the Cisco ACNS Software Command Reference, Release 5.1 publication, in the "pre-load" section on page 2-236, replace the syntax description for path with the following description if you are using ACNS 5.1.5 or later software:
depth-level-default
Configures the default depth level.
level_number
Depth level of URL download (0-20). The default is 3.
For ACNS 5.1 or 5.1.3 software, the valid values for the preload depth level default are still 1 to 20; 0 is not supported.
NTLM Preload Support
This documentation update applies to the following ACNS 5.1 software guides:
•
•
In ACNS 5.1 software, support for preloading NTLM authenticated objects was added. This feature allows NTLM authenticated objects (authenticated objects that reside on the servers that authenticate NTLM only) to be preloaded on a Content Engine.
An entry in a URL list file has the following format:
URL [depth] [domain-name:host-name:host-domain-name]
hostname and host-domain-name can be null; however, domain name is required if NTLM credentials have been configured. (The separator is required.)
http//www.cisco.com 3 apac::If NTLM-related information is not present in the preload URL list file entry, the authentication scheme falls back to basic authentication.
To preload authenticated content on the Content Engine, you must specify the username and password in the URL list file as follows:
http://username:password@www.authenticatedsite.com/depth_level
Note
show statistics icap Command
This documentation update applies to the Cisco ACNS Software Command Reference, Release 5.1 publication.
In ACNS software, Release 5.1, the show statistics icap EXEC command was added. You can use this command to display ICAP related statistics for the Content Engine. This command has no arguments or keywords. There is no default behavior or values.
The following is an example of the output of the show statistics icap command.
ContentEngine# show statistics icapICAP-client statistics (http proxy)---------------Total requests for V1 via RPC: 0Time per ICAP request (last 1k reqs): 0ICAP daemon connection error: 0Bad packets from ICAP daemon: 0Error parsing HTTP req hdr from ICAP: 0ICAP daemon internal error: 0Total requests via outgoing proxy: 0ICAP daemon overloaded: 0Other errors: 0ICAP Daemon statistics---------------Total requests served: 0Total requests served: 0Average latency in milliseconds: 0.000000ICAP Service statistics-----------------------Service -- servforicapService Errors: 0Service Bypasses: 0Server -- icap://1.2.3.4/servforicapTotal Reqmods (0), Total Respmods (0)Modifications (Reqmod - 0), (Respmod - 0)No Modifications (Reqmod - 0), (Respmod - 0)Error Responses (Reqmod - 0), (Respmod - 0)Server Errors: 0Server Bypasses: 0Options Req Success: 0Options Req Failed: 8569Max Conn Available 0Used Connections: 0Total Bytes sent: 0Total Bytes received: 0Total BPS sent: 0.000000Total BPS received: 0.000000Server State: DISCONNECTEDContentEngine#Default Port of the Content Engine GUI
On page 12-28 of the Cisco ACNS Caching and Streaming Configuration Guide, Release 5.1, replace the tip with the following:
Tip
Playing Nonhinted IP/TV On-Demand Programs over an ACNS Network
This documentation update applies to the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
The Cisco Streaming Engine supports only hinted files (MOV and hinted MP4 files) for streaming.
Note
If you are creating a file-based IP/TV program for streaming over an ACNS network, make sure that you use only hinted files such as those with .mov or .mp4 extensions. However, you can pre-position on-demand programs based on nonhinted files such as .mpg files on Content Engines in an ACNS network. Pre-positioned on-demand programs based on nonhinted files are not listed in the IP/TV Viewer program listings or in the web-based program guide.
To watch IP/TV on-demand programs based on nonhinted files when IP/TV is integrated with an ACNS network, use the TV-out feature of the ACNS software. For more information on enabling the TV-out feature and creating playlists, refer to Chapter 11 of the Cisco ACNS Software Deployment and Configuration Guide, Release 5.1.
Restriction on IP/TV Program Manager Configuration
This documentation update applies to the following ACNS 5.1 software guides:
•
•
If a program that you want to deliver over an ACNS network uses live multicast mode, you must use the same multicast IP address for the audio, video, and SlideCast streams.
This restriction on IP/TV Program Manager configuration does not apply if the Content Engine used for live splitting is running ACNS 5.1.5 or later software. However, this restriction still applies if the Content Engine is running ACNS 5.1.1 software, even if you are running IP/TV 5.1.5 or later software on IP/TV Program Manager.
Related Documentation
Your product shipped with a minimal set of printed documentation. The printed documentation provides enough information for you to install and initially configure your product.
Product Documentation Set
In addition to these release notes, the product documentation set includes:
•
•
Refer to the Documentation Guide for a complete documentation roadmap and URL documentation links for this product.
Hardware Documentation
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Software Documentation
•
•
•
•
•
•
•
•
Online Help
•
•
Note
The Content Distribution Manager GUI and the Content Engine GUI both have context-sensitive online help that can be accessed by clicking the HELP button.
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
Cisco documentation and additional literature are available in the Product Documentation DVD package, which may have shipped with your product. The Product Documentation DVD is updated regularly and may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on portable media. The DVD enables you to access multiple versions of hardware and software installation, configuration, and command guides for Cisco products and to view technical documentation in HTML. With the DVD, you have access to the same documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .pdf versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com users (Cisco direct customers) can order a Product Documentation DVD (product number DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.
Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
Cisco Marketplace:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Cisco will continue to support documentation orders using the Ordering tool:
•
http://www.cisco.com/en/US/partner/ordering/
•
http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm
•
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com.
You can send comments about Cisco documentation to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you can perform these tasks:
•
•
•
A current list of security advisories and notices for Cisco products is available at this URL:
If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT:
•
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•
In an emergency, you can also reach PSIRT by telephone:
•
•
Tip
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.htm
The link on this page has the current PGP key ID in use.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/go/marketplace/
•
•
•
http://www.cisco.com/go/iqmagazine
or view the digital edition at this URL:
http://ciscoiq.texterity.com/ciscoiq/sample/
•
•
http://www.cisco.com/en/US/products/index.html
•
http://www.cisco.com/discuss/networking
•
http://www.cisco.com/en/US/learning/index.html
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R)
