Anyone who has experiences with ACE using TCL script language for configuring probes that has to start a SSH sessions to the real servers. Within this SSH sessions commands, started from the real servers has to pass return codes to the script.
I can't find any suitable example, nor TCL commands in the ACE TCL guide.
The code excerpt basically reads in 14 bytes of the bit stream from the socket, converts it into a hexadecimal string and finds the 6 hexadecimal characters from the eigthth byte (offset 7 - starting at 0). The string that is being scanned should look something like:
which when decoded is a BindResponse (0x61) to the BindRequest (matching Message ID) and is a return code of 0. Success.
If you are intent on writing your own probe or modifying an existing probe for LDAP then you will need some fluency in Tcl and an understanding of ASN.1 encoding.
As Gilles said earlier, the easiest way of finding the appropriate strings is to do a packet capture of a system making the request and decode it (Wireshark).
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...