Cisco Application :: ACE 4710 / Sticky Serverfarm / All Connections On One Server?

Nov 2, 2011

We are using a sticky serverfarm with 2 real servers, one server was down for maintenance for an extended period of time. When it came inservice again it was not getting any connections. is it because all the connections had stuck to the other server ?  we want sessions to be sticky but we also want to LB?I got it working by bouncing the server that had been online all the time. things started to LB then.BTW  the ACE 4710 is running 4.2.1

View 1 Replies


ADVERTISEMENT

Cisco Application :: ACE 4710 Cannot Confirm HTTP Cookie Sticky Connections

Jan 8, 2013

We are using a ACE 4710 with A3(2.6) software release.I had to change our sticky load balancing method for HTTPS to cookie based.However while connections appear to work if I look at the show sticky database table I can not see or confirm sticky entries for the cookie based connections.Here or config snippets to show the config
 
sticky http-cookie ghh-www scook-ghh
cookie insert browser-expire
serverfarm ghh-www-443
class-map match-all ghh-www-443_CLASS
2 match virtual-address 172.16.1.21 tcp eq https

[code].....

View 22 Replies View Related

Cisco Application :: ACE 4710 Sticky Database

Apr 7, 2013

I am considering using IP sticky timeout, but have a quick question about the database, is the 800,000 sticky connection per appliance or per context?

View 1 Replies View Related

Cisco Application :: Ace 4710 Response Sticky Only

Dec 15, 2011

I've been using my pair of ACE-4710s for quite some time and have usually stuck to the Class C Subnet sticky settings, as that's what we migrated from in Windows NLB.  In one instance of load balancing I'm trying to create an L4 inspection policy that looks for a certain payload (much like a http header) and would like to persist on this.  The problem is that the client portion of the conversation starts with a 'SessionID' of 0, and the server responds with a unique 'SessionID'.  If I setup the sticky policy with 'Enable Sticky For Response', I get entries populated in the sticky database, but they all go to the same server as there is a sticky session setup for the SessionID = 0.  Is there a way to setup sticky entries on server response only.Currently using ACE DM v4(1.0).

View 8 Replies View Related

Cisco Application :: ACE 4710 SSL Cannot Configure Backup Sticky Network

Sep 24, 2012

I'm looking for some documentation I can share with a customer to explain why I can't configure them a back-up sticky server farm when we're not terminating SSL on the the ACE (we pass SSL from the client through to the rservers, sticking the client to the rserver by source IP address).  I've not been able to find anything that addresses this particular scenario in my googling so far.  I remember discussing this in my training class with the instructor, but I can't find any reference to it.  Have any of you run into this and have a link they can share?

View 7 Replies View Related

Cisco Application :: 4710 - HTTP-Cookie Sticky Not Working

Feb 1, 2012

I have a requirement to load balance OWA 2010 inbound connectivity to 2 CAS servers using a ACE 4710 with sticky sessions enabled.
 
The CAS servers are currently responding on 80 or 443 at this moment in time. Eventually I want to off load the SSL to the ACE 4710, its currently running on the CAS servers. I need to enable sticky sessions to keep the session to the same CAS server for each internet based connection. I also have a proxy enabled for inbound connectivity so I cannot use source IP.
 
Here is my configuration but it doesn’t seem to be working, i am currently testing with port 80 connections not SSL.
 
serverfarm host INHOUSE-EXCHANGE-OWA-vFARM
predictor response app-req-to-resp samples 4
probe 443
probe HTTP-PROBE
rserver INHOUSE-TEST-CAS01-SVR
   inservice(code)

View 12 Replies View Related

Cisco Application :: ACE 4710 Shows Over Weeks Dramatically Increasing Sticky Entries

Jan 24, 2013

I have a strange effect at my ACE 4710. I loadbalances normally reliable only 14 WEB-Services.
 
It's running on SW A3.25. Since several weeks I regognized a dramatical increase of Sticky entries. So when running in limitations (the stolen for reuse counter increased then) (show np 1 me-stats "-slb -v") gave more and more resources for sticky ... last it was at 65% and ran again into limits at round 650500 Sticky entries.
 
So I began to find out what of the services was affected with most sticky database entries and could Identify it. There were really to see round about640000 entries for that specific service.
 
The sticky for that service was defined to look at a specific cookie in the http header and the timeout defined is 120 minutes.
 
So round about 45000 Entries was to see with a "show sticky databse group Cookie_Sticky"  with a time-to-expire value of   zero   in the database like the follwing examüple shows:
 
timeout      : 120           timeout-activeconns : FALSE  sticky-entry          rserver-instance                 time-to-expire flags  ---------------------+--------------------------------+--------------+-------+  13765297814690832647 

[Code]....

When I modified my Sticky definition  with the command "timeout activeconns"   all the Zero-Entries were kicked out and the rsources used for Stickywent back to 5% of usage...

View 1 Replies View Related

Cisco Application :: ACE 4710 A3 (5) Logging New Connections?

Jul 31, 2011

We have recently transitioned one of our Ecommerce products to a new data center, at which we now use a one-armed load balancing approach rather then the routed load balancing approach we used previously. This is casuing us some issues as we generally log the source IP address a user comes in on when he fills out an application. Now the logs only show the natted ip address recieved by the load balancer, which does us no good. Any way to log the source IP address when a new connection is created to a particular vip?

View 3 Replies View Related

Cisco Application :: High Connections Within Ace 4710?

Oct 23, 2011

Is this normal to have millions of current connections within an ace 4710? There is only 3 current connections but shows a high number?

View 3 Replies View Related

Cisco Application :: ACE 4710 Failed Probe And Established Connections

Jan 23, 2013

I have four ACE 4710. Each pair of ACE is in one geographical location. Probes are configured so that it is checking regular regex (HTTP GET).When there is need rserver update we change text in our testpage.html (for ie. from "OK" to "SUSPEND" ) so that probe detect fail. In fact rservers are still operational, but should not accept new connections. This works fine. BUT I observed that established connection/sessions did not end up after probe fails. ACE probably wait for openned/established connections to end up and it is what I am askign for.What happens if probe fails but in fact rserver is operational? I thought that if probe fails it also end up/cut all established connections to rserver. But seems it is not true.

View 2 Replies View Related

Cisco Application :: ACE 4710 / Redirect All Connections From Port 443 To 9443?

Sep 13, 2012

I must  redirect all connections from port 443 to 9443.
 
this is configered and running:            
 
serverfarm host FARM-002
  probe test-xml
  rserver svx-xmlfw-lb-01 9443
    backup-rserver svx-xmlfw-lb-02 9443
    inservice
  rserver svx-xmlfw-lb-02 9443

[code]....
     
I have in the moment following problem. All connections become redirectet to port 9443 but port 8080 shouldn`t be redirectet to port 9443. What can i change in my config to solve this problem?

View 6 Replies View Related

Cisco Application :: ACE 4710 Active Connections View Wrong In Web Manager

Sep 28, 2011

I have a problem in the ACE 4710. In view of the connections of a web environment. When I view connections on Config> Operations> Real Servers, Conns column values ​​appear very high connections (Example. 1606317769078).Already in Config> Operations> Virtual Server the number of connections appear normal. Version 4710 ACE Device manger A4 (2.1a)

View 1 Replies View Related

Cisco Application :: ACE 4710 Server In Multiple Server Farms

Jul 23, 2012

I put multiple rservers in multiple server farms?
 
So for example rserver1 and rserver2 are put in serverfarm production1 and are in use with particular sticky and load balancing settings.
 
Can I then create serverfarm test_production and put both rserver1 and rserver2 in it?  Then play around with the sticky and load balancing settings as a test without affecting the production serverfarm.  

View 1 Replies View Related

Cisco Application :: ACE 4710 Take An Action When A Server Goes Down

Jun 2, 2011

If we use an ACE4710 to load balance two real servers, obviously it will use health checks to determine if a server is down.When it detects a server is down, it will not send it any more traffic.But can we also have it take any other action?  For example maybe email an admin, or send an SNMP trap?  Or better yet, can we use a custom TCL script to do other things, like launch some custom activities?

View 2 Replies View Related

Cisco Application :: ACE 4710 SIP - Server Initiated Traffic?

Aug 7, 2012

I have a Cisco ACE 4710 A5(1.2). Scenario: Inbound call from PSTN to SIP Phone. Call comes into the VIP and then load balances to sip server, the server then routes the call out via WAN to the SIP phone as below:

PSTN SIP Providor >(router)> ACE4710 > sip_server(s) > ACE4710 > (router) >SIP Phone
 
Note: Router is Cisco 3925 with "ip nat service sip udp port 5060" and Port 5060 mapped to the VIP of the ACE.If I put the sip server directly behind the router it works fine. From behind the ACE:
 
If I turn on sip inspect on the VIP the call setup (INVITE) and termination (BYE) work fine but the audio loops on the PSTN side from the mic to the speaker.If I turn OFF sip inspect then the audio is fine and mapped correctly but the call terminaton (SIP BYE) hits the VIP from the PSTN but never reaches the sip server.For ease and dianostics, I have turned off all sip servers except one meaning the load-balancer has only one server to choose from.SIP Call_id sticky is setup and seems to work, though irrelevent with one server only on test.How do I get the ACE to accept 'server initiated traffic' with sip inspect so it knows about the pending BYE when it comes back from the IP phone via the VIP?Config below, image attached. Bridged mode (also get the same result in routed mode)
 
access-list everyone line 8 extended permit ip any anyaccess-list everyone line 16 extended permit icmp any any
probe sip udp 1  description SIP Health Monitor  interval 30  expect status 200 200
rserver host server1  description Production SIP Server  ip address 10.44.56.172  conn-limit max 980 min 980  probe 1  inservice
serverfarm host sip  failaction purge  probe 1  rserver server1    inservice

[code].....

View 7 Replies View Related

Cisco Application :: Unable To Access Server Through VIP (ACE 4710)

Oct 3, 2012

configure Cisco Ace 4710 ?Note :- Just a testing face I need to access my one server(192.168.1.11 : 80) through VIP :- 10.13.77.10 ,    I have only one Cisco Router 2800 and One L2 Cisco Switch 2960 and Cisco Ace 4710 . So I already configured 2 Different VLANS in Switch (Vlan 10 & Vlan 100) and by router I given the ip address of that Vlans with Inter Routing Vlan. My Connectivity is like this :-- Router Ethernet 0/0 --- 10.13.77.1/24 with vlan 10) & Router Ethernet 0/1 ---- 192.168.1.1/24 with vlan 100 ) connected with switch after that I configured ACE LB and connect the ACE interface with switch Like that ---- Connect to ACE Interface 2/3 vlan10 with switch vlan10(Ethernet port  2-12) and  Connect to ACE Interface 3/3 vlan100 with switch vlan100(Ethernet port  13-24) .Testing to access server from Switch Vlan10 to Vlan 100 where my server is there.
 
Configuration :---

ACE>  client side Vlan10 (10.13.77.4/24) , VIP :- 10.13.77.10, SM-- 255.255.255.255
 ACE>  server side Vlan100 (192.168.1.5/24), Web server -- 192.168.1.11 with 80 port
 ACE> Managment Vlan 1000 (172.16.6.5/24) ,
 ip  route 0.0.0.0 0.0.0.0 10.13.77.1
 
 I already Configured in Routed mode but From Vlan10 ip subnet example like 10.13.77.12(Client or User PC) tried to access server 192.168.1.11 with VIP http://10.13.77.10 but not responding , if i access server with real IP then accessible (why boz there is inter vlan routing)?

View 22 Replies View Related

Cisco Application :: Access Server Through VIP (ACE 4710) But Very Slow

Oct 30, 2012

Access Server through VIP (ACE 4710) but very slow
 
Accessing the server very slow.., check my real  configuration... this configuration is for application server and after  this i have to configure more serverfarm for different server like  webmail etc. in this ACE 4710. I have only one ACE 4710 .
 
ACE Version A4(2.0) = is there supports Probe with this version?  without probe server will work but very slow.
 
VIP :-- 172.16.15.8  
LB/Admin# sh run
Generating configuration....

[Code].....

View 2 Replies View Related

Cisco Application :: ACE 4710 - Renaming Server Farm

Feb 2, 2012

Is there a way to rename a server farm, health probe, real server or virtual service without having to completely rebuild it?  I'm running 3.0(A3).

View 2 Replies View Related

Cisco Application :: ACE 4710 Server Load Balancing?

Jul 7, 2012

We have two Cisco ACE 4710 and we want to install both of the devices in HA with load balancing mode.While i have done HA mode configuration between ACE 4710.But unable to configure load balancing configuration between them.i want to tell you connectivity between server,client & loadbalancer.Our Web servers are connected to VLAN 152 on the L3 (3750) switch.Which are alreday working in redundancy between other L3.And ACE 4710 it is also connected to vlan 150 which are connected to same L3 (3750) switches and users are also connected to vlan 6 on the same L3 itself. 

View 2 Replies View Related

Cisco Application :: SNMP Server Not Receiving Traps From ACE 4710

May 24, 2012

Had setup my ACE ,to send traps to SNMP server .but dont see any logs on the SNMP server from ACE.
 
SNMP configuration on ACE 
 
logging enable
logging buffered 6
logging host 10.12.40.12 udp/514

[code].....

View 1 Replies View Related

Cisco Application :: ACE 4710 - Monitoring Real Server Showing N / A?

Jun 25, 2012

I recently installed a Cisco ACE 4710 version A4(2.0) into our test network. Load balancing across a number of web servers appears to be working ok and serving pages to users. However, when i tried to check the real time stats via device manager (Monitor> virtual contexts> context > Real servers) a number of fields specifically "current connections", "total conns", "failed conns" etc were showing N/A. Do I need to enable this somehow i.e. polling, if so how?

View 5 Replies View Related

Cisco Application :: ACE 4710 No Access To Any Server To Do File Transfer

Jan 26, 2013

I ma having issues trying to import a .PEM file into an ACE 4710. The original file was a PCKS12 file that was converted to a set of .PEM files as I have no access to any server to do a file transfer. This has worked in the past. the error I get is "Error: File not of recognized types - PEM, DER or PKCS12, import failed". I am not sure what is exactly failing. The cert was converted to a .PEM and the ACE imported that fine.

View 4 Replies View Related

Cisco Application :: Importing SSL Certificate From MS Exchange Server To ACE 4710?

Nov 16, 2011

My customer has SSL certificate already installed on microsoft exchnage 2010 servers and now wanted to import that certificate to cisco ACE4710.
 
How to trace the exact procedure to import the SSL Cert to ACE from microsoft exchange server and how about the KEY, from where I should get the KEY to cross verify for SSL Cert?

View 2 Replies View Related

Cisco Application :: ACE 4710-K9 - VIP Not Showing Webpage From Real Server

Mar 27, 2013

my ACE 4710-K9
 
I cannot reach a web page when accessing my VIP on ACE, here is i paste my configuration
 
VIP at 10.49.30.223
RS1 at 10.49.30.221
RS2 at 10.49.30.221

[Code].....

View 8 Replies View Related

Cisco Application :: ACE 4710 - Configuring Backend Server Monitoring?

Apr 6, 2013

Currently running an ACE 4710, which is handling all of our inbound SSL connections and then forwarding requests thru to backend web servers. This all works fine.
 
My question is this..Right now we are not load balancing any of the backen web servers. But I now have a requirement that should a web server crash or become unavailable I need to redirect that backend connection to another web server.
 
Scenario is more like I have 2 web servers both serving same content, but I want one server to take all the connections unless it fails, at that point have all the connections forwarded to 2nd server.Is there a way to setup the load balancing where the 1st server gets all the connections until a failure happens ?

View 1 Replies View Related

Cisco Application :: ACE 4710 Load Balance Only If Primary Server Fails

Oct 14, 2012

I've done a lot of ACE work over the years but this is the first time this has ever come up. 
 
I have a request from an application group where I have 3 rserver in the server farm but they want all traffic to only go to the first server unless that server fails.  If the first server fails, only then do they want traffic to go to the 2nd server instead and if that fails, then traffic goes to the 3rd.
 
I've read through the documentation but haven't figured out a way to do this. What to do this type of failover configuration?

View 4 Replies View Related

Cisco Application :: Change Version In ACE 4710 To Support NTP Server External?

Oct 26, 2011

I´m Trying to synchronize the clock with NTP server external, these ntp server only support NTP version 3.Can I change the NTP version in the ACE4710 Appliance to support the ntp server external?If is possible, How I can change it ?
 
 This is the version:
 
Cisco Application Control Software (ACSW)
TAC support: [URL]
Copyright (c) 1985-2011 by Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained herein are owned by
other third parties and are used and distributed under license.

[code]....

View 1 Replies View Related

Cisco Application :: ACE 4710 - SSL Configuration / (HTTPS) Access To Server Farm

Aug 31, 2011

I have been tasked to provide SSL(HTTPS) access to a server farm that will be accessible from the internet.  Is this the correct guide to follow?
 
[URL]
 
I am assuming I will need to purchase a certificate to import into the load-balance r as well.

View 1 Replies View Related

Cisco Application :: ACE 4710 Server Farm Fail-on-all Option Missing

Feb 27, 2012

ACE 4710 software A3(2.7) [code] Why is the fail-on-all option missing from the serverfarm that is of type redirect? This option is something that I would actually need in a certain situation.

View 1 Replies View Related

Cisco Application :: ACE 4710 Configuration - Client / IP Address Access For Web Server

Oct 15, 2011

I want to use one arm infrastructure of ACE4710. But I remember it was problem for back end server can not get logging for which client/ip address access the web server.

View 3 Replies View Related

Cisco Application :: ACE 4710 Prevent Failback To Primary Server When Probe Fail

Feb 26, 2011

I want to configure my ACE so that if a probe fails, it fails over to the backup rserver, BUT it won't failback to the primary rserver until manual intervention is complete. The problem is we don't want an rserver to fail and failover to secondary, then failback to primary, repeat... (flip-flopping).   I want to be able to have time to get on the server and find out what may have caused the probes to fail before it fails back.

View 4 Replies View Related

Cisco App :: ACE 20 - Set Up Serverfarm For Radius Server To Load Balance Ldap Udp Accounting Packets?

Jan 10, 2013

I have a Cisco ACE 20, and I´m trying to set up a serverfarm for my radius server to load balance ldap udp accounting packets. The ACE has an LDAP authentication probe but I see no native way of setting up an LDAP accounting probe, without resorting to probe scripting.

View 2 Replies View Related

Cisco Application :: No Sticky Database Entries Seen With End-To-End SSL And Cookie With ACE30s

Sep 10, 2012

We've got ACE30s (active/standby) running A5(1.2), and a context that's front-ending one of our major applications, doing SSL termination on the client side and SSL initiation on the back side:
 
parameter-map type ssl FrontEndSSL-Param
  rehandshake enabled
 
parameter-map type ssl BackendSSL-param
  authentication-failure ignore
[Code]...

View 4 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved