Cisco Application :: ACE4710 - Failover Over VLAN

Dec 3, 2011

I have HA configuration for two ACE4710. FT between Ace's is configured as L2 (V LAN). Active ACE is sending heartbeats, but switch shows lot of 'input errors' on ingress and this is a major problem. FT is logically not working (there is no connection between these two Ace's over V LAN). There is only L2 configuration, with speed and duplex auto, no other special configuration.  When I connect Ace's directly, FT is working without problem.

I can see lot of errors on input direction (from ACE) to switch port, that means, L1, or L2 problem, but direct connection (using the same Ethernet cable) is working. I tried 'shut/no shut' on both sides, set duplex/speed,... without success.
 
ACA IOS version is A4(1.x).

View 4 Replies


ADVERTISEMENT

Cisco Application :: Cannot Telnet To ACE4710

Sep 27, 2011

I have a problem, recently I can not telnet to the ACE 4710, the ACE version is A4(2.0). I can enter by web and console but not for telnet.  I try to give more resource to the admin context but it doesnt work.

View 1 Replies View Related

Cisco Application :: ACE4710 - Unable To Perform End To End SSL?

Nov 9, 2011

I have to load balance traffic between 2 servers sitting behind the LB. The webservices are on HTTPS/8443. I followed the end to end configuration guide for SSL. No success.
 
Here is my configuration -
 
rserver host nms1
ip address 10.29.36.31
conn-limit max 4000000 min 4000000

[Code].....

View 3 Replies View Related

Cisco Application :: ACE4710 TCP Connection Reuse

Jun 8, 2011

We have a rather strange issue, and I'm not sure it's really a problem with the ACE or not. We created an HTTP parameter map called "TCPreuse" and applied it to a virtual server. A show conn detail displays "[ conn in reuse pool : FALSE]" for all connections pertaining to this virtual server. The rserver in question is Linux(Ubuntu) + Apache.Next we applied the HTTP parameter map to another virtual server - this time IIS7 + Windows Server 2008. There are plenty of entries "[ conn in reuse pool : TRUE ]" when I do a "show conn detail".What could the web servers be doing differently that would cause the connection reuse to work on one virtual server and not the other?

View 1 Replies View Related

Cisco Application :: Upgrade ACE4710 With Different Context?

Sep 16, 2012

I need to upgrade 2 active-standby cisco ACE4710, the issue is I cannot access FTP/TFTP/SFTP server via Admin context but can be accessible via other contexts.

Can I copy the ACE system software file from FTP/SFTP/TFTP server to image: directory durectly or need some other way around ? I could see the option is available to copy ftp: to image: via other context.

View 2 Replies View Related

Cisco Application :: One Interface Configuration For ACE4710?

Jun 15, 2012

My customer they do not want change their real server IPs. So I need setup one interace (one armed) for them on ACE4710. Who had this sample configuration? (CSS has this but it seems to be not compitable with ACE)

View 4 Replies View Related

Cisco Application :: ACE4710 To Perform SSL End-to-end Configuration

May 31, 2012

I am attempting to configure an ACE4710 to perform SSL end-to-end confguration. i.e. SSL termination - load balance - SSL initiate to backend server.The configuration appears to work fine in a test lab using any old web server, however when I peform the same configuration in the production environment it does not work. It appeatrs from a capture run on the ace that the ace is reseting the tcp connections after communicating with the back end server. The main difference I can think of in this environment is that the cert and key pair the ace is using where exported from the backend server, i.e. both the ace and the backend server have the same certificates and keys. Is this allowed? how to troubleshoot why the ace resets the connection.

View 6 Replies View Related

Cisco Application :: Configuring URL Filter In ACE4710

Jul 10, 2011

I have 2 ACE4710 in HA enviroment, they receive connection from Internet. What I need to configure is following:
The ACE have configured two URL, with the same port and VIP Address, for example:
 
URL-1: www.xxxxx.com
URL-2: www.xxxxx.com/Admin
VIP Address: 10.10.10.10
Port: 8443
 
All clients point to unique VIP and Port configured, I need to know if I can apply any filter or rule that allows me to distinguish when a customer goes to the URL1 or URL2.If any client try to access to URL-2, your traffic must be deny.In summary, from Internet I should be able to go only to URL-1.

View 3 Replies View Related

Cisco Application :: GSS 4492R Configuration With ACE4710?

Dec 8, 2010

I have to deploy the Cisco GSS in our 2 dataceters globally seprate IP ranges to loadbalance the exchange 2010 environment with Cisco ACE 4710 series SLBs.  The scenario is to deploy  one GSS + ACE on each datacenters and our nameserver will point to both GSS's IP addresses to get through. Incase primary site "site A" goes down name server will point the client's request to "site B".
 
What will be the physical setup of the GSS here and what configuration should on SLB ACE will make it work? Do GSS and ACE need to be in the same vlan? is this necessary to use Both interface of the GSS to get things working?  How the GSS will check the health check on ACE if they both are on different vlans/ip range? Our ACE will be in routed mode do we need to assign the Real server default gateway as ACE inside interface with the server farm or just do the SNAT of the client IPs so the request can come back to ACE?

View 6 Replies View Related

Cisco Application Networking :: Possible In ACE4710 Appliance To Configure A SIP TLS

Feb 11, 2013

Do you know if it is possible in ACE 4710 appliance to configure a SIP TLS ?The SIP probe we have in the configuration guide it is only for clear text. for Lync 2013 we need to establish first a TLS session and then within it, send an SIP request..IS it possible in any version? I tried also to configure a HTTPS probe but it fails as it sends a GET which the Lync SIP server doesn't understand.

View 1 Replies View Related

Cisco Application :: ACE4710 Deployment Models Required

May 31, 2011

ACE 4710 deployment model.  We'll be doing an eval later in the year, but I'm just looking to understand the architecture.We have a stack of 3750 switches with a single VLAN (10.1.1.0/24).  Connected to that stack is a pair of web servers (10.1.1.5 and 6) that we want to provide load balancing/failover for.  Some of the clients are located right there on that same VLAN.  Other clients may be coming from other spots in the infrastructure.It sounds like I could put a pair of 4710s connected to that stack of switches, in a single arm deployment?  And then the virtual IP and the real servers would all be 10.1.1.0/24.  Maybe use an etherchanel to connect each 4710 to two 3750s?

View 9 Replies View Related

Cisco Application :: Putting ACE4710 Into Running System?

Apr 17, 2012

I'm implementing and found out some  issues are unresolvable on ACE4710. This network have been running on a server without LB. Now the second server comes up. We choosed to implement with Routed Mode.This network Peak @ 300Mbps. Now on we're doing the first context which is function as content  web-farm. In near future, 2nd context which takes care of indexing  web-farm when they buy more server.
 
From following diagrams.I browsed from internet into this service. "show service-policy" shown  as '0' (counter was not running). I guessed that there is something  wrong in FW configuration. So I isolated out FW. Then I plugged-in  my PC into network 30 (192.168.30.X) in front of this LB, then browsed  into LB's VIP (192.168.30.1). LB  "show service-policy" came up BUT  there is nothing return to my PC (client). "show conn" on LB as  "SYNSEEN". What's SYNSEEN?! Some meaningful.
 
Then I tried to figure out with a PC running 'apache' and took the  place of real server. "It works!" returned from LB/Server. "show conn"  became 'Establish' Programmer guy said if I browse into web-farm  (i.e. content web-farm) directly pkt will be redirected to indexing  server. But they said it will be L7 redirection. Not LB/Network level. 

View 5 Replies View Related

Cisco Application :: ACE4710 Is Not Able To Link Directly To APP / WEB Server?

Aug 31, 2011

We recently configured a setup to loadbalance 2 application server using ACE4710.  Initially the configuration was to link two app servers directly to ACE4710 without connecting to a Switch, but later, it was advised that ACE4710 is not able to work without connecting to a switch. 
 
1. ACE4710 is not able to link directly to APP/WEB server, but it must go through a network Switch.
 
2. If item-1 above is true.  We used to have a older Cisco Loadbalancer which is able to link directly to WEB/APP servers. What is the reason or advantage of removing this feature?

View 7 Replies View Related

Cisco Application :: ACE4710 - Microsoft Windows CPU OID Changes Between Reboots

Oct 14, 2012

On my ACE4710s I'm using least-loaded predictors monitoring Microsoft Windows CPU usage. There are times when the MS Windows CPU OIDs can change between reboots. Any way for the ACE to automatically adjust to the new CPU OIDs and continue to get accurate CPU usage values?

View 1 Replies View Related

Cisco Application :: ACE4710 Started To Continuously Reboot?

Mar 3, 2010

one of our 2 ACE boxes in FT group suddenly reboot-ed from active state and now it continuously reboots with the following error:
 
insmod: error inserting '/isan/bin/klm_octeon_device.klm': -1 No such deviceerror inserting /isan/bin/klm_octeon_device.klmDaughter Card Not Found. Rebooting..INIT: Sending all processes the TERM signal...

View 10 Replies View Related

Cisco Application Networking :: CSS11503 To ACE4710 And Server Side NAT

Dec 16, 2012

We have a CSS11503 that is currently being used to accept incoming HTTPS and SSH connections on a specific VIP and then PAT those client connections.  I understand that it also PATs the server initiated connections. [code]

View 1 Replies View Related

Cisco Application Networking :: Does The ACE4710 Support Custom Protocols

Jun 1, 2011

For server load balancing, does the ACE4710 support custom protocols? We'll be using HTTP for server health monitoring, and to determine if a server is up or down. But the client/server application is custom, and includes a lot of non-standard ports.  Can the server VIP handle generic TCP connections?  For example client1 connects to the VIP on http, but then later client1 switches to using tcp842 (a custom protocol, not http).

View 5 Replies View Related

Cisco Application :: ACE4710 Troubleshooting Connection Failure From Client

Nov 12, 2012

I have a ACE4710 setup to load balance a couple of web servers. The real servers all show as inservice as do the propbes and serverfarms/virtual servers. If I ping the Virtuual server ip address I get a reply but it I try to access VIP via telnet or web browser. I get a connection could not be open error on the client.The question is how do i determine where the error is comming from so far I can not tell if the client is getting through the acl or not.I have used the trouble shooting guide and nothing has worked to determine the cause so far. show service-policy int479 detail does not show an increase in the hit count when I try to connect.show stats conn does not show an increase in failed or timed out connections when i try to connect. [code]

View 3 Replies View Related

Cisco Application Networking :: ACE4710 - Can't Assign IP Address To Physical Ethernet Port

Jan 4, 2013

My customer wants each ACE4710 (of a highly available cluster) to have its own, dedicated port for management purposes.
 
According to documentation, IP addressing can be applied to VLAN interfaces, so in order to satisfy the requirement, I should make one port belong to an "access VLAN X", and then apply IP addressing to the corresponding "interface VLAN X". This should satisfy my customer´s requirement in an indirect way.
 
But... ¿ Can´t I just configure IP address on one of the 4 ethernet ports in order to save the work of building the aforementioned VLAN? I am asking this since I do not have access to a real box in order to verify.

View 2 Replies View Related

Cisco Application :: ACE4710 Insert Cookie - Does It Overwrite Server Cookie

Mar 28, 2012

I was trying to implement stickiness based on cookie. Server inserts a cookie and sends it to the browser. I learned from app team that this cookie is changing dynamically during the session, so stickiness based on server’s cookie doesn’t work.
 
Now I want to investigate into possibility of ACE to insert a cookie. My question is: ACE feature of “cookie insert”: does it add additional cookie into http header without removing server cookies or it deletes the cookie(s) that server put into http header and replaces them with its own cookie?

View 1 Replies View Related

Cisco Application :: ACE4710 Appliance To ANM Virtual Appliance NATed

Oct 12, 2011

We have an ACE Appliance in a DMZ and the ACE Appliance's Admin Context IP is translated between ACE and ANM. The ANM Server does not get translated. It is just the opposite then in another Community discussion.
 
Our Problem: When adding the ACE4710 Appliance to the ANM imported Device List, we use the ACE's NATed Admin Context IP. Import works well, but ANM reflects the Admin Context IP with it's real configured IP. Polling the ACE Appliance does not work therefore.
 
Is there a possibility of telling the ANM, that the ACE has to be polled through a NATed IP? I could not find a field to set a NATed Mgmt IP.
 
Configured IP on ACE Admin Context: 192.168.0.10
NATed ACE Admin  Context IP:           172.16.0.10
 
Imported ACE with IP 172.16.0.10 into ANM, but ANM polls for Rserver, Vserver, Probes, etc. via 192.168.0.10 - which is not reachable from the ANM.

View 2 Replies View Related

HA Failover For Socket Application?

Sep 15, 2011

I have a tcp socket server application. Some of my clients are asking if I can provide server redundancy for my tcp service for HA purpose. I know it can be done using Windows NLB but the cost of the Enterprise edition is beyond the budget of most of my clients. DNS failover is also out since it will involve fiddling with the DNS server. I'm would prefer to setup a simple solution in which I check the status of the primary server and then if the primary is down, change the ip address of the secondary to the primary so that the service remains available. This sounds simplistic, and besides different clients use different networks, e.g. AD, but I'm not a networking guy so I am at my wits' end.

View 2 Replies View Related

Cisco Application :: 3750 - FT Failover Not Working

May 1, 2012

We have 2 ACEs configured as Active/Standby.  FT vlan is configured directly using a crossover cable , not using a switch for the FT vlan.ACE is setup in routed mode ,vlan 29 is client vlan and 28 is server vlan ,both are being trunked on ACE-- trunk  3750 switch.
 
When I shutdown the port on 3750 for the primary ACE , data connectivity wise ,primary ACE is down ,but the secondary is not taking over ,and also when I do sh ft group status  on the secondary ACE,I see the status of  STANDBY_HOT and the peer state: ACTIVE.

View 5 Replies View Related

Cisco Application :: How To Test CSS 11501 Failover

Aug 7, 2012

I have 2 CSS, 1 as primary and 2nd as standby. I configured the standby CSS as my old standby CSS box and now wanted to test the faliover. I am not aware of how to test it in. ny how i have cr for that.

View 1 Replies View Related

Cisco Application :: ACE20 And ACE30 Failover?

Oct 25, 2011

Have a client with one ACE20 and now he needs a second one for redundancy.Since ACE20 is EOL, can I use an ACE30 with an ACE20 as a failover pair?

View 1 Replies View Related

Cisco Application :: ACE 4710 - Active / Passive Failover?

Nov 14, 2012

We have an ACE 4710 that has two web servers in an active/passive scenario.  The issue is that if node 1 fails and node 2 takes over connections to node 2 stay active even if node 1 becomes available again.  Is there are way to ensure that node one is not placed back into service if it becomes available again.
 
how active/passive failover shoudl be configured, so I can make sure I have it set up correctly;

View 5 Replies View Related

Cisco Application :: Failover ACE / Default Route Redundancy / 6500

Jun 20, 2011

Since the ACE supports only static routing, when pointing a default route from the ACE what is your preferred method when using multiple 6500s with an ACE in each in a failover scenario to prevent just pointing at one 6500? Static route to an HSRP address? Multiple static routes on the ACE, etc?

View 2 Replies View Related

Cisco Application :: CSS11506 Good Show Commands To Validate Failover

Sep 27, 2012

I am planning to perform a failover drill between active and standy CSS loadbalancers which are configured in a cluster pair.  I am looking for help to know what show commands I can run to validate that the failover occurred successfully from primary to secondary load balancer and that the VIP's have failed over successfuly as well.

View 1 Replies View Related

Cisco WAN :: Failover WAN On 881 Using Fast4 And VLAN On Fast3

Nov 29, 2011

I am looking for confirmation that I can use an interface other than the fastethernet4 as my ip nat outside on an 881.
 
Background:
 
We use 881g with the fast4 and cellular0 interfacs for WAN failover and wanted to do the same on an 881 without the wireless card.  We want to use fast4 as our primary WAN connection to the Internet and use VLAN3 on an interface on the 4 port switch.
 
The configuration commands do not error, but we get no nat trans via the outside interface if it is the VLAN based interface.
 
It seems therre maybe a limitation on this functionality but I do not see why this should be.
 
Here is the relevant info:
 
interface FastEthernet0
spanning-tree portfast
!
!

[Code]....

I have correct route-maps for nat and an sla/track.  Again, these concepts are proven on an 881g.  I cannot find a statement that says you cannot use a vlan as the outside.  The router itself can use the vlan3 backup just fine, it is NAT that fails. Perhaps an 891 with GE/FE on the WAN is the only way to do this.

View 1 Replies View Related

Cisco Switching/Routing :: Tricky HSRP Failover Without IP SLA VLan 179

Sep 8, 2012

Below is a basic image of the HSRP and backup link setup for our LAN.
 
The virtual IP 192.168.178.50 resides on the primary router and fails over to the backup router. Internal default gateways for the switches are set to 178.50.
 
Switch1 is Layer3 and has two static default routes configured as:
 
ip route 0.0.0.0 0.0.0.0 192.168.179.50 track 1 - - - (interface line-protocol track)
ip route 0.0.0.0 0.0.0.0 192.168.178.50 2
 
And the primary router has a static route out 179.50 which tracks the interface (route goes down if interface is down), and a backup static route.
 
ip route (internal LAN) Gi0/1 track 1 - - - (interface line-protocol track)
ip route (internal LAN) Gi0/2 2
 
Everything works fine. If the primary router fails, Switch1 tears down the route across Vlan179, HSRP fails over the IP to the backup router and routing continues as normal. If the link across Vlan179 fails, the routers tear down the primary routes and again, things continue as normal.
 
The problem comes when the primary WAN link fails but the router remains up. This means the default route is still across Vlan179. Normally, Id set an IP SLA on Switch1 to track the WAN link BUT Switch1 only has the BASE IOS and the company wont pay for the Advanced IP IOS so I dont have IP SLA as an option.
 
How can I get the static default route to failover in the event that only the primary WAN link goes down?

View 12 Replies View Related

Cisco Firewall :: ASA-SM Failover Pair In 6500 - Same Mgmt VLAN In All Context

Jun 19, 2012

I have ASA-SM failover pair in two Catalyst 6500 switches. I send from switch to ASA-SM management VLAN 1234 to admin context for management purposes. I have another 3 contexts on ASA-SM. Can I have same managemenet VLAN1234 on each ASA-SM context? Can it work?

View 1 Replies View Related

Cisco Application :: ACE30 / Connectivity Between IP Subnets On The Same VLAN?

Aug 25, 2012

We have a subnet setup on the ACE as follows:
 
interface vlan 300
  description CALLISTA Environment
  ipv6 enable
  ip address 2001:388:608c:8b8::fffd/64
  alias 2001:388:608c:8b8::fffe/64
  peer ip address 2001:388:608c:8b8::fffc/64
  ipv6 nd ra interval 30

[code]....
 
Notes:There is the primary subnet 130.194.13.0/26 and the secondary IP subnet 130.194.19.192/27?The nat-pool is configured to allow server initiated connections to their frontend VIP when necessary.We are noticing that when a server on the 130.194.19.192/27 subnet needs to communicate with a server on 130.194.13.0/26, albeit on the same VLAN, the destination server sees connections with a source IP of 172.16.25.231, which is the NAT address.  Is this expected behavior, where connections between IP subnets, albeit on the same VLAN are NATed?

View 1 Replies View Related

Cisco Application :: ACE30 - Connectivity Between IP Subnets On Same VLAN

Aug 25, 2012

We have a subnet setup on the ACE as follows:
 
interface vlan 300
description CALLISTA Environment
ipv6 enable

[Code].....
 
We are noticing that when a server on the 130.194.19.192/27 subnet needs to communicate with a server on 130.194.13.0/26, albeit on the same VLAN, the destination server sees connections with a source IP of 172.16.25.231, which is the NAT address.  Is this expected behavior, where connections between IP subnets, albeit on the same VLAN are NATed?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved