Cisco Application :: CSS 11503 - Layer 5 Content Rule Match Wildcard And Suffix
Oct 2, 2011Is it possible on the CSS11503 to create a layer 5 content rule that matches a url "/*/_edit".
View 3 Replies
ADVERTISEMENT
Cisco Application :: CSS 11503 - Multiple Content Groups?
Oct 4, 2011I currently have a content group as follows;
content My_Group
add service blade1
add service blade2
add service blade3
vip address 1.2.3.4
advanced-balance arrowpoint-cookie
[code]...
So I have 3 blades which are proxy servers and user go first to an MS ISA server then the VIP of the CSS and then the rules processes them give them a blade and chuck them out onto the Internet.
I want to leave the above rule, but remove one blade create an additional content group with that blade and have it process requests for a particular site so, I would create the following
content My_Group2
add service blade3
vip address 1.2.3.4
advanced-balance arrowpoint-cookie
[code]...
So my question is can I do that having the same VIP's etc so if a request comes in and it matches www.thewebsite.com that the second content rule matches it 'better' and therefore processes it or would it still be caught by the "/*" content group. I don't want to create more VIPS as I have a real ache getting firewall rules done.
Cisco Application :: Content Switch 11501 / 11503 Abnormal Interface Link Down?
Mar 27, 2013I have 2 pair of 11501 switches and 1 pair of 11503 switches on 3 sites(LA, China, Taiwan).Each site has a pair of 1105x switch running as redundancy between them and is a standalone which will not interact with others.Recently a series of interfaces(ports) down happened to every active 1150x switches without any reason and log.Especially today, it happened to active switches at 5:39 AM meanwhile on 3 sites.
View 3 Replies View RelatedCisco :: Application Layer Service The Same As Application Layer Software?
Apr 3, 2012I am taking an introduction class to CCNA and we are focusing on the Application Layer,and I'm having some difficulty in understanding what is an Application Layer Service. Is the Application Layer Service the same as Application Layer Software?
View 3 Replies View RelatedDo These Protocols Match Correctly To Each Layer?
Apr 17, 2011Data link-ARP,RARP, presentation-SSL,TSL,ASCII,JPG, Session layer-ASP(apple talk session protocol),SCP are these correct?can your provide 2 new protocols for each with the long name?
View 17 Replies View RelatedCisco Application :: XFF On CSS 11503?
Aug 1, 2011Is the XFF [URL] on the Cisco CSS 11503? If not, is it on the roadmap for a future code release?
View 1 Replies View RelatedCisco Application :: CSS 11501 - Wildcard Certificate With Subject Alternative Names
Sep 6, 2012I generated a wildcard certificate for my company type *. [URL] in a CSS 11501. For the site [URL] worked fine, for the site [URL] didn't worked. I read on the web that should generate a wildcard certificate with subject alternative names. Is it possible in CSS? how can I do it?
View 5 Replies View RelatedCisco Application :: MIB Objects For CSS 11503?
Jun 9, 2009i need the MIB object names for monitoring the processor and Memory Utilization of CSS 11503 with software version 7.50 Where can I find it?
View 5 Replies View RelatedCisco Application :: 11503 CSS HTTP Redirects
Jul 19, 2011I have a number of web sites that are currently being load balanced by CSS 11503s runninng 8x code. I was recently requested to configure HTTP --> HTTPS redirects on the CSS for every site. In the past, I have only configured the redirects for sites that had a requirement. Now it appears that the server teams want all content encrypted.
1) What impact will this have on the CPU?
2) What impact will this have on Memory utilization?
3) Is there a maximum nubmer on redirects?
4) Are there other things I should be concerned about?
Cisco Application :: CSS 11503 SSL Service Suspended
Mar 24, 2013i have two CSS-11503 in redundant mode running 8.20 code. We had an incident in our network where a layer 2 loop caused some high traffic through the CSS' and had to shutdown some network gear(including the CSS) to clear the problem. When the CSS' were powered back up, the SSL service was suspended, why this would occur? There rest of the config appeared normal. I am the only person on these boxes, the configs were written, and I have never had a reason to suspend the ssl service.
View 1 Replies View RelatedCisco Application Networking :: CSS 11503 And SAN Cert
Oct 14, 2012I know that CSRs cannot be generated with multiple names, but if the SAN is added after the cert is ordered from Geo Trust, Veri sign, etc. can the CSS support using the cert?
View 1 Replies View RelatedCisco Application :: Transferring Existing SSL Certificate From 11503 To ACE?
Jun 2, 2012We now have a new requirement . We are replacing existing pair of CSS with ACE 4710 appliances. The problem here is that I can see from the configuration that some SSL certificate installed in CSS .Is it possible to transfer the existing SSL certificate from the 11503 to the ACE? Or, do we need to generate a new key pair and CSR on the ACE? Is there any document available to know the steps for the same.
View 2 Replies View RelatedCisco Application :: Several Pairs Of CSS11501 And 11503 In Network
May 21, 2012We have several pairs of CSS11501 and 11503 in our network.This issue affects only one pair of CSS11503 in one of our data centres. [code] We use vrrp in one-armed mode for load balancing and they units have performed great for a number of years. We're obviously going to be migrating to ACE ... but not just yet.We have started to experience a problem with replicating the configurations between two CSS11503 in a pair.When running the commit-VipRedundConfig, it starts off happily enough, though slowly.Ending with "working" and the spinning cursor, even after 1 hour the script hasn't completed.We noted on the backup CSS that the APP configuration disappears during the process and I can't remember if this is normal behaviour.
Re-adding the app session configuration seems to interrupt the process, and when checking the configuration on the backup CSS approximately half of it is missing. Everything after the first owner is gone.
1. Configuration is too large, or just large enough to make the commit script take too long for realistic service.
2. Software bug?
3. Combination of both.
4. From now on manually add config to both CSS's and maintain it by process management.
Cisco Application :: CSS 11503 Session Stickiness Configuration
Sep 17, 2012I only have configured load balancing on apache with a very simple setup. I have to deploy 2 applications on my clients environment that run inside jboss. One of these applications needs session to be sticky to work properly. The other does not.
In apache I can configure is the sticky parameter is true or false, based on the url, like /appA/* is sticky and /appB/* is not sticky. Can I do that in a CSS 11503? My client insists that it is impossible. That the CSS is only ip based.
I copied the configuration below from the manual: owner arrowpoint # content ruleWapSticky
Cisco Application :: CSS 11503 V ACE 4710 Performance Comparison
Mar 20, 2012Am trying to verify performance figures for ACE 4710 as EOL replacement for a CSS 11503 Am sure that the ACE 4710 smokes the CSS but have to complete the due diligence
Pulling figures from data sheets, release notes etc.. I have only come up with the followingIs there any further figures available for the ACE 4710 to fill in the blanks in table?
Cisco Application :: 11503 Ping For One Virtual Host
Apr 27, 2013I have a single cisco 11503 load balancer.There is a single Banner student information system which is load balanced on it with Virtual ip 10.3.20.101 which is working fine without any issues .I am now trying to add an Oracle ERP application with virtual IP 10.3.20.230 and physical ips 10.3.19.22 and 10.3.19.23 all on port 8003.When I just make the group ERP-Apps-Grp active , the vitual ip address 10.3.20.230 is pingable , but when I make the the content Erp_IAT active it stops pinging. [code]
View 6 Replies View RelatedCisco Application :: Passdetect Command Equivalent In CSS 11503?
Sep 11, 2011what is the "passdetect" command equivalent in CSS 11503 load balancer. software version 8.20.
View 3 Replies View RelatedCisco Application :: Hairpinning On CSS 11503 When Using Source Groups?
Jun 26, 2011I'm not sure if my terminology is correct when using hairpinning but i was wondering if there is any special config needed when you try to access a content rule VIP from a server that's configured as a member of a source group on the same CSS?
So say i have a content rule with a VIP 20.20.20.20 and i also have two servers 192.168.1.1 and 192.168.1.2 that are part of a source group with VIP of 20.20.20.21. My problem at the moment is if from the servers 192.168.1.x i try to ping the other VIP 20.20.20.20 that's configured on the same CSS then it doesn't work and ping fails. The same happens with HTTP traffic to the 20.20.20.20 VIP.
I would have thought that the NAT of the source group would happen before the routing so the 192.168.1.x IP's would be natted to 20.20.20.21 and then passed over for routing where the CSS would see that the VIP 20.20.20.20 is local and it would send it on it's way.
I thought it might be ACL related but i increased the verbosity of acl logging and couldn't see anything in the logs.The source group works fine on it's own and from the CSS itself i can ping the 20.20.20.20 VIP fine. It just seems that from the source group members i can't ping the VIP.
Cisco Application :: How To Monitor Status Of Vips On 11503 Through SNMP
Sep 26, 2011what is the OID for See the hit status of the spefic VIP and RIP coming under the VIP .apeart from this CSS box having any module to moniter the hit status or VIP's and RIP's
View 2 Replies View RelatedCisco Application :: CSS 11503 HTTP Keepalive Fails Even Though Server Responds
Nov 29, 2011I recently "inherited" a CSS 11503 - I've only used ACEs before - and I want to get HTTP keepalives working.To start, I created a test service:
lb-1# show run service sunbird-http-7025-test
!************************** SERVICE **************************
service sunbird-http-7025-test
port 7025
ip address 141.211.229.168
[code].....
Cisco Application :: CSS 11503 Flow Idle Timeout Not Working As Expected?
Jan 20, 2012I have a CSS 11503 with a basic content rule for TCP 10000 going to a few backend servers. I was looking into the default timeout values for flows and when testing using telnet the flow didn't terminate as expected?
For example, i have no 'timeout multiplier' specified in the config and when i look at the output of 'show flow-timeout default' it tells me the default 16 seconds timeout is in effect for *. With that in mind, i telnet to the content rule vip on TCP 10000 and on the backend server using wireshark i can see the TCP threeway handshake. With no data passing i'd expect the CSS to terminate this flow after 16 seconds.. yet it takes exactly 128 seconds before wireshark shows the RST and the flow is terminated. 128 being 8 times the default 16 second flow timeout.
If i try to force the connection to close early by specifiying 'flow-timeout-multiplier 2' in the content rule, or even a multiplier of 40, it still waits 128 seconds to close the telnet connection.
Cisco Application :: CSS 11503 Ether-channel Configuration For Redundant Server Link
Jun 18, 2011I have already raised this discussion on "LAN, Switching and Routing" group. But I guess this is the right group for my queries. So I am sending my queries in this group again.
We are using CSS 11503 with one 16FE line card. We have connected 3 servers with redundant link. So FE1-2 in Server1, FE 3-4 in Server2 and FE5-6 in Server3. Our system team has configured APA in their servers as they are using HP-Ux.
1) Do we need to do any configuration at line card.
2) Do we need to do ether-channel at loadbalancer end. if yes, can you share me any cisco doc on how to do it.
Cisco Application :: 11503 - Stickiness Not Working Fine Without Clearing Session Manually
Sep 11, 2012We have a pair of CSS 11503 installed in our DC. Stickiness is configured for one of the application since long back and was working pretty fine till last couple of months. Since last two months, we observed that CSS is not distributing sessions the way it suppose to be. Mostly, it forwards the session to same server even though request is coming from different sources. Once we refresh the sessions manually, it starts working fine. We have to do this exercise manually every alternate day.
View 1 Replies View RelatedCisco Application :: To Enable SSL3 On Content Switch
May 23, 2011I had meeting with security auditor for a customer, he told me that i need to enable SSL3 on content switch as his scanning found that all network is working on SSL2.I could not understand his view and then when i found the content switch documentation, it is mentioned that SSL3 is default enable on content switch."By default, the SSL version is SSL version 3 and TLS version 1. The SSL module sends a ClientHello that has an SSL version 3 header with the ClientHello message set to TLS version 1." Do i have to do some kind of configuration to enable SSL3 or its enable by default ?
View 3 Replies View RelatedCisco Application :: ACE30 Match Http Url Except Specific One
Feb 4, 2013is it possible to construct the L7 HTTP class-map expression to match all URLs except one? I have 1 correct url, for example: /correcturl.* and want to redirect requests to all other possible URLs to this one, without the need to list them all in "possitive match" statements.
View 6 Replies View RelatedCisco Application :: L7CLASSSrv2 / ACE Loadbalance Ssl Match Header?
Mar 27, 2012I created several rules to balance on a specific server somes apps. Everythings works great in http but no in https.In my example, i would like [URL] to be redirected to my server2 but it's always using the default rules instead of the L7CLASSSrv2. Today [URL] is well redirected. All other apps are correctly loadbalance with the stickyness effect but I can't handle the https connections.
class-map match-all L4-WEB-IP
2 match virtual-address xxxx tcp eq www
class-map match-all L4-WEBHTTPS-IP
2 match virtual-address xxxx tcp eq https
class-map type http loadbalance match-any L7CLASSSrv1
[code]....
Cisco Application :: Sample Command Output Of Show Chassis Inventory For CSS 11501 / 11503 / 11506?
Oct 30, 2011I am trying to get a sample command output of "show chassis inventory" for:
CSS 11501
CSS 11503
CSS 11506
Cisco Application :: CSS 11503 - Server-to-server Load Balancing?
Feb 16, 2012I'm trying to design a CSS configuration that allows servers in the same vlan to be the source and destination of load-balanced traffic. My thought is to add two new vlans, one for the VIPs and one for the servers, then NAT the source IPs going from the LB to the servers.
Is this the right way to do it?I've never NATted using CSSs, so I wanted to verify what I'm thinking.Our current config trunks the vlans -
interface 1/1
trunk
vlan 1
default-vlan
vlan 555
[code]....
Cisco Application :: N55-D160L3-V2 Be Installed For Layer 3 Performance
Oct 9, 2012For the Cisco Nexus 5548P chassis, must the N55-D160L3-V2 (Nexus 5548 Layer 3 Daughter Card, Version 2) be installed for Layer 3 performance.
View 3 Replies View RelatedCisco Firewall :: ASA 5505 - Cannot Add Rule Without Deleting Implicit Rule
Jan 18, 2011what is the purpose of the "Permint all traffic to less secure networks".
Well I know the purpose and the technique to handle some sercurity level is nice. when I cannot add add a rule without deleting this implicit rule?
The technique of security level is then obsolete?
Cisco Routers :: RVO42 / 4400 N - SIP Application Layer Gateway Disable
Jul 22, 2012We use a phone system that requires SIP Application Layer Gateway to be disabled on the router. We replaced the older RVO42 routers with the WRVS4400N routers and the VOIP phone works fine with this check mark option disabled.
Does the new RVO42 router allow you to disable this option? I did not find it in the manual so far. I do not want to buy two routers and find that it will not work with the phone system. We need Dual WAN this time so I thought we would try RVO42 model again as long as it is the latest version. Any issues with newer RV042, RVO82 with NEC VOIP phone systems?
D-Link DIR-615 :: The Rule Is Being Used By Another Rule And Cannot Be Deleted
Jul 27, 2011I accidentally setup two schedule rules both with the name of "Log". When I highlight either rule, and try to delete either, I get error "The rule is being used by another rule and cannot be deleted" How do I delete?
View 1 Replies View RelatedHow To Renew Dns Suffix
Dec 25, 2011i have flushed dns cache and i do not know how to renew dns suffix.
View 1 Replies View Related