I have CSS CSS11501 which is working fine in single arm deployment. Now I want to have redudency so that in case the switch 1 where CSS is currenlty connected is down.I can reach the CSS through the second switch 2.Both the switch are trunk with each other and CSS has one port connected with Switch 2.
View 2 RepliesI require to connect a "css11501" two core switches to provide redundancy to the load balancing service and would like to verify this possible (Does the spanning-tree protocol officer for load balancing?)
View 2 Replies View RelatedWe have several pairs of CSS11501 and 11503 in our network.This issue affects only one pair of CSS11503 in one of our data centres. [code] We use vrrp in one-armed mode for load balancing and they units have performed great for a number of years. We're obviously going to be migrating to ACE ... but not just yet.We have started to experience a problem with replicating the configurations between two CSS11503 in a pair.When running the commit-VipRedundConfig, it starts off happily enough, though slowly.Ending with "working" and the spinning cursor, even after 1 hour the script hasn't completed.We noted on the backup CSS that the APP configuration disappears during the process and I can't remember if this is normal behaviour.
Re-adding the app session configuration seems to interrupt the process, and when checking the configuration on the backup CSS approximately half of it is missing. Everything after the first owner is gone.
1. Configuration is too large, or just large enough to make the commit script take too long for realistic service.
2. Software bug?
3. Combination of both.
4. From now on manually add config to both CSS's and maintain it by process management.
I have a application where I have to redirect a specific URL to another. The point is that the primary URL, have some information that I want to preserv after redirection, for example: url...
The default CSS11501 behavior is to redirect the primary URL to http://xyz.com. Just that.
how to capture the incoming and outgoing packets on the balancer?The load balancer is connected in between the customer DCN and cisco switches 2960.The reason of capturing both incoming and outgoing packets on the balancer is to prove to our customer that there is no packet loss issue on the balancer, and it could be some issue on their DCN network.Since it is a production server, I will need to ensure that there is no impact to the incoming and outgoing traffic on the balancer and other networking equipments as well.
View 1 Replies View RelatedIs it possible to deploy the CSS11501 in one arm design to loadbalance the authentication traffic Radius across CSACS servers which is on UDP 1645 or 1812 port, is it required to configure the NAT or not, if yes how can define the shared secret in the CSS. also tell me how to configure the keepalive for udp traffic in this scenario other then default icmp keep alive
View 2 Replies View Relatedrecently when i run the commit vip redundancy script, i encountered the following error. This script has never failed in the past. Upon checking the backup CSS, i did notice that my most recent changes were actually synced. The following is the debug i have captured while running the script.
active-lb# script play commit_vip_redundancy "local 167.168.165.10 remote 167.168.165.9 -a -d" active-lb# Checking available disk space on systems ... Checking the disk space locally before continuing with the script. Verifying that another local session is not running the script. Creating script/vipr_config_sync_lock file. Verifying app and redundancy configs ... Verifying that app session is up with backup switch. Making sure app session is up. Seconds to wait before calling it quits: 60 Checking the disk space remotely before continuing with the script. Checking local and remote switch versions ... Storing the running code versions of the local and remote switch. Storing the local switch's version. Retrieving the remote switch's version. Checking remote version for 4.0 Checking if switch is BACKUP for any virtual routers and if the state is 'No Service'. Checking vip redundancy state.... Checking if backup switch is Master for any VRIDs. If it is, either a local
[code].....
Currently have two laptops: one is a MacBook using OS X, the other a Gateway PC running Vista Home Edition. A Dell Inspiron 17R notebook running Windows 7 Home Premium is in process of delivery. Current laptops linked on a home Wi-Fi network with AirPort Express router. Anticipated use of new Dell notebook requires its direct connection to Internet outside of current network configuration. Is it possible to have both accesses available in my setup utilizing my one cable high speed service connection? If so, what are the steps needed to accomplish the required setup?
View 1 Replies View RelatedWe're using a CSS501 to load balance http requests over three servers running windows server 2003 and IIS 6. On Saturday I attempted to switch over to three new servers running the app on Server 2008 and IIS 7.5, I mirrored the used the existing setup to create the new environment (pwgecashwww01,02,03 Owner ACMENewServers and group NewServer).
View 2 Replies View RelatedI would like to configure my Cisco 881 enabling Dual Wan (load balancing and failover). First link: HTTP, FTP, SMTP,...Second link: DATA inter-site (VPN), VoIP,Does the configuration seem OK?What does the command line "track 1 rtr 1 reachability delay down 1 up 1" mean?To send the different flow on one or the other port, do i have to configure it on the ACL1 and ACL2 ?
View 9 Replies View RelatedI created three different Remote VPN connections with three different networks . i can make them one but for some reasons i don't mix all.and iam using Cisco asa 5505 with Shrew Soft VPN software , so my problem is,- i connected Shrew soft remote vpn , if i try to connected another remote vpn connection this will not accept the second connection, any remote vpn connection software that accepts more than one connection
View 1 Replies View RelatedI am running Windows XP and Linux Ubuntu on dual boot.When I open into XP I cannot establish an ADSL internet connection, but can by wireless.If I open into Ubuntu I can establish both ADSL and Wireless internet.In Windows I have checked my Realtek Card in Device Manager - says working O.K.. When I try to open internet by ADSL the message is " trying to assign IP address " then limited or no connectivity" - if I try "Repair" message cannot establish IP address.Clearly something is blocking my connection.
View 17 Replies View RelatedWe have an ASA 5510 with ~100 vpn lan2lan. Now we need to migrate to a new ISP, so we have connected a new asa interface to the internet. Default gw is still on old connection. We are trying to migrate vpn lan2lan using static routes, pointing ip of remote vpn gateway to new isp gateway. VPNs going up, but when they try to send traffic, I can see Rx counter growing up, but Tx remains 0.. I've tried with different vpn (old and completely new), and problem remains.
View 1 Replies View Relatedhow can I setup that the backup connection will start but after 30s of icmp timeout the default gateway (tracket object - 192.168.1.1)
My configuration:
sla monitor 123
type echo protocol ipIcmpEcho 192.168.1.1 interface outside
num-packets 3
frequency 10
sla monitor schedule 123 life forever start-time now
route outside 0.0.0.0 0.0.0.0 192.168.1.1 1 track 1
route backup 0.0.0.0 0.0.0.0 192.168.2.1 254
track 1 rtr 123 reachability
Why do my connection not clear when my service goes to a down state. The only way I can get the connections to clear is by bouncing my content rule. CSS11503 version 08.20.4.05s - SSL all the way to the server --- I also have flow permanent port3 443 configured, but I don't understand why the other two servers go to zero while server01 never goes to zero. If I remove the flow permanent port3 all the counters go to zero, but I would think if the servers goes down then the connections should go to zero regardless of the flow permanent port configuration. [code]
View 3 Replies View RelatedWe have a rather strange issue, and I'm not sure it's really a problem with the ACE or not. We created an HTTP parameter map called "TCPreuse" and applied it to a virtual server. A show conn detail displays "[ conn in reuse pool : FALSE]" for all connections pertaining to this virtual server. The rserver in question is Linux(Ubuntu) + Apache.Next we applied the HTTP parameter map to another virtual server - this time IIS7 + Windows Server 2008. There are plenty of entries "[ conn in reuse pool : TRUE ]" when I do a "show conn detail".What could the web servers be doing differently that would cause the connection reuse to work on one virtual server and not the other?
View 1 Replies View RelatedWhat exactly happens when the SSL connection rate is exceeded. Is the connection dropped, queued or what ?
Defined as the SSL TPS. In our case 1000 but upgradeable to 5000
Region : UnitedKingdom
Model : TL-WR2543ND
Hardware Version : V1
Firmware Version : v1
ISP : plusnet
I have a WR2543ND router and everyday it drops the wireless connection . all the lights on the router stay on and im still connected to the router but it looses the internet connection . the windows trouble shooter says that it cannot connect to the dns server , I have to reset the router and my computer to get it working again . I Have updated the firmware but still the same
Region : UnitedStates
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 3.13.23 Build 120810 Rel.44064n
ISP : Comcast
The 5 ghz connects fine for multiple machines however machines on 2.4 simultaneously lose their connection to the internet, sometimes saying it is still connected to the internet when it is not and sometimes losing connection with the router entirely. The 5ghz still works when this happens.
I would like to make a design with 4 Nexus 5596UP. 2 of them equipped with Layer 3 Expansion Module so they can serve as core layer and the other 2 Nexus used as Layer 2 for aggregation server layer.The 2 Nexus in the core layer will run HSRP and will peer with ISP via BGP for Internet connection The 2 Nexus in the aggregation layer will be configured as layer 2 device and have FEX and switches connected to them.What I am ensure of is how the vpc and port-channel configuration should look like between the 4 nexus. What I was thinking is to run vpc between the 2 Nexus in the aggregation layer and between the 2 Nexus in the core layer. Than I was thinking of connecting each Nexus in the aggragtion layer to both Nexus in the core layer using port-channel and vice-versa.
View 3 Replies View Relatedhow to change our wireless setup. Currently, we have 2 Cisco AiroNet 1130 WAP's in the office that go directly into the 2 POE ports on our Cisco ASA 5500. These WAP's have 1 SSID and are using WEP for security. After demonstrating the flaws of WEP to my boss, he has agreed that we should use something more secure and I've suggested WPA. We want visitors to our office to be able to hop on our wireless but on a separate guest SSID with WEP.
I'd like the internal SSID to route to the ASA and take the default route to the internet (it will be our new fiber connection once it's installed in a couple weeks). The default route is whichever connection is working since our ASA 5500 will fail over when it detects an outage.
I'd like the guest SSID to route to the ASA and then go over our existing cable connection. This connection will be our backup once the fiber connection is installed. Since we won't be using it very often, but will be paying for it, I advised that we send all guest wireless traffic over this connection since 50/5 is plenty for guests.
The current SSID (which will be the internal SSID) has no VLAN. We do currently have a few VLANS on our network, one for voice (.42) and one for data (.100) and the default (.0). What device to I create the VLAN on (Cisco 5500?) and how to I setup the WAP? I need very basic instructions to start and I'm also trying to do this without causing downtime if possible.
I've attached a diagram of what it should look like. Red indicates our internal network and Blue indicates the guest network. I can send screenshots as well.
I wanted to ask a question about the diagram I have included. We are bringing up 2 MPLS WAN connections and would like some specifics on the best design. We are using BGP to the providers. From there we have big questions. We can run BGP internal and are licensed to do so on the N5K's. The N5Ks are currently using HSRP for inside LAN clients as default gateway. We want to load balance and provide redundant routes using a dynamic approach. Should we use BGP internal utilizing the connections between the routers? Should we use HSRP on the routers? How best to get the routes to the N5K and should we be considering this?
View 5 Replies View RelatedIn my lab I have only one ESX server. On this server I am running VSM and vCenter (appliance).I am trying to get 1000v working however everytime I try to migrate my ports I get the following error:Network configuration change disconnected the host '192.168.0.10' from vCenter server and has been rolled back.fault.NetworkDisruptedAndConfigRolledBack.summaryIt seems that it doesn't like the fact that vCenter lives on the same ESX host as I'm trying to migrate. How I could get this to work?
View 1 Replies View Related monitoring oracle database performance by JDBC connection from CSS11506?
if it is not possible to do so, if there is otherway the system do eitehr application server or DB server is performance is too low?
I'm expecting some problems with ACE. I've configured it to loadbalance between 4 nodes with SSL termination at ACE.
Everything was working fine up to the identification of a problem using firefox browser. With Chrome and IE works fine.
The user is trying to upload a file to one of the 4 nodes. When the costumer click at the send button, the Firefox shows the following message: Connection Reset.
This problem just happens when the user try to upload the file. Whe he's just surfing through the system, works fine.
------ Configuration ------
ACE-01-SJPR/eproc4# sh run
Generating configuration....
logging enable
[Code].....
Region : Canada
Model : TL-WR2543ND
Hardware Version : V1
Firmware Version : 3.13.17 Build 120509 Rel.33890n
ISP : shaw
my lenovo 510 running windows 7 has the wirelss router listed in the wireless netowrk connection list but cannot connect to the router. it can connect to other routers without any problem.
Region : Iraq
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : LATEST VERSION UPGRADED
ISP : Newroz Telecom
I purchased TP-link, i want to connect with ADSL modem, i connected successfully through pppoe it shows every ip through lan and wan connected, but it doesn't receive packets / bytes from internet, this is the first problem.the second problem is: i use UPS with TP-Link sometimes my electric power is low just with this tp-link it has problem and refreshing the tp-link
Region : Malaysia
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 121106
ISP : unifi
i just bought this router and upgraded the firmware. but i cant seem to get Internet connection up and running. it says connected but its not. tried both 121106 and 121226 firmware, still the same. when i checked the connection it says DNS server not responding.
I run 2 RV042 V1 for home and office with Gateway to Gateway VPN connection with single WAN connection in use. Everything works like a charm!
I was even able to create VPN connection with 2 WAN connection on one Router and 1 WAN connection on another with Smart link failover and VPN Tunel Backup.
I got problem though when i tried more complex connection diagram. [URL]
So basically I now have 2 ISP connections on each point with Static IPs and I'd like VPN Connection to be alive for ALL 4 options automatically with failovers (smart links) And tunel backups but i'm not sure if that's ever possible with my equipment.
How do I apply the connection parameter map in a configuration like this to the service policy int827? Do I need to define the traffic? Can I specify only one source destination flow to apply the set tcp half-closed TCP normalization against?
policy-map type loadbalance first-match wss-1100-l7slb
class class-default
sticky-serverfarm sticky-srcip-1100
policy-map type loadbalance first-match wss-1101-l7slb
class class-default
sticky-serverfarm sticky-srcip-1101
[code].....
I'm running v4.3.5 in our WAAS environment. At the CLI of one of our 7341 WAEs, there are several connections that show up [code] However, in the Central Manager nothing shows up - not even empty graphs - when I click on a device and go to monitor/connections statistics. After a few minutes, I do get an error message that states "Error retrieving connection stats. Please ensure that the device is online and then refresh." By the way, I get all other statics in the GUI such as Optimization Details Report, Traffic Summary Report, etc. Another thing, these WAEs are behind a router and supposedly the ports to allow access to/from the WAEs and other data is allowed through the firewall.
Is there some special port that needs to be opened on the firewall to allow for 'connection statistics' information displayed, that doesn't need to be opened for the other statistics to display? Or could this be a bug in the software?
I have a ACE4710 setup to load balance a couple of web servers. The real servers all show as inservice as do the propbes and serverfarms/virtual servers. If I ping the Virtuual server ip address I get a reply but it I try to access VIP via telnet or web browser. I get a connection could not be open error on the client.The question is how do i determine where the error is comming from so far I can not tell if the client is getting through the acl or not.I have used the trouble shooting guide and nothing has worked to determine the cause so far. show service-policy int479 detail does not show an increase in the hit count when I try to connect.show stats conn does not show an increase in failed or timed out connections when i try to connect. [code]
View 3 Replies View Relateddefault inactivity connection time out for A3(1.0) So by defult any tcp connection(http or https) will be timed out in an hour. [code]Was this change in the A4(2.0) code or is it still the same? I heard a TAC engg say that default inactivity timeout for http and https are now 5 mins that is 300 seconds.
View 3 Replies View Related