I’m wondering if there is a way to configure CSS11503 running 8.10 so that the servers in the content rules can see the client port number?The servers can see the client IP, but not the port!! It seems when forwarding packets to the servers in the content rule, the CSS uses a new high-number port when communicating with servers.
We have a CSS11503 that is currently being used to accept incoming HTTPS and SSH connections on a specific VIP and then PAT those client connections. I understand that it also PATs the server initiated connections. [code]
I know the CSS is too old but I have one in production environment and I was asked if it is possible to CSS to make NAT from inside addresses and translate them into one external IP address to diferent kind of communications, for example: 172.16.4.9 and 172.16.4.10 (inside addresses) should start connection to external IP addresses destinations 220.127.116.11 / 18.104.22.168 22.214.171.124 / 126.96.36.199 and so on, the default gateway to those Servers is the CSS and I would like to know if it is possible that all connection to external world to be translate into one IP address 172.16.4.100.
I have a Cisco ACE with a server farm "intranet" with real servers rsrv1 and rsrv2 (round robin) and i have two sites A (IP Address A) and B (IP Address B) in the WAN. I want to that Site A conect to ACE 4710 via VIP, but this connection will be to srv1 and Site B conect to ACE 4710 via VIP, but this connection will be to srv2.
Have two ACE 4710 in HA setup. We would like to setup HTTPS loadbalance(actually just a primary and standby configuration in the serverfarm). Initially this would be for Exchange OWA connections but may expand to more HTTPS connections later. I know there are several ways to do SSL with the ACE( client, server, end-to-end). I am just wanting to know the easiest way to deploy this? Is a certificate always needed on the ACE for each connection? In HA mode would a certificate be needed for both or does it replicate in some way to the other ACE?
I am trying to configure ACE 4710 to load balance base on the URL, If it matches the specific URL ( /456/ ), the traffic will be sent to server farm 456 else the traffic will be sent to server farm 123.
I attached an image of the topology.
rserver host SRV01_123 ip address 192.168.1.101 inservice
I've done a lot of ACE work over the years but this is the first time this has ever come up.
I have a request from an application group where I have 3 rserver in the server farm but they want all traffic to only go to the first server unless that server fails. If the first server fails, only then do they want traffic to go to the 2nd server instead and if that fails, then traffic goes to the 3rd.
I've read through the documentation but haven't figured out a way to do this. What to do this type of failover configuration?
Physically, it's like this. The RED line denotes a boundary, and pretty much anything North of that is not accessible to us, we simply have a L3 trunk between our switches and "their" switches (S3/S4) and talk using EIGRP.
There are other servers in the top tier, some that also require load balancing, some that don’t. Typically, I want to load balance HTTPS requests from the internet, to one of the 3 servers in the top half.
I’m not sure what mode to select, routed, one arm? What about placement of the ACE? At the moment, I’ve just configured 1/1 on it and made it part of the MG MT VLAN, it's S VI exists on the S1/S2 switches, so I’m open to change as it's still all in the lab.
I would just like to double-check a point with the forum on licensing on 4710 Appliance.If with version 4.2 and above 2Gbps Bandwidth licence is required, the output of the sho license status should be?
What is the best way to load balance traffic between an FWSM and ASA 5520? Both are attached to a 6509-E (in seperate VLANs). The problem is the FWSM doesn't support any dynamic routing protocols (in multi context mode). So with my limited knowledge I don't see a way to do this.
Is it possible configuring load balance with three intefaces, in my router with the following features?I have three ISP, and would like balance the traffic ... Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(2)T1, RELEASE SOFTWARE (fc1) Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FTX1613AH8D 3 Gigabit Ethernet interfaces 1 terminal line 2 Channelized (E1 or T1)/PRI ports 1 Virtual Private Network (VPN) Module DRAM configuration is 64 bits wide with parity enabled. 255K bytes of non-volatile configuration memory. 250880K bytes of ATA System CompactFlash 0 (Read/Write)
I am using 192.168.1.1 as database server in head office. my branch user are more than 500. all user hit at 192.168.1.1 for database. Now i want to NAT with application server 192.168.1.50 and 192.168.1.51 with load balance As some user hit 192.168.1.1 form branch but traffic go to 192.168.1.50 and some users traffic go to 192.168.1.51.
I want to do it in My core router (Cisco 3845) in Head office. How i do these two things ?
I have problem with VPN and Load Balance at the same time.VPN (Gateway to Gateway) between two RV042 routers is working fine with only one WAN or two WAN's with Smart Link Backup. If i switch to Load Balance communication through VPN is almost impossible.
I have postgres server (port 5432) in first location and clients in another. Clients cannot connect to server or lose connection after while. This is example, but every communicaton except ICMP over VPN with Load Balance enabled is faulty (file sharing, RDP...). Everything works fine using public IP and port forwarding or VPN with only one WAN.
If i understand it correctly Protocol Binding should affect only "normal" communication (outside of VPN), but it looks like VPN communication is also divided between WAN1 and WAN2. Of course this cannot work this way because VPN works only with one WAN.
Another question - is it possible to bind communication TO selected target port with RV042 Load Balancing to selected WAN?
i need to know how many links i can using with load-balance on the same router ? i have router cisco 2901 , 3 providers , every provider having 4 links can i load balance between 12 links ? i am using static route
What is the load balance method of 3750 port channel ( by source ip , or by source mac ) to diver traffic to paths? I have tried to use 10.242.104.101 and 10.242.104.102 as source ip, it will travel to the same link (G0/1) within one port channel (G0/1+G0/2). Howerver, if I later use 10.242.104.109, then this time it will traffic to G0/2 link. What's the concept behind.
I want to split my traffic between two ISP's. I want all traffic to pass over one connection EXCEPT my VPN tunnels, which I want to use the second ISP. How should I set up (protocol binding?) to accomplish this? (I have run into various problems trying to load balance all traffic. So I am trying to "partition" traffic.)
I have set up an RV042 v1 and v3 both in Load Balancing mode. Set in Router mode.I want one of the WAN ports to be preferred so I added a static route to 0.0.0.0 metric 5 to that WAN.Sometimes the route shows in the routing table and sometimes it goes away!!
I've finished a part of the configs on above equipments, please refer to the attached diagram.And I'm making a test in order to achieve the below features:
1. By default, packets from PC1 go out through ISP 1. Packets from PC2 go out through ISP 2 2. When ISP 1 is down, packets from PC1 changed its way to ISP 2 through the 2800 router. And when ISP 2 is down, Packets from PC2 changed its way to ISP 1 through ASA 5510.
We want to us an ISA570 and load balance between two isp connections, two of our switches will be standalones and not connected to one another. One switch will be for data and another VOIP/Data. The ISA will also do NAT and we need to make sure that the VOIP network can get out to the first isp. I assume we will need a static route for that to make sure it goes out the right isp. I just don't know if routing mode needs to be enabled in order to specify a static route, because I heard you can't have NAT and do routing mode at the same time.