What is the equivalent of the command "show flash" in IOS for the CSS11503 as I would like to view available flash space on the CSS11500 series load balancers?
View 3 RepliesWe have a CSS11503 that is currently being used to accept incoming HTTPS and SSH connections on a specific VIP and then PAT those client connections. I understand that it also PATs the server initiated connections. [code]
View 1 Replies View RelatedI am trying to upgrade a router 2811, the flash has 64 mb and currently has a IOS 32 mb, but require update it with a IOS 37 mb.
What should I do?, I cannot have the two ios in the flash.
CSS11503 that has a SAM module having a 99-100% utilization. Can this affect the services if both the accelerator module cpu peak to 99%.
Kindly see below logs:
LPHGT11# show system-resources
System Resources for 1/1:
Installed Memory: 268,435,456 (256 MB)
[Code].....
How can you check if balance ACA is enabled in CSS11503? How can you see also if the content switch(CSS11503) is load balancing using balance ACA? "show load" command does not show it.
xxxxxx# show load Global load information:
Reporting:Enabled
Calculation method:Relative Step Size:Dynamic Configured:10 Actual:1280
Threshold:254 Ageout-Timer:60 Teardown-timer: Configured:20 Actual:20
Service load information: Average Average Peak Average Service Name Load Number ResponseTime Response Time ----------------------------------------------------------------------- DNS1 4 8999 33972 DNS2 4 8884 28254 SSH-WPHGT11 2 0 87509 WPHGT11 2 0 0 def-gwy-server 255 0 0 fe1-gw1-radius1 2 0 0 fe1-gw1-radius2 2 0 0 fe1-gw1-wap-8799 8 15344 662337 fe1-gw1-wap-9200 2 [Code].....
I want to upgrade IOS on 1811 from 12.4(11)T3 to 12.4(15)T16.
As a standard CF size in the 1811 is 32 M, so I have to free some space.
Here the strange things starts.
dir issued on the router shows thet ther is no image on the flash!
dir
Directory of flash:/
No files in directory
31940608 bytes total (12771328 bytes free)
sh ver shows that
uptime is 19 weeks, 2 days, 9 hours, 22 minutes
System returned to ROM by power-on
System restarted at 15:21:30 EEST Tue Jul 26 2011
System image file is "flash:c181x-advipservicesk9-mz.124-11.T3.bin"
The other strange thing is that some space is allocated for something!
(flash size) 3194060 - 12771328 (free) = 19169280 (space allocated to ???)
Just now router is running IOS c181x-advipservicesk9-mz.124-11.T3.bin The size of this IOS is 19 155 816, that is approximately equal to the size that allocated to something invisible.
fsck flash and format flash doesn't work. Bug Toolkit doesn't show any bugs similar to my issue.
I’m wondering if there is a way to configure CSS11503 running 8.10 so that the servers in the content rules can see the client port number?The servers can see the client IP, but not the port!! It seems when forwarding packets to the servers in the content rule, the CSS uses a new high-number port when communicating with servers.
View 2 Replies View RelatedI just received a 1812 model unit flash memory C class.
I cannot free the space from CF; after format, I receive the same amount of space:
Cisco-1812-II#show flash:
14450688 bytes available (17489920 bytes used)
Cisco-1812-II#format flash:
Format operation may take a while. Continue? [confirm]
Format operation will destroy all data in "flash:". Continue? [confirm]
[Code].....
I have two CSS 11503 in my network, recently we had configured sticky with advanced-balance arrowpoint-cookie.
The sticky is functioning but we found our server's private IP in the IE cookie ARPT box.
Is there any way to hide ARPT info? Below is an example configuration of my CSS and attached screenshot is Firefox cookie info.
content 5301
add service 172.18.71.77_5301
add service 172.18.71.77_5302
[Code]......
I know the CSS is too old but I have one in production environment and I was asked if it is possible to CSS to make NAT from inside addresses and translate them into one external IP address to diferent kind of communications, for example: 172.16.4.9 and 172.16.4.10 (inside addresses) should start connection to external IP addresses destinations 50.50.50.50 / 60.60.60.60 70.70.70.70 / 80.80.80.80 and so on, the default gateway to those Servers is the CSS and I would like to know if it is possible that all connection to external world to be translate into one IP address 172.16.4.100.
My CSS is 11503
Version: sg0810106
The installation of an ACE-4710 throughput upgrade license licence (ACE-AP-02-UP1) failed with an error message :CH01AC03/Admin# license install disk0:ACE20111213081741975.lic.Installing license... failed: No space left on device. [code]
View 4 Replies View Relatedif there is a Flash Memory upgrade option for the ACE4710 that they have.He says he needs more memory so that he can have two images on flash at once. From what I can find, there does not seem to be an upgrade option to increase the flash from the 1 Gig that comes with the platform.
View 1 Replies View RelatedI have a problem in the ACE 4710. In view of the connections of a web environment. When I view connections on Config> Operations> Real Servers, Conns column values appear very high connections (Example. 1606317769078).Already in Config> Operations> Virtual Server the number of connections appear normal. Version 4710 ACE Device manger A4 (2.1a)
View 1 Replies View RelatedI want to deploy a high availability solution for web servers in two data centers. In the primary data center I have deployed a group of web server and I want two deploy additional servers in a secondary data center for disaster recovery and high availability. Reviewing the documentation, looks like the GSS4492 is the solution for my company needs but I am not sure if I have to implement just the GSS or if I need a ACE4700 integrated with the GSS?.
View 1 Replies View RelatedThis is the error message I am getting on our ACS 5.1 appliance - is there anyway to purge the database or compact the file?
View 1 Replies View RelatedACE20 module with A2(3.3)I have tried to config a NAT-pool with two adresses, but only one is used.
View 6 Replies View RelatedI have a pair of ACE30 in Active/Standby mode. I can ssh to all active contexts. I can also ssh to all standby contexts except one.
View 6 Replies View RelatedThe below is the display that I get on the screen when i boot the device.There are two error's one is when the daughter card is found and device give us login access after which it reboot’s. The second is stated below (this is a screen copy of the error)
INIT: version 2.85 booting/mnt/cf/TN-CONFIG on /TN-CONFIG type ext3 (rw,sync,loop=/dev/loop0)/mnt/cf/TN-CERTKEY-STORAGE on /TN-CERTKEY-STORAGE type ext3 (rw,sync,loop=/dev/loop1)/mnt/cf/TN-LOGFILE on /TN-LOGFILE type ext3 (rw,sync,loop=/dev/loop2)/mnt/cf/TN-HOME on /TN-HOME type ext3 (rw,sync,loop=/dev/loop3)/mnt/cf/TN-COREFILE on /TN-COREFILE type ext3 (rw,sync,loop=/dev/loop4)insmod: error inserting
[Code]...
I know that CSRs cannot be generated with multiple names, but if the SAN is added after the cert is ordered from Geo Trust, Veri sign, etc. can the CSS support using the cert?
View 1 Replies View RelatedI'm working on a small scale Cisco WAAS deployment. I want to know if it's possible to use the entry level Cisco WAVE-294-K9 as Central Manager.Also about licensing, does this appliance model come with the enterprise level license
View 2 Replies View RelatedDo you know if it is possible in ACE 4710 appliance to configure a SIP TLS ?The SIP probe we have in the configuration guide it is only for clear text. for Lync 2013 we need to establish first a TLS session and then within it, send an SIP request..IS it possible in any version? I tried also to configure a HTTPS probe but it fails as it sends a GET which the Lync SIP server doesn't understand.
View 1 Replies View RelatedI want to use the ACE blade in CAT6500 to loadbalancing SYSLOG events towards (SIEM) collectors. Servers and network devices will sent there syslog messages to different collectors after being loadbalanced by ACE. I was just wondering, since a lot of clients are going to sent there complete syslog events to the VIP and thus introducing a high connection rate. (+/- 200.000 CPS) According to the specs, the ACE blade has a limitation of 325.000 connection per second. I suppose this is a limitation at device level. (not on a per context basis, and does that include both TCP and UDP packets?) Could the UDP BOOST feature might come in handy allowing very high rate UDP syslog packet loadbalancing?
View 2 Replies View Relatedif ACE SM in L2 mode need the default gateway? We're running v. 3.2a.
View 8 Replies View RelatedWe are evaluating the one-arm design for the ACE 4700 and need some clarifications:
1. Are there any limitations in the one-arm design and the SSL offloading
2. Can the ACE be configured with an IN and an OUT vlan to the router
CLIENT -> Router -> ACE IN -> ACE OUT -> Router -> Server Vlan
so that the SSL and the clear text traffic is in a separate Vlan?
3. In some sample configuration i saw SNAT configuration on the ACE to modify the client IP. This i assume is for instructing the return traffic from the server to go through ACE? Using SNAT we eliminate the requirement for NAT or PBR on the router? Will i still be able to insert the client IP address after the SSL offload?
Will ACE 4710 support for IPS features?
View 1 Replies View RelatedWe have multiple CSS 11500 clusters. We have found that on all of them, if you try to open a session on any port to an IP address on the backend of the CSS, the CSS will complete the SYN-ACK-ACK session with the client. This happens regardless of whether there is something on that IP address or not.
Coming from any IP, if I try to telnet to ANY IP on the 10.2.2.0 subnet (whether or not there is an actual server on that IP) on any port (whether or not that port is open or not), the CSS will complete the initial connection. I have verified this using telnet to numerous ports and viewing the transaction in a packet capture.
Is there any way to shut this off? This is causing some licensing issues for our security folks that use a vulnerability scanner licensed on number of IP addresses.
One of our ACE-20's crash recently with little info as to why - fortunately it was the FT standby module so service wasn't impacted but obviously keen to determine the cause of the crash, and potential resolution.
Running A2 (3.5).
last boot reason: NP 1 Failed : NP Core Reset - Cause Unknown,There is nothing obvious from the switch perspective:
Apr 17 14:52:35.775 bst: SP: The PC in slot 9 is shutting down. Please wait ...
Apr 17 14:52:45.780 bst: SP: PC shutdown completed for module 9
510497: Apr 17 14:52:55.781 bst: %C6KPWR-SP-4-DISABLED: power to module in slot 9 set off (Reset)
510498: Apr 17 14:57:58.277 bst: %DIAG-SP-6-RUN_MINIMUM: Module 9: Running Minimal Diagnostics...
[Code]...
I need to setup new ACE 4710 device , after referring to "Establishing a Console Connection on the ACE" i had managed to set up initial console connection. During installtion i had configured vlan (default vlan 1000) , interface ip adess& subnet mask.
Post initial config i understand i should be able to open' Device Manager GUI Login Window' but it is not opening.I also need inputs on setting 4710 for the telnet connection
is there a way to reset/clear a particular context's configuration?
I see there is a 'wri erase' within a context, but no reload/reset - neither from the context itself nor from the Admin... puzzling...
I dont want to reload an entire blade just to clear one of the context's configs.
Any info about Exchange 2013 and ACE SLB functions. I know they changed to RPC over HTTPS on exch side and few other items changed as well. Any feedback from a production deployment.
View 1 Replies View RelatedACE A2(3.4). Is it possible to set a rate-limit connections per sec from any source IP. For example, if a client is trying to GET a web page 10 time per sec I will send a reset or drop that connection.
View 1 Replies View RelatedHow do I apply the connection parameter map in a configuration like this to the service policy int827? Do I need to define the traffic? Can I specify only one source destination flow to apply the set tcp half-closed TCP normalization against?
policy-map type loadbalance first-match wss-1100-l7slb
class class-default
sticky-serverfarm sticky-srcip-1100
policy-map type loadbalance first-match wss-1101-l7slb
class class-default
sticky-serverfarm sticky-srcip-1101
[code].....
How to change host name in CSS11500 Series. I cannot find any documentation for that matter.Is there any impact in the system to change the host name?
View 3 Replies View Related