Cisco Application :: Active CSS 11501 Telnet And Console Not Working?

Mar 31, 2013

implementation of the cisco CSS 11501 boxes available as spare on our site into production for an application evry thing worked as expected. i was able to telnet the active/master box and was able to console both master and backup box from the console port.however a week post the activity im faced with this weird problem where im not able to take console or the telnet access of my primary/active box.The boxes are working in BOX-to-BOX redundancy and now im not able to telnet or console my active/master box. The telnet and console window prompts me for username and password and after entering the credentials nothing happens. no prompt or no error message is displayed.

The telnet primary authentication is via tacacs and secondary is via local. however for console im not using any method for primay authentication and local for secondary authentication. however i can successfully console my backup box. below are my obsrvations 1. the left and right status LED on the active CSS box is OFF.- it means my CSS 11501 failed and has no power. 2. upon firing the rcmd command with show line command on backup box i see that the telnet sessions and console session is established with the master box3. the redundancy state of the active box says it is master and has not changed state since my last activity, no application issue reported, all the services are active on the active box and also i can ping the active box ip address from my backup box over which box to box redundancy is established. This confirms the active box is functioning well 4. i initially thought the telnet sessions are not getting cleared, however the show line cmd with the rcmd cmd on the backup box confirms this is not happening. now im stuck as the active box cannot be accessed at all via console or telnet. i was thinking of below steps to be carried out.1. to failover the boxes and make the backup as master2. then try to take the faulty box off the network and troubleshoot (are there any other commands that i should use to troubleshoot)3. if nothing works try rebooting the box and check
NOTE: the software running is version with standard feature set. we are not using cvdm or the CSS GUI. we could access the css initially on CSS gui and that is also not working now.

View 1 Replies


Cisco Application :: Clear Stickies On CSS 11501 By VIP?

Jan 30, 2012

it's possible to clear stickies per VIP?  The firmware is 08.20

View 2 Replies View Related

Cisco Application :: Slow Download Via SSL In CSS 11501

Nov 27, 2011

I have 2 CSS 11501 providing load-balancing rules and SSL termination. When CSS is used for downloading through the rules of SSL, the rates I get are quite lower than those obtained when the download is done either directly on the machine or by using the rules of HTTP. Is it normal? Is there anything that canspeed up this process?

View 2 Replies View Related

Cisco Application :: How To Enable Snmp On Css 11501

Feb 13, 2012

i need to enable snmp on Cisco CSS 11501. 

View 1 Replies View Related

Cisco Application :: SSO (Single Sign-on) Through CSS 11501?

Nov 22, 2011

I am load balancing Terminal Server Windows 2008 sessions with an CSS 11501. The code version is sg0750004 ( I am trying to establish a Terminal Server session with Single Sign-On (SSO), but without success. Normal login with Username and Password on the TS are functionning, but never SSO session. The environment is: 10 Windows 2008 Terminal Servers (NTS1, NTS2,NTS3...). In DNS I have a host A named TS with IP for balanced CSS. The problem I see is that the client PC opens a TS session to "TS". then dont work SSO, but if client PC open a TS session to NTS1, working fine the SSO I am not sur if we can do something on the CSS.

View 3 Replies View Related

Cisco Application :: How To Test CSS 11501 Failover

Aug 7, 2012

I have 2 CSS, 1 as primary and 2nd as standby. I configured the standby CSS as my old standby CSS box and now wanted to test the faliover. I am not aware of how to test it in. ny how i have cr for that.

View 1 Replies View Related

Cisco Application :: CSS 11501 Not Dropping Flows If Service Is Down

Oct 14, 2012

some misconfiguration (?) may be the reason for an undesired behaviour we are experiencing with our Cisco CSS 11501s. Balancing mechanisms work fine, however if a service transitions to the "down" state, the corresponding flows remain "alive" leading to a temporary outage of our service. Subsequent client requests are still being sent to the "down" frontend which is unresponsive.

View 4 Replies View Related

Cisco Application :: CSS 11501 Load Balancing With X-forwarded For Address

Sep 15, 2011

We have a pair of CSS 11501,Currently it is using source ip for load balancing and 5 servers as backend , however we have users loggin in using http and based on its source IP (ISP PROXY) , it is forwarded to SERVER A.However, we have a SSL page and when the client switches over to SSL , it is forwarded to SERVER B/C/D/E  based on its source IP ( REAL CLIENT IP) .This will cause the user to be terminated as the 5 servers are independent and not running in a cluster.
Is there any way that we can use the X-Forwarded-For address to load balance so that when users loging , they are sent to SERVER A (Based on X-Forwarded-For Header IP which translate to REAL CLIENT IP).This way we are able to also send it back to the same server when it uses SSL.I believe that we should be able to load balance using X-Forwarded-For IP or to rewrite the X-Forwarded-For IP into client source IP.

View 3 Replies View Related

Cisco Application :: 11501 Ftp Server Setup Using Non-standard Port?

Dec 13, 2011

we would like to setup FTP server over CSS where our member sever use non-std-port to open both control/data channel (i.e. 6370 as ctrl and 6369 as data this case.) but seems we only get Passive mode FTP mode work only but not for Active mode FTP case for data channel establishement for server back to client..
#  sh ver
Version:               sg0820501 (
Flash (Locked):
Flash (Operational):
Type:                  PRIMARY
Licensed Cmd Set(s):   Standard Feature Set


View 3 Replies View Related

Cisco Firewall :: PIX-515 - Way To Console / Telnet

Jan 27, 2013

I have an early model PIX-515 that hasn't been used in a long time but I want to get it working again in a lab environment.  I am at loss right now on how to get into it though. 

I've tried connecting from the PC's serial port to the units console port using Cisco's blue cable with no avail.  All I get is a cursor but no response.  I've tried using 9600,8,none,1,none as settings and I can sucessfully console a Cisco 1700 router with those same settings in Putty no problem, but it doesn't work with this Pix.   I've also tried using other possible common speeds like 1200,1400,4800,19200, 38400, 57600 and 115200 in case the firewall was set to use those and that didn't work either.


View 4 Replies View Related

Cisco Application :: CSS 11501 - Wildcard Certificate With Subject Alternative Names

Sep 6, 2012

I generated a wildcard certificate for my company type *. [URL] in a CSS 11501. For the site [URL] worked fine, for the site [URL] didn't worked. I read on the web that should generate a wildcard certificate with subject alternative names. Is it possible in CSS? how can I do it?

View 5 Replies View Related

Cisco Application :: CSM Active / Active In 2 Redundant 6500s

May 7, 2007

our application team is mandating, that the solution we should come up with for SLB, should support Active/Active mode of SLB operation.
My question, is this mode of operation supported/accredited by Cisco, and what is the draw back from the traditional active/standby.

View 2 Replies View Related

Cisco Application Networking :: CSS 11501 Reboots When Making Change To Global Keepalive?

May 17, 2010

I've got an issue with a CSS 11501 where, if *any* change is made to a global keepalive (active), the device reboots. The code is I'm unable to search the TAC archive or I would've gone there first.

View 2 Replies View Related

Cisco Application :: Content Switch 11501 / 11503 Abnormal Interface Link Down?

Mar 27, 2013

I have 2 pair of 11501 switches and 1 pair of 11503 switches on 3 sites(LA, China, Taiwan).Each site has a pair of 1105x switch running as redundancy between them and is a standalone which will not interact with others.Recently a series of interfaces(ports) down happened to every active 1150x switches without any reason and log.Especially today, it happened to active switches at 5:39 AM meanwhile on 3 sites.

View 3 Replies View Related

Cisco Application :: Sample Command Output Of Show Chassis Inventory For CSS 11501 / 11503 / 11506?

Oct 30, 2011

I am trying to get a sample command output of "show chassis inventory" for:

CSS 11501
CSS 11503
CSS 11506

View 1 Replies View Related

Cisco Switching/Routing :: 6500 - TACACS Doesn't Work Via Telnet / Works Via Console

Apr 18, 2013

I have a pair of OLD Cat6500's running CatOS:
WS-C6509 Software, Version NmpSW: 7.6(16)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Dec 22 2005, 16:37:19
System Bootstrap Version: 7.1(1)
System Boot Image File is 'bootflash:cat6000-sup2k8.7-6-16.bin'
System Configuration register is 0x2
I know these are no longer supported, but I have to ready them for migration. Recently a problem began with these switches.  What happens is that when I telnet to them, I cannot authenitcate via TACACS.  This works fine for all our other IOS equipment, just not for these 2 switches.  The error is:" % Error in authentication"  and then I get kicked back to the login prompt.
The odd thing is that when I connect to the switch via the console port, I can authenticate fine with TACACS.
CMS> /c 14


View 2 Replies View Related

Cisco Application :: Cannot Telnet To ACE4710

Sep 27, 2011

I have a problem, recently I can not telnet to the ACE 4710, the ACE version is A4(2.0). I can enter by web and console but not for telnet.  I try to give more resource to the admin context but it doesnt work.

View 1 Replies View Related

Cisco Application :: Cannot Telnet To ACE 4710 After Upgrade To A4(2.3)

Jun 29, 2012

I have a pair of ACE 4710s with 12 contexts sharing the load, running A4(2.1). esterday I upgraded one of them to A4(2.3) now I cannot telnet to the Admin context.Pings ok. I can telnet to other contexts on the box and everything seems to be working ok   when i do a " sh telnet" comes back with
No Session Information is available
sh telnet maxsessions
telnet maxsessions 16

View 1 Replies View Related

Cisco Application :: ACE 4710 Redundant Appliance Telnet

Jan 21, 2013

I have a pair of ACE 4710's that I am deploying within a datacenter.  The primary and secondary ACE appliances have identical configurations except for the IP addressing and priorities for FT.  The FT peer is going into a TL error state. 
On the primary ACE appliance, I am able to ping and telnet from/to it without any issues.  All of the routing works as it should and everything is seen in the ARP table as it should.  The secondary appliance is able to ping everywhere, but telnet out of or into that appliance does not work.   
I am able to see the IP addresses in the arp table and can successfully ping end to end from the secondary device, just unable to telnet into or out of it.  When I try to telnet out of the secondary device, it reports that there is no route, even though the IP's I am trying to telnet to are directly connected and those interfaces are up and working (otherwise ping would fail).  The exact same filters (access-lists, service-policies) are configured in the exact same format and applied to the exact same interfaces. 
I tried removing all of the fault tolerance configurations and just created a Layer 3 vlan interface for management and I am still unable to telnet into or out of the appliance.  This is not a complicated setup and I have to think there is something obvious that I'm missing, but I'm hung up on the fact that the config's are almost identical while one works exactly as intended and the other reports no route to host for a directly connected interface.

View 2 Replies View Related

Cisco Application :: 4710 - Cannot Telnet Back Into Standby ACE After Upgrading To V4(2.1)

Aug 10, 2011

I am in the process of upgrading from v3.2.5 to v4.2.1, i have been follwing the upgrade/downgrade guide forv4(2.0) for my redunanant pair of ACE 4710.everything ok, following procedure after the standby is reloaded and comes up to standby-warm, Iget the license incompatabilty message on the primary.but I cannot telnet back into the standby, i can ping it ok though.I am loathe to go any further, and do the 'ft Switchover all' and reload the primary incase I cannot telnet back into the primary when it comes back up.

View 2 Replies View Related

Cisco Application :: Disable Telnet For ACS 1120 Appliance Version 5.0

Feb 5, 2012

disable telnet for ACS 1120 Appliance version .is there anway to do it , not able to login via telnet and ssh it says wrong credentials but webgui is working fine with same user and password.

View 1 Replies View Related

Cisco Application Networking :: ACE 4710 Suddenly Stops To Telnet Admin Context

Sep 14, 2012

We are having issues with our Cisco ACE 4710, it suddenly stopped to telnet admin context.We are able to telnet another context from the same appliance, but unable to telnet the admin context. Is possible to pings the gateways from the other contexts, but we are not able to ping the gateway from the admin context.Actual we have 5 context with the minimum allocation is 10%.ACL and policy map allowing telnet and etc are enable and configured on the interface.

View 1 Replies View Related

SCP And Telnet ( Not Working?

Oct 24, 2011

1.SCP Not Working on my Linux Box (Fedora release 7 (Moonshine))to Fedora fc11.i686 running box[CODE]

View 5 Replies View Related

Cisco Application :: Show Active Mac Pool On ACE20?

Oct 26, 2011

I would like to add a vlan to a second context on a pair of redundant ACE modules.  As soon as I open up that shared vlan box we will expose ourselves to mac conflicts until the shared-vlan-hostid commands can be implemented and the module reloaded.  Adding the commands is not a big deal but I may not be able to schedule a reload until next week.  What I would like to do is confirm the mac pools in use by each module right now. My hope is that they grabbed unique pools when they last booted and a conflict will not be a concern now. 

View 3 Replies View Related

Cisco Application :: ACE 4710 - Active / Passive Failover?

Nov 14, 2012

We have an ACE 4710 that has two web servers in an active/passive scenario.  The issue is that if node 1 fails and node 2 takes over connections to node 2 stay active even if node 1 becomes available again.  Is there are way to ensure that node one is not placed back into service if it becomes available again.
how active/passive failover shoudl be configured, so I can make sure I have it set up correctly;

View 5 Replies View Related

Cisco Application :: ACE 4710 Active Using Virtual Partitions

Feb 14, 2012

I am completely new to the Cisco ACE devices but have been asked to look at deploying them.  I have read the ACE virtual partioning paper which covers the ACE module, and it mentions the following;"In an active/active high-availability design, both the primary and backup Cisco ACE modules are active simultaneously. The active virtual partitions are distributed across both modules, such that approximately half are active on the primary module and the remaining are active on the backup module."does the same resilience model work the same using the Cisco 4710 appliances?  I.e. can we split virtual partions across two physical devices thereby having an active/active scenario.

View 4 Replies View Related

Cisco WAN :: 3925 - Telnet Is Not Working

Apr 19, 2013

I have one router 3925 equipment DIRECTLY connected to the Router that needs to be accessed by telnet port 23.
Please find the attached config details.

View 6 Replies View Related

Cisco Firewall :: Telnet / Ssh To ASA 8.2 Not Working

Oct 7, 2012

I am not able to telnet  or ssh to ASA running 8.2.5(33). [code] I am able to ping inside interface of the ASA. Telnet gets stuck at Trying

View 2 Replies View Related

Cisco Application :: GSS 4490 / Point Active Directory To GSS To Look Up Host?

Apr 27, 2009

I have a GSS 4490 but only want it to be authoratative for certain hosts.  Sysadmins don't want to lose control of their DNS records.How do I point active directory to the GSS to look up the host?I need to keep the AD domain as authorative for the DNS records, but to pass on DNS requests to the GSS for certain hosts.

View 2 Replies View Related

Wireless Console 2.0 Not Working

Apr 3, 2011

My Wifi internet was working fine 12 hrs ago; now I can only use it with wire.I uninstall 2.0 and install Asus wireless console 3.0 but still not working, Fn+F2 not working either.


View 2 Replies View Related

Cisco Application :: ACE 4710 Active Connections View Wrong In Web Manager

Sep 28, 2011

I have a problem in the ACE 4710. In view of the connections of a web environment. When I view connections on Config> Operations> Real Servers, Conns column values ​​appear very high connections (Example. 1606317769078).Already in Config> Operations> Virtual Server the number of connections appear normal. Version 4710 ACE Device manger A4 (2.1a)

View 1 Replies View Related

Cisco WAN :: Telnet Access Through Router 3925 Not Working?

Feb 18, 2013

i have 68 sites with Routers. On each site I have one equipment DIRECTLY connected to the Router that needs to be accessed by telnet port 23.

I have 15 off this sites that the access via telnet to the equipment’s connected after the routers are not working. These sites are using Router Cisco 3925. The other sites that are working are using Routers Cisco MWR 2921.

Both router models are running the same configuration with no filter on it.

The equipment’s after the routers are all accessed directly via telnet without the router. If the router is directly plugged to the equipment the 15 sites with Router Cisco 3925 are not accessed via telnet.

There is any bug related with the IOS version that Router Cisco 3925 is using?:

Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 15.1(2)T2, RELEASE SOFTWARE (fc1).ROM: System Bootstrap, Version 15.0(1r)M8, RELEASE SOFTWARE (fc1).System image file is "flash0:c3900-universalk9-mz.SPA.151-2.T2.bin"

View 5 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Command Set Policy Not Working On Console?

Nov 27, 2012

I configure my Cisco ACS5.2 using Command set policy and providing Shell access 15.I allow user only “show * ” command.It works fine with Telnet. User Group cannot execute any command apart from “Show * ”But when I connect the device using Console user group has full permission on the devices.I believe Command set policy is not working on Console. Is it normal behavior or do I need to update some changes in ACS or Network devices ?
My network device configuration is as below :
tacacs-server host 10.x.x.x key test123
tacacs-server host 10.y.y.y key test123
tacacs-server timeout 1
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+


View 1 Replies View Related

Copyrights 2005-15, All rights reserved