HIIs there anyway i can block connection to a specific server in CSS serverfarm without suspending and retaining the existing connections to that server?Thanks Shanil
Hi, I need that one server can communicate with the VIP of other servers that are in the same subnet. I know that the solution is trough NAT, but at the moment I don’t have success.Can anyone help me? rserver host REAL1ip address 172.16.20.100inservi...
Good day,We have a situation where services are stopped on the real servers. The probes fail and we confirm the services are not running on the server. We cannot access the ports from the ACE directly. We can still however acces the VIP on the TCP po...
I currently have WAAS deployed in my environment. I would like to introduce wred to prevent sessions from overiding my network. However, my WAAS engineer thinks that using WAAS would pose a problem. Issue: At least once a week a user attempts to...
Dear All,I just want to validate the two attached CSS Design.Which of the two designs is recommended?What are the issues when having the CSS with 100Mbps uplinks and the servers with 1000Mbps? The L2 DMZ switch is 10/100/1000 supported.Thanks & Regar...
Hi,I have a very strange set up and need some help to get my config workingI have a ASA firewall with three VLANsVLAN 1 = InternetVLAN 2 = DMZVLAN 3 = Goes to ACEOn the ACE I have four VLANsVLAN 3 = Goes to ASA VALN 4 = Web Server TierVALN 5 = DB Tie...
I am trying to setup ACE in bridge mode. Network topology is as follows:1. ACE Gi 1/2 (client-side vlan) is connected to 3750 (vlan 40)2. ACE Gi 1/3 (server-side vlan) is connected to 3750 (vlan 50)3. Two real servers are connected to 3750 (vlan 50)4...
Hello,if i configure a secondary ip address on a primary inerface.How can i force some services to use this secondary ip address as source-address.For example, NTP, Tacacs, ... and so on.I am loooking for something similar to ntp source-interface on ...
I have been uploading PEM certs for some time with no issue...using the following basic configssl-proxy service CERT key mykey.pem cert mycertt.pemHowever I just uploaded a pcsk12 file and it appeared to upload fineunder #sh crypto file myfirstpcsk...
Hi,I have some question.1. Is ACE 4710 whether there has equipment failure bypass function?2. Real Server, whether there is a limit on the number? Server in the server farm whether there is a limit on the number? VIP whether there is a limit on the n...
If I need to change the RADIUS or TACACS+ servers IP addresses for the CM authentication, can I just make the change in the CM GUI page? Or I should access the CM using CLI and change the device to "local authentication" before changing the RADIUS / ...
I'm curious if anyone out there has had any experience using the ACE to load balance Lotus Notes traffic. The traffic is TCP 1352 but I'm not sure what the best way is to probe the servers. Would SMTP be the best option? What expect codes would I use...
