Hi,I have recently upgraded one of our pixes from 6.3 (4) to 7.2(1) the unit is a 515UR with 128MB memory.However since I have upgraded I have notices that the CPU usage has ramped up contatntly around 25% and sometimes around 40% for a consisera...
Hello,There's an example at Cisco.com how to provide a Direct Access to Real Servers behind CSM module, and I have to configure the same but with CSS which is different in configuration.I'm using CSS11501 for LDAP load-balancing, there are just two s...
Hi,We have 2 css in our network one we use in production and other in a testing enviornment. each has one ssl module. we dnt run them in failover mode. but if the prod fails for some reason we use testing to connect. now w have trouble loading the ce...
Hi Guys,We're evaluating the IOS Server Load balancing feature (in dispatchmode) on a 6509 and we've encountered a problem using the HTTP probe feature. The probe remains in the TESTING state and will not change to the OPERATIONAL state. Is this pro...
Hello,We have an application which uses HTTP chunking which as far as I know supports multiple get requests from the server with one 200 OK. This reduce the overhead and is considered to be more efficient.The problem we are facing is that with the CS...
Configuration of load balancer is attached. In this config we have defined the application as SSL application as per customer's requirement of stickiness. For SSL we need to give port 443 or any other defined in config. Customer is asking that port i...
Hello!I have a question.CE has only one default static route configured, however the output below show that it has 361 cached routes:#sh ip routesDestination Gateway Netmask---------------- ---------------- ----------------................
I have a question about the dispersion ratio on Local Director.Network environment is as follows,- one virtual server named "webapsv:80:0:tcp" - two real server named "webap01:80:0:tcp" and "webap02:80:0:tcp" two real server are always up, working- ...
CE 566 point to intranet proxy,that allow CE 566 ip address and port 80 going out to internet.ASA send the radius authentication to CE 566 for URL filtering by Websense.When user Internet Browser manually set the proxy setting it work fine.But when r...
I'm trying to use the management interface for TACACS requests, however, it always uses one of the circuit interfaces, I can see this on the FW as the source IP, tried to add a route for the TACACS server to the management interface but it says "The ...
I typed the config from our working 11503 7.10 CSS into a new 11503 8.10 CSS. Show Run for each is identical (see attached). When I swap-in the new CSS I get "Page not found" from the VIP, and all the 8.10 CSS will do is bridge me to the real server...
HiThis may be difficult to explain but I will try.I have numerous HTTPS clients coming into a VIP, hitting a 443 content rule on port 443, hit the SSL module etc then they are load balanced to one of three servers on port 81. Now, say one of the 3 s...
I am wondering where would we be using this command application ssl.CCO docs says use it if you want to take advantage of the ssl session id stickiness reuse and multiple ssl modules.However I am not using both these features I mean single ssl module...
Recently I have been logging the following error messages on my CSM:Oct 17 14:17:02.277 CST: %CSM_SLB-6-RSERVERSTATE: Module 4 server state changed: server x.x.x.x:443 in serverfarm 'WEB_SEAL2' has reached configured inband health retriesOct 17 14:1...
