If a CSM receives a "Destination Unreachable - Fragmentation needed and DF set" ICMP message, does it pass the packet along, after changing the destination address, to the real server that sent the offending packet?Thanks in advance.
I am trying to setup a CSS w/SSL module for a company with 1 public IP and 3 internal Web servers (Time Management, Exchange and a employee portal) that require SSL connections. I am NATing all 443 traffic to a CSS VIP which is referencing a SSL-PRO...
Hello, I'll looking for some info on how to source nat inter site requests on the CSM. At present I have two servers on different layers of my platform.Server A with address 192.168.1.1 & server B with address 192.168.2.1 both are connected to differ...
Hello,My client is asking if there is a best practices for deciding on what method of keepalives to use. I have search all of Cisco for this type of document or discussion. Is there such a guide in deciding which methods to use based on certain confi...
We are running a CSS 11501 with version 7.10 Build 305. I have a source group set up to associate outbound connections with the VIP of the inbound connections. This works perfectly for every protocol except for udp/161 and udp/162 which are not tra...
I have a CE-560 that just a while ago worked just fine. It had CDN V3-0-2. I decided to load ACNS 4. When I booted the device I got this message below-Now I set the device to then boot to flash, hoping I could just recover the OS from there. But rega...
Two questions.1). If the CSS marks a flow for clean-up due to matching the idle timeout value, and then the flow becomes active again before it is reclaimed...what happens? Is the flow still subject to cleanup if the threshold is met (25% of availabl...
We have two CSS 11150s running ap0500066s and working fine. As part of a project, I need to get another CSS onto the network and working before I take down one of the original CSSs. The third CSS now has the new config on it but the software level ...
Im using C6K and CSM for load balancing and an SSL module for https termination. That means clients can access the serverfarm through https/http and compare response time values.What should be the expected delay generated from SSL(https) compared to ...
can someone help explain what the following command is used for under the vserver command mode:"ssl-sticky offset 20 length 6"The complete config is:vserver xxx-SSL virtual x.x.x.x tcp https vlan 100 serverfarm xxx-SSL001 ssl-sticky offset 20 len...
Hi there,We currently plan to use a URL filtering method to block bad sites. Our organisation is a school board of about 75 schools, 30000 users and 5000 computers. Our internet link is 10Mbit Burstable to 20Mbit. We use a 565 cache engine with ACNS ...
I am having some issues loadb alancing across 3 servers running Outlook Web Access 2003 using HTTPS. I don't have an SSL module but was given the idea that layer 3 or 4 load balancing might work. When a connection is established to the VIP ip addre...
I got the SSL initiation setup working with the backend-server setup. The cleint certificate is checked via the CRL because there is CDP information in the certificate.However we like to validate also the servercertificate. When we use a ssl-server c...
I am investigating resources for a new application that must have sticky set. I'm looking att counters for sticky and are a little confused. See following info.sho mod csm 5 sticky group 16group sticky-data real timeou...
