CSS11050 content protcol any problem

[moorthy1977]

owner TEST

content TEST_VIP

add service TEST1

add service TEST2

vip address a.b.c.d

protocol any

active

hi i want to configure above conf in content switch.but protcol any is not working.please suggest how can add both udp as well as tcp protocol in content find below Version

CSS11050# sh ver

Version: ap0500105 (5.00 Build 105)

Flash (Locked): 3.10 Build 33

Flash (Operational): 5.00 Build 105

Type: PRIMARY

Licensed Cmd Set(s): Standard Feature Set

Enhanced Feature Set

[Zach Seils]

What do you mean by "is not working"? "Any" is the default, so if you don't specify a protocol, the rule will accept both tcp and udp by default.

Is it that you don't see it in the config?

~Zach

[moorthy1977]

Hi,

Thanx for u r reply but it does not accepts the default config.

error is

CSS11050(config-owner-content[TEST])# protocol any

CSS11050(config-owner-content[TEST])# active

%% Protocol of TCP or UDP must be specified

defualt setting is not taking same error i am getting.

please let me know if any IOS related problem or something else.

[Zach Seils]

Do you have a port specified in your content rule? I didn't see one in your example above ...

If you need to specify a port, then you have to specify a protocol -- so you'll need two (2) different rules to support tcp and udp.

~Zach

[moorthy1977]

Hi,

Thanks for u r reply.

Please find the configuration.

if u can tell me how to go ahead with current config.

interface e1

bridge vlan 105

!************************** CIRCUIT **************************

circuit VLAN105

ip address 172.16.8.1 255.255.255.128

!************************** SERVICE **************************

service DNS-1

ip address 172.16.8.2

active

service DNS-2

ip address 172.16.8.3

active

!*************************** OWNER ***************************

owner DNS

content DNS-VIP

port 53

add service DNS-1

add service DNS-2

vip address 172.16.8.1

protocol udp

active

!*************************** GROUP ***************************

group DNS-Group

vip address 202.138.8.10

add destination service DNS-1

add destination service DNS-2

[Zach Seils]

If you want to allow DNS over TCP, you would need the following added to your configuration:

!

owner DNS

content DNS-TCP

port 53

add service DNS-1

add service DNS-2

vip address 172.16.8.1

protocol tcp

active

!

~Zach

[moorthy1977]

Hi,

My problem is solved.please find below config.I removed the command port 53 & it is taking protocol any.

content DNS-TCP

add service DNS-1

add service DNS-2

vip address 172.16.8.1

protocol any------well this is hidden while u take config.ican enter this command without any problem

active

thanks for u r your