have a few questions regarding css

[kejeusa]

i have include a doc that has all my questions in red along with the sample config i'm building that will expand into ASR

if u have any suggetions on the type of sticky cookies i should use, load balance method or anything please let me know

also is there a method for assigning redundant indexes?

thanks for any help you can provide

[Gilles Dufour]

Answer to your questions:

#1 - if you need more vlan you need to configure them on the trunk with the command "vlan " on another physical interface with the command 'bridge vlan '

#2 - the ip redundant-vip as indicated by the name of the command is a VIP (virtual ip).

This is the ip used to group all the servers under 1 ip.

In redundant mode, you need to inform the CSS that this IP is also shared with a backup css.

You do this with that command.

The VR ip of the circuit is defined with the command "ip redundant-interface" that you also have in your config.

#3 - you can use whatever keepalive you want. They are there to test if a server is alive and able to receive traffic.

You can use ping, tcp, http, ....or nothing.

This is up to you.

The better is to match real traffic - so http.

But if you have too many of those, you can reduce the performance of the CSS has it will spend a lot of times sending keepalives.

Not sure about the circuit question.

You will have to explain more clearly.

Regards,

Gilles.

[kejeusa]

thanks for your answers.

i wanted to know:

1. if more than 1 vip in ip mode under circuit configuration can be used as redundant to address more than one owners content rules?

ex.

circuit VLAN1

ip address 10.0.0.1 255.0.0.0

ip virtual-router 1 priority 101 preempt

ip redundant-interface 1 10.0.0.254

ip redundant-vip 1 10.0.0.100

ip redundant-vip 2 10.0.0.101

ip redundant-vip 3 10.0.0.102

2. what is the purpose of creating this service listed below and what ip address does this refernce? (server, gateway, router) and where should it be assigned? (in ip mode under a circuit or to a owners content rules)

ex.

service CriticalService

ip address 192.168.2.1 <<<

keepalive frequency 2

keepalive maxfailure 2

keepalive retryperiod 2

active

[Gilles Dufour]

1 - you can have more than 1 vip under the same circuit and under the same virtual router

ip redundant-vip 1 10.0.0.100

ip redundant-vip 1 10.0.0.101

ip redundant-vip 1 10.0.0.102

2 - you can define a critical service for the virtual router.

This service is for you so important that if the CSS fails to ping it, it should failover to the standby device.

Usually this critical service is the default gateway.

3 - if you find my answers useful, please take a second of your time to rate them :-)

Thanks,

Gilles.

[kejeusa]

thanks for answering that helps a bunch.

last question

"Usually this critical service is the default gateway. "

which default way?

[Gilles Dufour · Accepted solution]

the default GATEWAY.

Where the CSS route all traffic.

The primary next-hop.

Gilles.