Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About pknoops
Stats
Member since
02-24-2002
192
Posts
88
Helpful
15
Solutions
07-19-2011
12:00 PM
Hi, We are currently beginning to roll out an ASA SSLVPN solution whereby we are using split tunnel. The issue we are now finding out is that our internal developers and qa teams have things like test.joe.com and dev.joe.com that do not resolve properly because there is nothing on the outside that resolves to those urls. When we were using the IPsec client and not using the split tunnel this was not an issue as everything when connected stayed internal. Is there any kind of dns workaround or would we have to eliminate the split tunnel approach to fix this. Thanks Pete..
... View more
Labels:
08-27-2009
05:38 AM
Ideally for redundancy you would need to connect the servers to an another switch and then the 2 redundant css boxes into the same switch. The code you are running is old and you would want to run the latest 8.20 code on CCO. http://www.cisco.com/kobayashi/sw-center/index.shtml go to the section Application Networking Services for the CSS code (WebNS)
... View more
Created by
pknoops
in Application Networking
in Application Networking
04-02-2008
08:57 AM
04-02-2008
08:57 AM
This error means that the chunk was saved to some sig block but can not be read from it. It could be because something happened to the cache, for example sig blocks were overwritten (FIFO). If the aggregation errors are few or occasional, these errors should not impact performance. Regards Pete..
... View more
Created by
pknoops
in Application Networking
in Application Networking
03-11-2008
07:28 AM
03-11-2008
07:28 AM
Hi, The message you mentioned is an indication that the APP session running on the CSS will connect to the remote peer running app in 10 seconds. This is just an indication and this message is normal. To avoid seeing this message, you need to reduce the logging of APP messages to 5 or lower. To do this, use the command "logging subsystem app level 5" Regards Pete..
... View more
03-01-2008
08:50 AM
Rafal, Let me see if I can comment by number here. First off, all of your comments on #1 are correct with the exception of mentioning the root CE. In straight transparent caching where you have a router and CE at a branch location running wccp, you do not need a root ce. This would be simply web caching to the internet. In #2, this is all correct. Root CE would be at the home location along with a CDM for CE and channel mgt. You would probably want to put another CE in the same location as the root so it will become the root CE in case of a failure. The only thing that is missing in this discussion is the use of a Content Router. This is where you have a coverage zone file on a Content Router. Basically what happens is a client requests content. All requests hit the Content Router first and then based on the coverage zone file, the client is then sent to the correct CE for content. This is the most complex use of ACNS. #3 is correct. In #5 you do not need wccp all the time when using preposition content. You could have a senario where a client his the CE in a proxy configuration where no wccp is used and grab prepostioned content. You are correct in the sense that wccp is simply an intercept senario which then sends the port 80 or 8080 type request to a content engine.
... View more
02-29-2008
07:17 AM
The only other thing I would recommend is connecting a keyboard and monitor to the device and see if anything comes up there. Part of the boot process of the WAE occurs first in the keyboard and monitor (like a PC) prior to moving to the console itself showing the rest of the boot process. If there is nothing else there, then a replacement is needed. Pete..
... View more
02-29-2008
06:56 AM
The WAE 600 series is a fairly newer box. What software was/is running on it. It can run ACNS, WAAS AND WAFS ? Based on that answer, you can build a boot CD and try doing a recovery with the CD. For ACNS, the recovery cd instructions are here: http://www.cisco.com/cgi-bin/tablebuild.pl/acns55-3des Regards Pete..
... View more
02-29-2008
06:28 AM
Hi Maurice, I believe that is the HW rev and not the Software version of the CSM. Just verify the show module output. The first number is the HW rev and the second is the SW rev like this: 7 0015.f998.a83a to 0015.f998.a841 1.8 <-- HW 4.1(5) <--SW Ok In any event, you are probably hitting bug id CSCsd07524. Regards Pete..
... View more
Created by
pknoops
in Application Networking
in Application Networking
02-28-2008
05:00 AM
02-28-2008
05:00 AM
Hi Shinichi, In terms of bpdu on the LD. You are correct in terms of the secure mode. Switch BPDU packets pass right through the LocalDirector unless interfaces are secured. BPDU's are only forwarded across the LD when the same VLAN exists on both sides of the Local Director. While this will work so long as either of the interfaces connecting to the switches contains the same VLAN, it is not a recommended configuration in dual LocalDirector situations. The VLANs may not reconverge in the case of LocalDirector failover, as the port identified for passing BPDU's is also changed at the time of failover. In regards to the CSS and spanning tree. You will not disable spanning tree on the CSS but we do have many customers set the bridge priority quite high so as to not have the CSS be the root bridge. In general, the LD is a bridge and the CSS is a switch with some routing capabilities. Regards Pete..
... View more
Created by
pknoops
in Application Networking
in Application Networking
02-27-2008
04:32 PM
02-27-2008
04:32 PM
Ansar, A source group or "group" is what you need to configure on the CSS in order for the backend servers to initiate a connection outbound on the CSS. It would be helpful if you could email me directly a piece of your config. Specifically I would need the "service" section in terms of which servers need outbound access as well as the content rules you have configured and the ACL section to confirm you are not blocking anything. As an example. If you had service pete ip address 1.1.1.1 active content pete add service pete protocol tcp port 80 vip address 2.2.2.2 active group pete_out vip address 2.2.2.2 add service pete active So what happens is when the service makes an outbound connection, the source ip address is now the vip address. When the return packet comes back, the CSS recognizes it and gets it back to the backend server. You can also apply a source group via an acl as another option. Regards Pete.. pknoops@cisco.com
... View more
Created by
pknoops
in Application Networking
in Application Networking
02-27-2008
11:48 AM
02-27-2008
11:48 AM
Dom, Yes, that is a bit confusing. Let me try to explain. So my assumtion now is you are running something like this: 3.0(0)A1(6.2) For the purpose of our conversation, this is considered ACE A1. When someone mentioned 2.0, the code will now be A2 as opposed to the A1 above. This is what 2.0 means. I am not completely sure as it's not released yet, but the first rev of 2.0 ACE would be 3.0(0)A2(1.0) (note the A2) Regards Pete..
... View more
02-27-2008
09:59 AM
Hi Joao, Unfortunately, the SCM's in the CSS are redundant only from a hardware perspective. They cannot be configured to take over from a "software" perspective when an interface goes down. I guess one potential thing to do would be to have a customer script with a keepalive to test ip connectivity and when/if that keepalive in software fails, have the script run the commands to take the SCM down. Regards Pete..
... View more
Created by
pknoops
in Application Networking
in Application Networking
02-26-2008
06:59 AM
02-26-2008
06:59 AM
Hi, URL-Rewrite is not available on the ACE until version 2.0 (due out Q1 of 2008 "March timeframe"). Another option is to do a redirect on the ACE which is currently supported. In your situation, you would need to configure a policy-map for traffic destined to http:// and then setup a redirect for https:// Regards Pete..
... View more
Created by
pknoops
in Application Networking
in Application Networking
02-26-2008
06:05 AM
02-26-2008
06:05 AM
We have seen this happen a few times in the past and it seems deleting the disk partitions and rebuilding the device fixes the issues. I see you have run the rescue CD, but did you delete all of the disk partitions and then rebuild ? So I would recommend deleting the disk partitions,rebuilded the partitions and installed the software. Regards Pete..
... View more
Public Statistics
| Date Registered | 02-24-2002 07:44 AM |
| Date Last Visited | 08-18-2017 03:50 AM |
| Total Messages Posted | 192 |
| Total Helpful Votes Received | 88 |
