Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About syediahm
Stats
Member since
08-17-2006
23
Posts
50
Helpful
6
Solutions
Created by
syediahm
in Application Networking
in Application Networking
08-31-2006
08:42 PM
08-31-2006
08:42 PM
It will recieve DNS rules from the GSSM. GSSM Primary sends the DNS rules to all GSS & GSSMs in the GSS Network. As a result gss3 will answer the dns queries as per the rules set on GSSM. GSS database is only copied to GSSM Secondary. Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-24-2006
09:35 PM
08-24-2006
09:35 PM
I am not aware of any known bug on this issue. I would recommend opening a TAC case on this. Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-24-2006
03:02 PM
08-24-2006
03:02 PM
As Gilles wrote earlier, it is very important is to guarantee that the response from the server goes through the CSM-S and not directly to the client. If you are using CSM-S in onearm mode then you can introduce PBR to make sure that the return traffic from servers passes through the CSM-s client vlan10 (1.1.1.0) | | V MSFC-------------->CSM-S (vlan30 3.3.3.1) | | V Vlan20 (2.2.2.0) | | V Server (2.2.2.100) For the above topology you will need to use following on MSFC. route-map xyz permit 100 match ip address xyz-acl set ip next-hop 3.x.3.x ip access-list extended xyz-acl permit tcp host 2.2.2.100 eq www any interface Vlan20 ip policy route-map xyz You need to create seperate vlan between CSM and SSL daughter card. You can find details at http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/csm/csms/icn/ssl_srvc.htm Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-24-2006
10:18 AM
08-24-2006
10:18 AM
The "Reached max parse len" counters means that the CSM received an HTTP request header that was longer than 2000 bytes, which is what the CSM will inspect by default. To increase this use the "parse-length" command under the vserver to get you to 4000 bytes. If you need more than 4000 bytes use the variable MAX_PARSE_LEN_MULTIPLIER. Hope it helps Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-24-2006
02:09 AM
08-24-2006
02:09 AM
Oh yeah. There are lots of design options. CSM-S inline Router Mode: client ---> MSFC ---> vlan10 (1.1.1.0) ---> CSM -S--> Vlan20 (2.2.2.0) --> Server CSM-S inline Bridge Mode: client ---> MSFC ---> vlan10 (1.1.1.0) ---> CSM -S--> Vlan10 (1.1.1.0) --> Server You only need to configure policy routing, if CSM-S is not inline but rather in "one arm (aggregate) mode". You can get more details at (csm-s topologies) http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/csm/csms/icn/netwcsm.htm Thanks Syed Iftekhar Ahmed
... View more
08-24-2006
12:04 AM
Unless you use the command sticky-inact-timeout, there is no default time. The sticky table is kept on a FIFO basis (32k or 128k entries, according to the device type and memory available), or until the reboot of the CSS. Use the sticky-inact-timeout command to specify the inactivity timeout period on a sticky connection for a content rule before the CSS removes the sticky entry from the sticky table. When you configure this period, the CSS keeps the sticky entry in the sticky table for the specified amount of time. The syntax for this command is: sticky-inact-timeout minutes Enter the number of minutes of inactivity, from 0 to 65535. The default value is 0, which means this feature is disabled. For example, enter: (config-owner-content[arrowpoint-rule1])# sticky-inact-timeout 9 Thanks Syed Iftekhar Ahmed
... View more
08-23-2006
11:23 AM
You are right! GSSM-M and GSSM-S are the only custodian of database.However each GSS in the network has DNS rules information. So there are two different updates. 1.GSSM-M send dns information to all GSSs in the GSS-network (including GSSM-S) 2. GSSM-M syncronizes the cofiguration database only with GSSM-S. If you loose all GSSMs from a GSS network then you will loose the config database. Its always recommended to backup Gssm database frequently. Use "gssm backup full" command to backup the database to the Harddisk on GSS and Use either the secure copy (scp) or ftp command to copy or move your full backup to a remote host. eg. gssm1.example.com# scp gssfullbk.full server.example.com:~/ hope it helps Syed iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-22-2006
02:28 PM
08-22-2006
02:28 PM
Giles ~ :) Thanks Alphonse~ Probably my first response is confusing. Just disregard it. Concentrate on my 2nd / Gilles response. (and yes your serverfarms are using different reals :)). Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-22-2006
02:22 PM
08-22-2006
02:22 PM
Sample config: ip virtual-router 100 priority 100 ip redundant-vip 100 200.1.1.1 ip critical-service 100 web1 ip critical-service 100 web2 ip critical-service 100 web3 ip critical-service 100 web4 service web1 ip address 2.2.2.2 type local active . . . . service web4 ip address 2.2.2.5 type local active if ALL 4 web servers fail, the VRID loses it's last local service and relinquishes mastership. (failure of 1, 2, or 3 of the web servers DOES NOT cause the VRID to relinquish mastership.) I would like to recommend that you test this design in your lab to ensure that it meets your requirements. Thanks Syed Iftekhar Ahmed
... View more
08-22-2006
01:55 PM
In the GSS redundancy case, all GSSs in the mesh can answer questions (dns queries) , the redundancy is really only for who has configuration control of the mesh. Only one GSS (GSS-M) can make changes to all the GSSs at one time. Whether a device is a GSSM-M, GSSM-S, or a GSS all devices are always processing DNS queries, keepalives, etc. The GSSM-S behaves no differently than a GSS and offers standby for GUI Management in addition to standard functions. Even if there is no GSSM-M configured at a particular time, there will not be any disruption in regards to functionality, aside from the fact that no configuration changes could be made until a GSSM-S is promoted to a GSSM-M. Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-22-2006
12:27 AM
08-22-2006
12:27 AM
if you use the same sticky group across Vservers, then the sticky entry will be used before the load-balancing decision. If client A hits VserverA, and load-balanced to real serverA, a sticky entry is created matching client A to serverA. Client A then hits VserverB this time, with same sticky group applied as in VserverA, then client will go to real server A, even if that real server is not a member of any serverfarm applied to VserverB. Recommendation is to use different sticky groups if different serverfarms are used between vservers. Your config is using same sticky group under two virtual servers and both these Vservers are using diff real servers. Hope it helps. Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-21-2006
11:06 PM
08-21-2006
11:06 PM
Problem lies in using same sticky group for the two virtual servers. You can assign a same sticky group ID to multiple policies/vservers as long as all the policies mapping to the same **serverfarm** (having 2 serverfarms with the same list of real IP addresses is a bad idea.) remove sticky group from either of the server and assign a new group to it. Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-21-2006
11:41 AM
08-21-2006
11:41 AM
Read Chapter 15 "Integrated data center designs" Book:Designing content switching Solutions ISBN 1-58705-213-x cisco press You will get your answers Thanks Syed Iftekhar Ahmed
... View more
Created by
syediahm
in Application Networking
in Application Networking
08-21-2006
11:29 AM
08-21-2006
11:29 AM
This message was logged because you are using a kal type of SSL with the server hello coming back in multiple packets. The kal is only looking for the server hello in the first packet. Once it is received the CSS will reset the connection, even if there are more packets to follow. The message just indicates that data was received after the kal attempt was completed. You dont need to worry about it its a debug level informational message. You can get rid of this message by lowering down the debug level to 4. Syed Iftekhar Ahmed
... View more
08-19-2006
12:30 AM
You simply dont need to put a nat(0) entry for the vpn traffic. Create a 1to1 mapping and use the natted address in the access-list defining interested traffic. eg static (inside,outside) y.y.y.y x.x.x.x netmask 255.255.255.255 0 0 access-list 152 permit ip host y.y.y.y crypto map testmap 52 ipsec-isakmp crypto map testmap 52 match address 152 crypto map testmap 52 set peer crypto map testmap 52 set transform-set Thanks Syed
... View more
Created by
syediahm
in Application Networking
08-31-2006
08-31-2006
It will recieve DNS rules from the GSSM. GSSM Primary sends the DNS
rules to all GSS & GSSMs in the ...
Created by
syediahm
in Application Networking
08-24-2006
08-24-2006
I am not aware of any known bug on this issue.I would recommend opening
a TAC case on this.ThanksSye...
08-24-2006
As Gilles wrote earlier, it is very important is to guarantee that the
response from the server goes...
08-24-2006
The "Reached max parse len" counters means that the CSM received an HTTP
request header that was lon...
08-24-2006
Oh yeah. There are lots of design options.CSM-S inline Router
Mode:client ---> MSFC ---> vlan10 (1.1...
08-24-2006
Unless you use the command sticky-inact-timeout, there is no default
time. The sticky table is kept ...
08-23-2006
You are right!GSSM-M and GSSM-S are the only custodian of
database.However each GSS in the network h...
Created by
syediahm
in Application Networking
08-22-2006
08-22-2006
Giles ~:) ThanksAlphonse~Probably my first response is confusing. Just
disregard it. Concentrate on ...
Created by
syediahm
in Application Networking
08-22-2006
08-22-2006
Sample config:ip virtual-router 100 priority 100ip redundant-vip 100
200.1.1.1ip critical-service 10...
08-22-2006
In the GSS redundancy case, all GSSs in the mesh can answer questions
(dns queries) , the redundancy...
Created by
syediahm
in Application Networking
08-22-2006
08-22-2006
if you use the same sticky group across Vservers, then the sticky entry
will be used before the load...
Created by
syediahm
in Application Networking
08-21-2006
08-21-2006
Problem lies in using same sticky group for the two virtual servers. You
can assign a same sticky gr...
Created by
syediahm
in Application Networking
08-21-2006
08-21-2006
Read Chapter 15 "Integrated data center designs"Book:Designing content
switching Solutions ISBN 1-58...
08-21-2006
This message was logged because you are using a kal type of SSL with the
server hello coming back in...
Public Statistics
| Date Registered | 08-17-2006 12:32 AM |
| Date Last Visited | 08-18-2017 03:53 AM |
| Total Messages Posted | 23 |
| Total Helpful Votes Received | 50 |
Helpful Votes From
