Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a pair of 11506's configured for box-to-box redundancy. Failovers appear to happen as quickly as expected (picked up in around 3 secs), but it takes a further 30-40secs for the 12 scripted keepalives we use to be started (the scripts run and ...
My certificate supplier requires the installation of an intermediate CA on the 'web server' in order for the browser to identify the correct trusted root cert. However, we're terminating SSL on the CSS and I can find no information on how to install...
I have a number of redundant pairs of 11500s with SSL modules in. When trying to sync the config using the commit_redundancy script it fails at the verification stage. Manually comparing the two running configs it appears that all the config is bei...
Despite entering the correct 'gateway address' in the 'boot' config I can't get any of our 11506s to respond to telnet or web management connections to the ethernet management port from remote subnets (in subnet works). I'm aware this wasn't possibl...
I'm running up against a brick wall trying to have the VIP service requests for some web servers on port 80, but balance it across a number of servers - all of which are running on another port. Is this actually possible?Ben
Many thanks - any idea why this is the case? It seems a shame that I have to double the 'keepalive' load on my server farm to achieve an acceptable fail time...
Check out my previous post: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.ee96012 for information I think might be helpful on this.
Did you do a 'copy ssl (s)ftp ftp_record import file.pfx PKCS12 "password"'? Mine failed when I accidently specified the wrong type (in my case PKCS12 when I meant PEM).
We use a BT Trustwise cert (root signed by Verisign) - it works fine, although Cisco is not listed as a supported 'server'.Note: some certs are issued with an intermediate CA - see my other post on this forum on how to deploy this on the CSS (simple...
Detailed answer from Cisco contact (quote):If their chained cert is in multiple files the following procedure should work:1) convert all certs to the same format If, on the off chance, the certs are separate and not PEM format, they will need to ...
