Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About f.makarenko
Stats
Member since
11-14-2007
10
Posts
0
Helpful
0
Solutions
Created by
f.makarenko
in Application Networking
in Application Networking
05-07-2012
10:30 AM
05-07-2012
10:30 AM
Thanks for this, Gaurav.
... View more
Created by
f.makarenko
in Application Networking
in Application Networking
05-03-2012
10:28 AM
05-03-2012
10:28 AM
Hello, I am in the process of migration from CSM module to ACE and I do have a question regarding "nat server" functionality. I.e. for CSM module there is certain serverfarm configuration: serverfarm MID nat server nat client MID predictor leastconns real 10.36.9.135 80 inservice real 10.36.9.136 80 inservice real 10.36.9.137 80 inservice probe MID80 probe MIDPG There are two NATs configured: "server nat" and "client nat" with natpool. There is no problem with client nat configuration for ACE module. It is a quite easy to configure the same for ACE. But - how to configure something like "nat server" on ACE module? It seems like "nat server" is enabled by default on CSM module (that's is why it exists for every serverfarm in CSM config). Is it enabled by default on ACE also? Actually I did no found any mention about in manuals. Could you help me and provide any example how to configure "nat server" or convert this part of configuration for ACE module? Thank you.
... View more
- Tags:
- ace
- ace_module
- csm
- nat
Labels:
Created by
f.makarenko
in Application Networking
in Application Networking
04-26-2012
08:18 AM
04-26-2012
08:18 AM
Hello, I am trying to audit an existing configuration of CSM module. Unfortunately have not an experience in CSM module configaration. The main goal is to understand if there are any direct connection between servers in different serverfarms (i.e. server from one serfarm opens session to server in second serverfarm to VIP or to real IP). Also I need to know if there exist any server initiated connection. For serverfarms in CSM configuration there are two options configured 1) nat server nat client <pool> 2) nat server no nat client As I understand, if there is no "static nat" lines in CSM configuration it means that there can not be server initiated connections. Is this correct? What is the best way to check if there are any direct connections between different serverfarms? Is it enough to take an output of "show conn" command like prot vlan source destination state ---------------------------------------------------------------------- In UDP 149 10.13.205.20:57944 10.36.22.20:23235 ESTAB Out UDP 449 10.36.22.24:23235 10.13.205.20:57944 ESTAB and check if there is "In" connection from <source IP> in one serverfarm to <destination IP> in second serverfarm? As for now I did not see such connections. Will be presented direct server-server/VIP or server initiated connections in "sh conn" command output for CSM module? Could you advise me how to check this in CSM configuration or show commands output? Thank you in advance.
... View more
Labels:
Created by
f.makarenko
in Application Networking
in Application Networking
04-24-2012
01:57 AM
04-24-2012
01:57 AM
Hello Chris, Thank you for your suggestion regarding source nat, I will try to implement it.
... View more
Created by
f.makarenko
in Application Networking
in Application Networking
04-16-2012
01:29 PM
04-16-2012
01:29 PM
Could someone confirm whatever a NAT is supported for ACE-20 module, please? Let me to explain technical details. I do need to convert working CSM(SLB) config to ACE configuration and I am not quite sure if the configuration below is correct. ACE module should be configured in bridge mode with two vlans - vlan 36 (client) and vlan 436 (server) - bridged with interface bvi 36. NAT on ACE configurad as "nat dynamic 1025 vlan 436" into corresponding "policy-map type loadbalance" Could you check two parts of configs and advise me if the ACE config is properly converted from CSM and will be working in the same way (especialy for NAT). Thank you in advance. CSM config ======= vlan 36 client ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0 gateway 10.36.3.1 ! vlan 436 server ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0 ! natpool WEB-MAIL 10.36.3.100 10.36.3.100 netmask 255.255.255.0 ! sticky 30 netmask 255.255.255.255 address source timeout 60 ! probe SHAREPOINT tcp interval 30 failed 120 open 3 port 80 ! probe WEBMAIL-443 tcp interval 5 failed 60 open 2 port 443 ! serverfarm WEBMAIL-443 nat server nat client WEB-MAIL predictor leastconns real 10.36.3.101 443 inservice real 10.36.3.102 443 inservice probe WEBMAIL-443 ! serverfarm WEBMAIL-80 nat server nat client WEB-MAIL predictor leastconns real 10.36.3.101 80 inservice real 10.36.3.102 80 inservice probe SHAREPOINT ! vserver WEBMAIL-443 virtual 10.36.3.100 tcp https serverfarm WEBMAIL-443 sticky 60 group 30 replicate csrp sticky replicate csrp connection persistent rebalance inservice ! vserver WEBMAIL-80 virtual 10.36.3.100 tcp www serverfarm WEBMAIL-80 replicate csrp connection persistent rebalance inservice ACE config ======= probe tcp WEBMAIL-443 interval 5 open 2 passdetect interval 60 port 443 probe tcp SHAREPOINT interval 30 open 3 passdetect interval 120 port 80 serverfarm host WEBMAIL-443 predictor leastconns probe WEBMAIL-443 rserver 10-36-3-101 443 inservice rserver 10-36-3-102 443 inservice serverfarm host WEBMAIL-80 predictor leastconns probe SHAREPOINT rserver 10-36-3-101 80 inservice rserver 10-36-3-102 80 inservice class-map match-all WEBMAIL-80 match virtual-address 10.36.3.100 tcp eq www class-map match-all WEBMAIL-443 match virtual-address 10.36.3.100 tcp eq https sticky ip-netmask 255.255.255.255 address source 30 serverfarm WEBMAIL-443 replicate sticky timeout 60 policy-map type loadbalance first-match WEBMAIL-80 class class-default serverfarm WEBMAIL-80 nat dynamic 1025 vlan 436 serverfarm primary policy-map type loadbalance first-match WEBMAIL-443 class class-default sticky-serverfarm 30 nat dynamic 1025 vlan 436 serverfarm primary parameter-map type http HTTP_ADV_OPT persistence-rebalance policy-map multi-match IFVLAN36-POLICY class WEBMAIL-80 appl-parameter http advanced-options HTTP_ADV_OPT loadbalance policy WEBMAIL-80 loadbalance vip inservice loadbalance vip icmp-reply active class WEBMAIL-443 appl-parameter http advanced-options HTTP_ADV_OPT loadbalance policy WEBMAIL-443 loadbalance vip inservice loadbalance vip icmp-reply active interface vlan 36 bridge-group 36 service-policy input IFVLAN36-POLICY mac-sticky enable no shutdown interface vlan 436 bridge-group 36 nat-pool 1025 10.36.3.100 10.36.3.100 netmask 255.255.255.0 no shutdown interface bvi 36 ip address 10.36.3.3 255.255.255.0 peer ip address 10.36.3.4 255.255.255.0 no shutdown
... View more
Labels:
03-22-2012
09:07 AM
Thank you, Christopher for response. I supposed that there is no easy way to remove CSM module configuration... BTW, have you ever used the "module clear-config" command. According to the command description, while this command exists in config, after removing the module from chassis the related module configuration will be removed also.
... View more
03-22-2012
09:04 AM
Hello, Could someone confirm that a command "module clear-config" applied on 6513 catalyst from the global configuration mode before you physically remove the module does what it should? According to the command description, while this command exists in config, after removing the module from chassis the related module configuration will be removed also. Will it be module configuration removed completelly from 6513 configuration or will it be removed from the "show run" output only? Thank you in advance. -- fm
... View more
Labels:
03-14-2012
06:27 AM
Hello, Could someone explain me what is correct steps to clearing catalyst 6513 configuration from CSM module sections, please? I am planning to migrate from CSM to ACE module in 6513 and interesting if is it safe just to do the following: 1) powerdown CSM module with command: no power enable switch 1 module 3 2) clear in 6513 configuration CSM sections starting from line "module ContentSwitchingModule 3" Is that enough to clear CSM configuration? Also to return the CSM module back to the service will it be enough just to restore cleared config's sections and power on the module again? Thank you in advance.
... View more
- Tags:
- configuration
- csm
Labels:
Created by
f.makarenko
in Application Networking
in Application Networking
02-29-2012
06:01 AM
02-29-2012
06:01 AM
Thank you, Gilles for a response. Just to make sure that everything is clear for me, I do need 1) disable RPF using "no ip verify reverse-path" 3) use "mac-sticky enable" for every client vlans interface 2) set only one default gateway (0.0.0.0/0) to the same ip address as for management inteface I can just omit all the "ip route 0.0.0.0" lines from conversion tool to ACE config. Correct? -- fm
... View more
Created by
f.makarenko
in Application Networking
in Application Networking
02-29-2012
02:31 AM
02-29-2012
02:31 AM
Hello, I have been tried to migrate from CSM to ACE module on 6513 box and convert a CSM config to ACE config with csm2ace tool. And do not quite understand how to solve an issue with vlan's default gateway. See an example below. I.e. on CSM there are - client vlan 36 (gateway 10.36.3.1) - server vlan 436 ACE converted config there are - interface vlan 36 and bridge group 36 - interface bvi 36 Also thare was added an 0.0.0.0 route to 10.36.3.1. The problem is that in CSM config there are 7 such vlan and I can add 7 0.0.0.0 routes to ACE config. I suppose that it can be fixed by splitting ACE configuration to different contexts, but in my case there will be more that 5 allowed contexts. Could anyone help me to solve this, please? How to avoid adding several 0.0.0.0 routes? Is there something missed while csm2ace script processing? Are ACE sections below correct? Thank you in advance. CSM configuration ============== ! vlan 36 client ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0 gateway 10.36.3.1 ! vlan 436 server ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0 ! vlan 149 client ip address 10.36.22.3 255.255.255.192 alt 10.36.22.4 255.255.255.0 gateway 10.36.22.1 ! vlan 449 server ip address 10.36.22.3 255.255.255.192 alt 10.36.22.4 255.255.255.0 ACE configuration ============= interface vlan 36 bridge-group 36 no shutdown interface bvi 36 ip address 10.36.3.3 no shutdown interface vlan 149 bridge-group 149 no shutdown interface bvi 149 ip address 10.36.22.3 no shutdown ip route 0.0.0.0 255.255.255.192 10.36.22.1 ip route 0.0.0.0 255.255.255.0 10.36.3.1
... View more
- Tags:
- ace
- ace_module
- csm
Labels:
Created by
f.makarenko
in Application Networking
05-03-2012
05-03-2012
Hello,I am in the process of migration from CSM module to ACE and I do
have a questionregarding "nat...
Created by
f.makarenko
in Application Networking
04-26-2012
04-26-2012
Hello,I am trying to audit an existing configuration of CSM module.
Unfortunately have not an experi...
Created by
f.makarenko
in Application Networking
04-24-2012
04-24-2012
Hello Chris,Thank you for your suggestion regarding source nat, I will
try to implement it.
Created by
f.makarenko
in Application Networking
04-16-2012
04-16-2012
Could someone confirm whatever a NAT is supported for ACE-20 module,
please?Let me to explain techni...
03-22-2012
Thank you, Christopher for response.I supposed that there is no easy way
to remove CSM module config...
03-22-2012
Hello,Could someone confirm that a command "module clear-config" applied
on 6513 catalystfrom the gl...
03-14-2012
Hello,Could someone explain me what is correct steps to clearing
catalyst 6513 configuration from CS...
Created by
f.makarenko
in Application Networking
02-29-2012
02-29-2012
Thank you, Gilles for a response.Just to make sure that everything is
clear for me, I do need1) disa...
Created by
f.makarenko
in Application Networking
02-29-2012
02-29-2012
Hello,I have been tried to migrate from CSM to ACE module on 6513 box
and convert a CSMconfig to ACE...
Public Statistics
| Date Registered | 11-14-2007 12:52 PM |
| Date Last Visited | 09-26-2018 08:02 AM |
| Total Messages Posted | 10 |
