Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All,I'm working on a specific config and have an issue in the backup farm/fail-over/sorry server area.The customer wants the following:They have an existing serverfarm with X web servers, they want a single server to act as a reverse-proxy in fron...
Hi Guy'sI have the following issue;Previous config was Cat 6k's running HSRPv1.PC would ARP for Gateway, MSFC would reply with Virtual-MAC in Layer2 AND in ARP reply.Now we swapped the Cat 6k's for 7k18's and are running HSRPv2.From there my PC secur...
NETMAN-7: TCP-KAL: Received Data while in CLOSING state for KAL-index(69)NETMAN-7: TCP-KAL: Received Data while in CLOSING state for KAL-index(70)Does anyone know what this means ? it started appearing in the syslog 1 day ago.total nr of messages is ...
I'm having a problem with my configuration on a CSS11503. If i try to connect to a dying server i receive a TCP RST. What i'd like to see is the CSS "moving" my session attempt to another server in de content rule.
Sorry to bump an old thread but I had the same issue.In certain cases you seem to need to remove every entry by using the following commands:first list all the entries in the table show ip nat trans | inc 10.47.1.18 that will output something liketcp...
The ACE will only manipulate the Cookie that is used in the Sticky configuration, all other cookies are untouched.In that case this Security scan is not valid, cause you can't gain anything from stealing the sticky cookie from a user.That security ch...
Hi,As long as they don't both use the Same Cookie name they won't influence each other.If you don't assign a cookie-name ACE will create a unique one per rserver.Or you can configure one e.g. rserver WebServer1 80 cookie-string "ACEWS1Cookie"More ...
Hi,If I understand you correctly you are trying to loadbalance a request from within the rserver residing vlan?In that case you need to Source NAT the server request else the reply will end up directly on the server which doesn't have that connection...
Hi Catherine,I would expect the following behavior, using 255.255.255.255 would create a sticky entry on the table per full source + destination IP if you use 'both'.The subnet 255.255.255.0 would create an entry of the 'network' + destination IP whe...