Hi, I have a question regarding QOS. Consider the following topology - IP-Phone > 2960 > 2x10Gb up to > 3850. The IP Phone is obtaining its Cos 5 and DSCP 46 markers from the local DHCP server, all good there. When making a VoIP call i can see the traffic falling into the correct queues on the 2960 as below, all good there.   GigabitEthernet1/0/1 (All statistics are in packets) dscp: incoming ------------------------------- 0 - 4 : 92871 0 0 0 0 5 - 9 : 0 0 0 0 0 10 - 14 : 0 0 0 0 0 15 - 19 : 0 0 0 0 0 20 - 24 : 0 0 0 0 115723 25 - 29 : 0 0 0 0 0 30 - 34 : 0 0 0 0 0 35 - 39 : 0 0 0 0 0 40 - 44 : 0 0 0 0 0 45 - 49 : 0 4653 0 0 0 50 - 54 : 0 0 0 0 0 55 - 59 : 0 0 0 0 0 60 - 64 : 0 0 0 0 dscp: outgoing ------------------------------- 0 - 4 : 221207 0 0 0 0 5 - 9 : 0 0 0 0 0 10 - 14 : 0 0 0 0 0 15 - 19 : 0 0 0 0 0 20 - 24 : 0 0 0 0 0 25 - 29 : 0 0 0 0 0 30 - 34 : 0 0 0 0 0 35 - 39 : 0 0 0 0 0 40 - 44 : 0 0 0 0 0 45 - 49 : 0 0 0 0 0 50 - 54 : 0 0 0 0 0 55 - 59 : 0 0 0 0 0 60 - 64 : 0 0 0 0 cos: incoming ------------------------------- 0 - 4 : 150720 0 0 115723 0 5 - 7 : 4653 0 0 cos: outgoing ------------------------------- 0 - 4 : 242373 0 41 0 29 5 - 7 : 0 16 1202357 output queues enqueued: queue: threshold1 threshold2 threshold3 ----------------------------------------------- queue 0: 0 0 0 queue 1: 0 465783 1208385 queue 2: 0 0 220924 queue 3: 0 0 0 Now when the traffic hits the 3850 the packets do not seem to be falling into the correct polices based around the classification below: 3850#show policy-map interface tenGigabitEthernet 1/0/1 out TenGigabitEthernet1/0/1 Service-policy output: AutoQos-4.0-Output-Policy queue stats for all priority classes: Queueing priority level 1 (total drops) 0 (bytes output) 190555460 Class-map: AutoQos-4.0-Output-Priority-Queue (match-any) 0 packets Match: dscp cs4 (32) cs5 (40) ef (46) 0 packets, 0 bytes 5 minute rate 0 bps Match: cos 5 0 packets, 0 bytes 5 minute rate 0 bps Priority: 30% (3000000 kbps), burst bytes 75000000, I can see a total of  190555460 bytes in the priority level 1 queue but where the class map shows Match: dscp cs4 (32) cs5 (40) ef (46), i would have thought these counters would have been increased, is this normal? Or is this because the ports/switch is not under congestion and packets are sent as normal with no QOS or queuing applied? Cheers ... View more

Hi, can anyone elaborate on this statement please? Intelligently manages client traffic flow to each data center, routing users to the closest, least loaded, or otherwise selected “best answer” based on any of the ten global load balancing algorithms that can be applied; Cisco GSS 4492R will not send an IP address to the D-proxy if the device is overloaded WWhen you read about the VIP or device being overloaded, is this configurable? What does it mean the VIP being overloaded?   Cheers            ... View more

Hi, So we have a solution in test for one of our customers where we have two data centres running active active. Within each DC we are running the ACE will Kalap enabled reporting back to the GSS. Everything works - all good there.  On the odd occasion we are tracing a handful of users, not always the same users authenticating to the database multiple times within the day in both DC's. Meaning - the users are sometimes hopping between the data centres even though we have sticky sessions configured on the GSS at 12 hours.  When the users are hopping between DC's with in the 12 hour stick period the keepalives are not failing - the only thing i can think of is the users upstream DNS servers are being load balanced over multiple IP's. The TTL for the A records is set at 2 minutes so the clients are querying the GSS every 2 minutes, i guess if their upstream DNS servers are being load balanced over multiple IP's then on some occasions the GSS may treat the request as a new session - thus pushing the client to a different DC. Is this possible? Anyone come across this before? I think the GSS and GTM solutions have too many dependencies on other infrastructure that is out of our control to meet given requirements, this being one of them.  Any comments or feedback would be great. Cheers  ... View more

Hi,   Does anybody know if the ACE has the ability to advise the downstream SMTP servers of the original source IP client address when the ACE is deployed on a stick? Currently the SMTP servers are just seeing the source address of the load balancer because of the SNAT. We are using x-forward for the HTTP traffic and that works a treat.   Anyone come across this before?   Cheers ... View more

Hi,   My colleague and i are struggling to originate a IPv6 BGP default route from one of our core switches to an eBGP peer.   This is the configuration (below) we have tried and does work within GNS3 running the same IOS but it doesn't seem to work on our live environment.   router bgp XXXX bgp router-id 1.1.1.1 bgp log-neighbor-changes neighbor x:x:6:11::1 remote-as 65003 ! address-family ipv6   network ::/0   neighbor x:x:6:11::1 activate   neighbor x:x:6:11::1 prefix-list 65003-out out exit-address-family ! ipv6 route ::/0 Null0 ! ipv6 prefix-list 65003-out seq 5 permit ::/0   When we reverse the above configuration, so we send a IPv6 Default BGP route from the customer to the core the above configuration works, however, the core see's the route as ::/8 not ::/0 (very strange). Has anybody seen this before? This doesn't make sense as on the customer infrastructure we can see ::/0 in the BGP table but on the core we see ::/8. We are thinking because the core is seeing the route as::/8 this is having an affect when we are trying to originate ::/0 from the core to the customer..    Maybe this is a bug but we're not sure. Anybody seen this before?   Cheers,     ... View more

Hi, Has anybody figured out how to tag a ipv6 route when its originated under the interface as follows... I'm on a Cisco ASA running 9.1. interface Port-channel1.500 description Test vlan 100 nameif Test security-level 5 ip address x.x.x.1 standby x.x.x.x2 ipv6 address x:x:x:x:x:x:x:1/64 standby x:x:x:x:x:x:x:2 ipv6 enable ipv6 ospf 1 area 1 instance 1 If i go under the 'ipv6 router ospf' process and do something like the following (below) the connected interfaces are not propagated into OSPF. The only ways i can propagate the connected IPv6 interfaces into OSPF is by adding 'ipv6 ospf 1 area 1 instance 1' under the interface but there's no way of tagging the route. ipv6 router ospf 1 router-id x.x.x.1 redistribute connected metric-type 1 tag 500 log-adjacency-changes                   Any ideas? ... View more

Hi, So i'm looking at header-inserts on the ACE. We have a requirement to to instruct the ACE to redirect from HTTP to HTTPS should a HTTP request be made. This is fine and has been implemented, however, after the redirect we need to insert an header into the packet to tell the web server listening on port 80 that the packet has been decrypted and did arrive on HTTPS after the redirect. What sort of header-insert would normally handle this? Cheers, ... View more

Hi, Looking for a bit of guidance. Lets say you had a server farm, the server included two rservers. Is it possible to bind two sticky cookie-insert polices to the serverfarm so if a connection was sent to rserver A 'server1' would be inserted as the ID and likewise, should the connection be sent to rserver B 'server2' was inserted into the cookie? Is this possible or do you have to deploy two server farms that are linked back to two different sticky polices? and then load balancer between the serverfarms? Cheers, ... View more