Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,Is it possible for me to install a CA root certificate, provided by Linksys so that linksys devices, which have client-certificates built-in, can authenticate against that CA root? This way, only devices will be able to access the protected con...
hello,is it possible to configure multiple VIPs for the same virtual-router on a particular circuit configuration which uses the same redundant-interfaces instead of having to configure redundant-interfaces for each VIP that's added?I want to do some...
Hi,this is probably going to sound really dumb but I still want to throw this out there JUST in case there's some way to improve security on the switches. It's actually more about security and better attack deflection on the switches than security of...
Hello,I have a CSS11501S-k8 unit which we use to load-balance etc our web and file servers. Is it possible for me to configure it in a way such that only users with an IP address from a specific country are let in to the backend web/file servers and ...
Hello, this might probably be a pretty stupid question but I have been following the guidelines in the SSL configuration manual for SSL Termination. The setup is ASA5520 -> SWITCH -> CSS11501S -> SWITCH -> WEB-SERVER(S)The web-servers use the redunda...
HelloThis is an old discussion but I'm hoping someone will see my message in this? Anyway, I have a similar issue, except my network is a LOT more simple. I just have One (1) 3560 L-3 switch at the border with simple IP peering with my ISPThis is the...
Hi Diego,yes that helps a lot. Weird that I actually knew it did allow for it but when I started looking for the actual documentation (which was almost a yr after I saw it the first time) I couldn't find it. Thanks so much. BTW, the Linksys client ca...
Hi Gilles, thx for that. So basically what you're saying is that if I have a VIP configured but the content rule that uses this is inactive/suspended OR say the backend server is dead or unreachable for any reason, the ping to the VIP will not be rep...
Hmm no responses. Is there any more information I can provide? Does anyone have any questions that I can answer to clarify what I need to accomplish or is it a dumb question? HELP?
Hi Gilles,thanks so much for the response. I guess that'll solve it except that I'll have to modify your suggestion such that I add the ALL IP ranges for the one country I want to permit and then at a lower priority rule redirect all others. So I'll ...