Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Mukund Sandur
03-14-2019
Stats
Member since
11-23-2011
33
Posts
0
Helpful
0
Solutions
12-27-2017
10:48 PM
Hi,
I have a Nexus Switch with WAN Links in different VRFs and corresponding LANs in respective VRF.
I need to configure a ERSPAN with one of the WAN links as source and ERSPAN destination connected to same switch.
My ERSPAN config on switch is as follows
monitor session 1 type erspan-source
erspan-id 1
vrf default
destination ip 10.8.8.2
header-type 3
source interface Ethernet1/1 both
no shut
interface Ethernet1/25
description MCX1-ERSPAN-Destn
no switchport
ip address 10.8.8.1/24
no shutdown
monitor erspan origin ip-address 3.3.3.3 global
monitor erspan granularity ns
int loopback 10
ip address 3.3.3.3/32
But I am not able to see any packets being captured on my ERSPAN destination which is running wireshark.
Kindy let me know whether my configuration requires any modification. Attaching diagram for your reference,
... View more
Labels:
Created by
Mukund Sandur
in Cisco Bug Discussions
in Cisco Bug Discussions
07-06-2017
11:03 PM
07-06-2017
11:03 PM
Hi,
CSCvd65778 bug is listed under NX-OS 7.1(4)N1(1) which states that Unable to create new SVI when role on box is network-operator.
Symptom: We cannot create SVI using TACACS user. Conditions: Using TACACS user is not able to modify or create SVI. Using a local user then we are able to create an SVI.
Network-operator anyways has only read access to device. So how does this bug exactly affecting.
Require more clarity on what does this bug imply..
... View more
Labels:
05-23-2017
04:59 AM
Hey Mark,
I am anyways going to assign IP address to the Interface and then using VRF leaking from Global to MGMT VRF on ASR, I would propagate few prefixes on to my NOC router over BGP neighbourship between them.
As per supported features over management interface, routing protocols is also supported.
So I guess my requirement should work over here.
Lets hope and would keep you posted.
... View more
05-23-2017
04:31 AM
Hi Mark,
Thanks for the reply.
Over MGMT interface, I would just need few BGP prefixes for monitoring purpose to be advertised to my NOC router say 1921.
Real production traffic is not going to be routed over this MGMT interface.
... View more
Created by
Mukund Sandur
in Network Management
in Network Management
05-23-2017
03:54 AM
05-23-2017
03:54 AM
I have an ASR 1006-X router MGMT interface connected to another router. Can I establish BGP/OSPF neighborship between ASR and other router over ASR MGMT Interface.
ASR 1006-X MGMT Interface <-----------BGP-------------> 1921 Router G0/0
Is it possible to do the above config and get routes exchanged between ASR and other router. My main concern is BGP over MGMT Interface.
Thanks & Rgds,
Mukund Sandur
... View more
Labels:
Created by
Mukund Sandur
in Application Networking
in Application Networking
05-04-2015
01:16 AM
05-04-2015
01:16 AM
Cisco ACE HTTP to HTTPS redirection End-to-end SSL offloading I have a website hosted on IPv4. Home page of this website is pure HTTP whereas another URL inside the page is HTTPS based for which I need to do HTTP to HTTPs redirection as well as end-do-end SSL offloading. In addition to the above requirement my clients are IPv6. I am using Cisco ACE 4710 to meet the above requirements. First ACE converts IPv6 to IPv4 and also do HTTP to HTTPS redirection. I am facing an issue when I click another URL “Corporate Login” on home page the https redirection is successful with a pop-up window opening and asking for authentication. Authentication is successful but then the URL throws me an error “404 - File or directory not found” What could be the reason for this error. Is there any redirection issue. But when my client comes from IPv4 address, then everything is working fine. Attaching the configuration for review. ACE OS : A5_1_2
... View more
Labels:
01-17-2014
11:47 PM
Hi Kanwal, Thanks for all the feedback...Its absolutely working fine...both the redirection and then redirected URL also load-balanced via new VIP.
... View more
01-16-2014
09:18 PM
Thanks Kanwal for a excellent solution .. But is it mandatory that I should keep the redirect URL on 9001. Probably I will change the URL to 80 itself and then new VIP translating from 80 to 9001.
... View more
01-16-2014
09:00 PM
Hi Kanwal, I got that URL copied as it is with ? included as per you suggestion. Then I came to know that ACE cannot redirect to two different URLs so I changed it only one URL. Old Config : Earlier there were two URLs with two redirect servers. rserver redirect FCC-Redirect1 webhost-redirection http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD 301 inservice rserver redirect FCC-Redirect2 webhost-redirection http://chfccapp02.kvbad.com:9001/forms/frmservlet?config=FCCPROD 301 inservice serverfarm redirect FCC-App-Redirect rserver FCC-Redirect1 inservice rserver FCC-Redirect2 inservice New Config: rserver redirect FCC-Redirect1 webhost-redirection http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD 301 inservice serverfarm redirect FCC-App-Redirect rserver FCC-Redirect1 inservice After this config change, ACE is not redirecting traffic to the real servers but only handing over the redirect URL "http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD" to the client. When the client access www.fcc.com, his webpage is redirected to the above URL and then he direclty hits the real server as the redirected URL is mapped to real server IP in DNS. This means that I will have to give direct access to server on port 9001. This behaviour is not which I want. Is this how the URL redirect works?? I am bit naive on this type of ACE config. I want the client to access www.fcc.com port 80 which should then be redirected to the URL running on real servers on port 9001. The real server should then respond back to VIP on port 80 and then VIP should return the traffic to the client. Is it possible? Attaching the running config
... View more
01-13-2014
11:06 AM
Hi Kanwal, Thanks for your quick response. Still I have some issues.. My webhost redirection URL is http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD. But ACE was not accepting the "?" in the URL..it was ommiting the "?" from URL. So I have used the redirection URL as http://chfccapp01.kvbad.com:9001%p Rserver redirection confiig is as follows rserver redirect FCC-Redirect1 webhost-redirection http://chfccapp01.kvbad.com:9001%p inservice rserver redirect FCC-Redirect2 webhost-redirection http://chfccapp02.kvbad.com:9001%p inservice Even after modifying the URL, users are not able to access the webpage. When I see the show service-policy command, I am getting connection drops. Attaching the config and the output of "show conn" and "show service-policy" command
... View more
01-13-2014
03:09 AM
Thanks Kanwal, I was worried whether my base configuration is correct or not. But I didn't get what you are trying to say on the point of port on which ACE shall send the traffic. Is it wrong somewhere.? Client will use web port 80 to access the site fcc.com which should be redirected to the two URLs where the application is working on 9001. Can you please clarify this point Anyways, we have scheduled downtime in coming weekend. I will test and let you know. Thanks for your timely advice and support.
... View more
01-11-2014
06:47 PM
Hi, I have ACE 4710. My users will be accessing website www.fcc.com which is mapped to VIP in DNS. My requirement is that when users access www.fcc.com then ACE should redirect the URL to the following ones Dear Team, Kindly create an new website with the below mentioned details. Sitename : www.fcc.com Ip address: 10.52.7.198 The above mentioned ip address will be given for load balancer. The urls to be mapped in load balancer is given below. http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD http://chfccapp02.kvbad.com:9001/forms/frmservlet?config=FCCPROD Is it possible in ACE. Below is the config which I have planned to deploy. probe tcp port9001 port 9001 interval 5 passdetect interval 5 connection term forced rserver host FCC-APP-WEB1 ip address 10.52.7.196 inservice rserver host FCC-APP-WEB2 ip address 10.52.7.197 inservice rserver redirect FCC-Redirect1 webhost-redirection http://chfccapp01.kvbad.com:9001/forms/frmservlet?config=FCCPROD 301 inservice rserver redirect FCC-Redirect2 webhost-redirection http://chfccapp02.kvbad.com:9001/forms/frmservlet?config=FCCPROD 301 inservice serverfarm host FCC-Dynamic-SF description *** FCC Dynamic ServerFarm *** probe port10870 rserver FCC-APP-WEB1 inservice rserver FCC-APP-WEB2 inservice serverfarm redirect FCC-App-Redirect rserver FCC-Redirect1 inservice rserver FCC-Redirect2 inservice class-map type http loadbalance match-any FCC-Redirect 2 match http header Host header-value "fcc" class-map match-any FCC-Redirect-VIP 2 match virtual-address 10.52.7.198 tcp any policy-map type loadbalance first-match FCC-APP class FCC-Redirect serverfarm FCC-App-Redirect policy-map multi-match PM-MULTI-MATCH class FCC-Redir-VIP loadbalance vip inservice loadbalance policy IDAM-REDIR loadbalance vip icmp-reply Is the config right. The customer is ready to change any URL name or the config to make it work.
... View more
Labels:
04-23-2013
11:54 PM
Hi Reza, Even if I montior the vPC peer link, I am not able to span the traffic crossing the peer-link only when I monitor the host interface ie e1/40 (tx & rx), then I am able to span the traffic coming via vPC peer-link Thanks & Rgds, Mukund Sandur
... View more
04-23-2013
08:21 AM
Hi Reza, I have two hosts A & B which are communicating to each other and they are connected to e1/40 on their respective switches. These hosts are shown in the diagram. The third PC where I am running wireshark is connected to e1/39 which is the span destination configured in the monitor session. I simply shift the third machine when I want to span the traffic on the respective switches. Thanks & Rgds, Mukund Sandur
... View more
04-23-2013
04:21 AM
Hi, I have pair of 5596 switches in vPC. One host say "HOST A" is connected to the primary vPC peer and other "HOST B" on secondary vPC peer. Both are in same VLAN 10. Both hosts are vpc orphan ports as their NIC is configured in active/standby mode.I have configured span session on both vPC peers with span source as VLAN 10 in rx mode. Span destination is connected to secondary vPC peer. The issue here is that I am not able to capture the traffic originating from HOST A destined to HOST B which is traversing vPC peer-link. Same issue occurs for the traffic in reverse way and span destination on primary vPC peer. In a nutshell, any traffic which crosses vPC peer-link is not getting captured. What could be the issue and is there any solution for it. Below mentioned is the span config and relevant interfaces. Also attaching the diagram for reference. Primary vPC peer span related config: interface Ethernet1/39 desc *** SPAN Destination *** switchport monitor spanning-tree port type edge speed 1000 interface Ethernet1/40 desc *** HOST A *** switchport access vlan 10 spanning-tree port type edge speed 1000 monitor session 1 source vlan 10 destination interface Ethernet1/39 no shut Secondary vPC peer span related config: interface Ethernet1/39 desc *** SPAN Destination *** switchport monitor spanning-tree port type edge speed 1000 interface Ethernet1/40 desc *** HOST B *** switchport access vlan 10 spanning-tree port type edge speed 1000 monitor session 1 source vlan 10 destination interface Ethernet1/39 no shut
... View more
Labels:
12-27-2017
Hi, I have a Nexus Switch with WAN Links in different VRFs and
corresponding LANs in respective VRF....
07-06-2017
Hi, CSCvd65778 bug is listed under NX-OS 7.1(4)N1(1) which states that
Unable to create new SVI when...
05-23-2017
Hey Mark, I am anyways going to assign IP address to the Interface and
then using VRF leaking from G...
05-23-2017
Hi Mark, Thanks for the reply. Over MGMT interface, I would just need
few BGP prefixes for monitorin...
Created by
Mukund Sandur
in Network Management
05-23-2017
05-23-2017
I have an ASR 1006-X router MGMT interface connected to another router.
Can I establish BGP/OSPF nei...
Created by
Mukund Sandur
in Application Networking
05-04-2015
05-04-2015
Cisco ACE HTTP to HTTPS redirection End-to-end SSL offloadingI have a
website hosted on IPv4. Home p...
01-17-2014
Hi Kanwal,Thanks for all the feedback...Its absolutely working
fine...both the redirection and then ...
01-16-2014
Thanks Kanwal for a excellent solution ..But is it mandatory that I
should keep the redirect URL on ...
01-16-2014
Hi Kanwal,I got that URL copied as it is with ? included as per you
suggestion. Then I came to know ...
01-13-2014
Hi Kanwal,Thanks for your quick response.Still I have some issues..My
webhost redirection URL is
htt...
01-13-2014
Thanks Kanwal,I was worried whether my base configuration is correct or
not. But I didn't get what y...
01-11-2014
Hi,I have ACE 4710. My users will be accessing websitewww.fcc.com which
is mapped to VIP in DNS.My r...
04-23-2013
Hi Reza, Even if I montior the vPC peer link, I am not able to span the
traffic crossing the peer-li...
04-23-2013
Hi Reza,I have two hosts A & B which are communicating to each other and
they are connected to e1/40...
Public Statistics
| Date Registered | 11-23-2011 09:06 PM |
| Date Last Visited | 03-14-2019 11:42 PM |
| Total Messages Posted | 33 |
