Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About frede_frede
08-18-2017
Stats
Member since
06-12-2012
49
Posts
0
Helpful
0
Solutions
Created by
frede_frede
in Application Networking
in Application Networking
11-27-2013
08:47 AM
11-27-2013
08:47 AM
Hi Kanwal, unfortunately is still not okay. When I make show sticky I can see the sessions, users can work, but there are times when all sessions begin to fall with no apparent reason. This is my parameter configuration. parameter-map type http PERSIST-REBALANCE case-insensitive persistence-rebalance set header-maxparse-length 65535 set content-maxparse-length 65535 length-exceed continue The sticky sticky http-cookie JSESSIONID stickyconf timeout 10 replicate sticky serverfarm FARM One note, at this moment all my sessions arrive with the same IP, this can be the problem. The sessions cross a NAT Thanks for the support and the patience Regards, Fred
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-25-2013
09:36 AM
11-25-2013
09:36 AM
perfect, the " persistence rebalance" was the missing piece thanks for the help Kanwal Regards, Fred
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-25-2013
08:49 AM
11-25-2013
08:49 AM
Hi Steven, I can see the sticky sessions in database, but users are constantly having logout. Thanks Fred
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-24-2013
11:02 AM
11-24-2013
11:02 AM
Hi Kanwal, The url for the VIP is https://example.com/login/auth;jsessionid=E9BB3E120CDD87D06BF18A6575A801F2.tc1 I need to use another approach, such as Session Cookie Persistence, but I'm not sure how I'll get the jsessionid, I need to do the match in the url? Thanks Fred
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-22-2013
09:32 AM
11-22-2013
09:32 AM
Hi Kanwal, Still the same, I do the show sticky database command and I don't find any session. Regards, Fred
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-21-2013
08:19 AM
11-21-2013
08:19 AM
yes I understand. The problem seems to be in the sticky because I enter in the application via port 8091 without problems, but the ACE does not seem to grab the SSL ID. Regards, Fred I clicked in the wrong button again
... View more
Created by
frede_frede
in Application Networking
in Application Networking
11-21-2013
06:48 AM
11-21-2013
06:48 AM
Hi Kanwal, "If i have understood you correctly you want that traffic coming to VIP at 443 should be sent back to the server on port 8091, then you should make a slight change in config." I edit the post, the VIP is in 8091 and in the server too. Regards, Fred
... View more
11-21-2013
05:36 AM
Hi, I need to balance https in port 8091, I already make this configuration in port 443 and works, but with port 8091 the sessions are broken and the users have to constantly make login probe tcp KPalive_server_8091 port 8091 interval 10 faildetect 2 passdetect interval 10 passdetect count 2 open 1 rserver host server01 ip address 192.168.32.128 inservice rserver host server02 ip address 192.168.32.129 inservice serverfarm host SRVfarm_server probe KPalive_server_8091 rserver server01 inservice rserver server02 inservice sticky layer4-payload server_HTTPS serverfarm SRVfarm_server response sticky layer4-payload offset 43 length 64 begin-pattern "(\x20|\x00\xST)" class-map match-all CLA4_HTTPS 2 match virtual-address 192.168.30.60 tcp eq 8091 policy-map type loadbalance generic first-match POL7_HTTPS class class-default sticky-serverfarm server_HTTPS policy-map multi-match POL4_HTTPS class CLA4_HTTPS loadbalance vip inservice loadbalance policy POL7_HTTPS loadbalance vip icmp-reply active thanks Fred P.S. sorry for the repeated topic, but accidentally I choose write answer
... View more
Labels:
11-21-2013
04:53 AM
Hi, I need to balance port https in port 8091, I already make this configuration in port 443 and works, but with port 8091 the sessions are broken and the users have to constantly make login probe tcp KPalive_server_8091 port 8091 interval 10 faildetect 2 passdetect interval 10 passdetect count 2 open 1 rserver host server01 ip address 192.168.32.128 inservice rserver host server02 ip address 192.168.32.129 serverfarm host SRVfarm_server probe KPalive_server_8091 rserver server01 inservice rserver server02 inservice sticky layer4-payload server_HTTPS serverfarm SRVfarm_server response sticky layer4-payload offset 43 length 64 begin-pattern "(\x20|\x00\xST)" class-map match-all CLA4_HTTPS 2 match virtual-address 192.168.30.60 tcp eq 8091 policy-map type loadbalance generic first-match POL7_HTTPS class class-default sticky-serverfarm server_HTTPS policy-map multi-match POL4_HTTPS class CLA4_HTTPS loadbalance vip inservice loadbalance policy POL7_HTTPS loadbalance vip icmp-reply active thanks Fred A mensagem foi editada por: Frederico Fred
... View more
Labels:
09-02-2013
08:55 AM
Hi Seb, Yes you are right, but the rcommand use telnet, it's possible to access the members with another command that uses ssh? Cheers, Fred
... View more
09-02-2013
07:58 AM
Hi Julio, thanks for the answer. But for example, I don't know how to configure a thing like this in the fwsm Router(config)# ip access-list extended EXTERNAL-ACL Router(config-ext-nacl)# deny tcp any any log Router(config-ext-nacl)# deny udp any any log Router(config-ext-nacl)# deny icmp any any log Router(config-ext-nacl)# deny ip any any Router(config)# ip inspect name CBAC-EXAMPLE tcp Router(config)# ip inspect name CBAC-EXAMPLE udp Router(config)# ip inspect name CBAC-EXAMPLE icmp Router(config)# interface ethernet0 Router(config-if)# ip access-group EXTERNAL-ACL in Router(config-if)# ip inspect CBAC-EXAMPLE out thanks Regards Fred
... View more
07-31-2013
02:44 AM
Hi, Its possible to access a cluster member with ssh? rcommand use telnet and I want to remove telnet from the network Thanks Fred
... View more
Labels:
07-16-2013
08:35 AM
Hi, With CBAC I can inspect traffic, with FWSM can I configure the same process? thanks
... View more
Labels:
11-27-2013
Hi Kanwal,unfortunately is still not okay. When I make show sticky I can
see the sessions, users can...
11-25-2013
perfect, the "persistence rebalance" was the missing piecethanks for the
help KanwalRegards,Fred
11-25-2013
Hi Steven,I can see the sticky sessions in database, but users are
constantly having logout.ThanksFr...
11-24-2013
Hi Kanwal,The url for the VIP is
https://example.com/login/auth;jsessionid=E9BB3E120CDD87D06BF18A657...
11-22-2013
Hi Kanwal,Still the same, I do the show sticky database command and I
don't find any session.Regards...
11-21-2013
yes I understand.The problem seems to be in the sticky because I enter
in the application via port 8...
11-21-2013
Hi Kanwal,"If i have understood you correctly you want that traffic
coming to VIP at 443 should be s...
11-21-2013
Hi,I need to balance https in port 8091, I already make this
configuration in port 443 and works, bu...
11-21-2013
Hi,I need to balance port https in port 8091, I already make this
configuration in port 443 and work...
09-02-2013
Hi Seb,Yes you are right, but the rcommand use telnet, it's possible to
access the members with anot...
09-02-2013
Hi Julio,thanks for the answer.But for example, I don't know how to
configure a thing like this in t...
07-31-2013
Hi,Its possible to access a cluster member with ssh? rcommand use telnet
and I want to remove telnet...
Public Statistics
| Date Registered | 06-12-2012 02:51 AM |
| Date Last Visited | 08-18-2017 04:01 AM |
| Total Messages Posted | 49 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 8 | |
| 5 | |
| 5 | |
| 4 |
.jpg "Hall of Fame Cisco Employee"){kind=icon}
