Hi Aditya,
Thanks for the reply.
But DDNS wont be the correct solution. First of all it is necessary that the link IP will be mapped to the internal server, it could be an IP form the pool provided by ISP. And my question is about providing high availability for mapped web server on internet over two links.
Regards,
Shijo.
... View more
Dear Ahmed,
Thanks for the reply.
As you know we would prefer secondary link from a different ISP than the primary ISP for obvious reasons.
Regards,
Shijomon Scaria.
... View more
Dear All,
I have a web server which is mapped with public IP and is available over internet, works fine too. My query is as follows.
If the internet link fails the service won't be accessible over internet. If I have a secondary link, I can change the mapping to the secondary link and with necessary DNS updates the web service will be back online on internet. But there would be a considerable amount of time lag to do this activity. Is there a way to avoid it, that is if the primary link fails the mapping should automatically shifted to the secondary one and DNS also should get updated automatically ??
Thanks in advance.
Warm Regards,
Shijomon Scaria.
... View more
Hi, Do you have an ACL configured to allow traffic from outside to inside on the required ports, applied on outside interface in 'in' direction ?? Regards, Shijo.
... View more
Hi George, I think only the centrally switched traffic will show as the traffic between AP and WLC the rest locally switched traffic will show exactly form host to host. Correct me if I am wrong. Regards, Shijo.
... View more
Hi, OK, so NAT Loop back is your option. Do the below. static (inside,inside) 9.9.9.9 10.0.0.1 netmask 255.255.255.0 This will make the public IP available in LAN also. I assume that there must be 'static (inside,outside)' statement and an ACL permitting traffic on the public IP on required ports from outside. Rate if you find this helpful Regards, Shijo.
... View more
Hi, Below is what I understand, correct me if I am wrong. You have a server with private IP 10.0.0.1 which is published to internet with ip 9.9.9.9 You want to access the services from the published server using public IP from IP 10.0.0.50 and has internet access through a proxy server. Question. - Are these IPs 10.0.0.1 and 10.0.0.50 shares the same internet link ? Or the proxy server has a different internet link ?? Regards, Shijo.
... View more
Hi George, Thanks for the inputs. What about putting a cap for traffic from WLC IP to AP IP on port UDP 5247 ? Does it make any sense ? As the other profiles are local switched it should not match this entry.. Regards, Shijo.
... View more
Hi, Instead of blocking that particular mac, in port security we are adding trusted macs to ports using different methods, and sets the rule if the conditions violates. Example. SWITCH(config)# int Gi0/1 SWITCH(config-if)#switchport port-security SWITCH(config-if)#switchport port-security mac-address 0000.aaaa.bbbb SWITCH(config-if)#switchport port-security violation shutdown Refer below document. http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.pdf Regards, Shijo.
... View more
