×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Adding x2 SCA2 to current x2 CSS active:active setup

Unanswered Question
Oct 31st, 2003
User Badges:

Current setup is x2 CSS11051 which works in an active:active configuration (one customer busines are on each but with mutual failover over multiple vlans).


Requirement is to add x2 SCA2's 11000 for SSL offloading. From the documentation I think that the the best configuration will be one-armed transparent proxy. I need to confirm a couple a couple of things:

- that it is possible to load balance to the SCA devices (and allow for the failure of one SCA and with no discernable disruption to service).

- is it okay to post the config so someone to scan through to check the setup for i/ load balancing to the SCA and then ii/ subsequent load balancing to the web servers.

- why separate vlans are needed for each SCA ?


A colleaque of mine is favouring having an SCA aligned to a CSS and in the event of an SCA failure that the second CSS senses this and fails over. Not sure if this is possible, I personally favour one-armed transparent approach.


Any recommendations would be great, I just cant see resiliant CSS's and SCA's examples documented anywhere.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
owillins Thu, 11/06/2003 - 12:51
User Badges:
  • Silver, 250 points or more

The document below shows a sample configuration for one-armed proxy setup using a CSS and SCA.

This is the most scalable configuration, and is easy to troubleshoot.

http://www.cisco.com/en/US/customer/products/hw/contnetw/ps2083/products_configuration_example09186a00801b8018.shtml

You will find documents on load balancing at the following url.

http://www.cisco.com/cgi-bin/Support/browse/psp_view.pl?p=Hardware:CSS11000&s=Software_Configuration#Software_Samples_and_Tips

Gilles Dufour Fri, 11/07/2003 - 00:41
User Badges:
  • Cisco Employee,

http://www.cisco.com/en/US/products/hw/contnetw/ps2083/products_configuration_guide_chapter09186a00801159f2.html#1005706


SEe figure B6 in the example above.

This is an example with multiple SCA.


I confirmed you need separate vlan for this setup to work - however I can't find the explanation anymore.


You can post your configs if you want, I'll review them.


Gilles.

Actions

This Discussion