We are having an issue with a service that is behind an bridge mode ACE. Wireshark traces show evidence of tcp port exhaustion on the servers. The connections to the 2 VIP (each share the same real servers) are from 2 NATed address (the "clients" are in our DMZ), one of the applications creates quick http gets to retrieve data from a sql server. When looking at the rservers there are a lot of connections that are in a Time_Wait state. The ACE is bridged mode, is it possible to do server-conn reuse on a bridge ace context. If is possible is the PAT requirement facing the real servers still needed.
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...