ACE4710 A3(2.) High resource allocation denied count
We have 2 x ACE4710 appliance running in redundant mode, with LB1 hosting an active Context1 and a hot standby Context2, LB2 running a hot standby Context1 and active context2 - essentially to spread the load across the 2 boxes.
they'd been running without a hitch for the last 2 months they'd been deployed. But we'd bumped into a very weird issue lately - the health probe configured on Context2 seems to go down/up in rapid fashion at least once a day..upon closer inspection, it is evident that it's caused by a status change in the context's FT group.
Strangely enough, this only happens on Context2 while Context1 are humming along just fine..both contexts have similar number of VIP/health probes configured with just different ip addressing.
'show resource usage' shows an interesting finding (see attached). LB2 (where Context2 is active) shows high mgmt-traffic rate 'denied' count...but i'm not sure if what exactly this indicates or if it's related at all.
Re: ACE4710 A3(2.) High resource allocation denied count
same here..there're 6 ACEs in this environment and only those 2 are seeing excessively high mgmt-traffic rate..
there is no script running 'show tech' nor ANM. the devices are configured in CWLMS3.1 RME & DFM (not sure how often they poll) but I'd tried removing the devices from cwlms and the observation persists..
Before resorting to sniffer, i'm wondering what type of traffic will be categorised under 'mgmt-traffic rate' bandwidth resource? It is the class-map/policy-map that is set as type 'management'? Is it only that or there's also something else?
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...