Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Box-to-Box redundancy question ?

guys,

i have two CSS 11506 configured as Box-to-Box Master/Backup mode.

im trying to apply the commit_redundancy "argument" command from the Master CSS

the configuration has been sent to the Backuo EXCEPT the commands related to ssl certiface that the process fail:

associate rsakey

associate cer

thats because i have generate the cer and rsakey on each CSS with different names.

is there anything that can help me? or i have to re-generate the cer and rsakey again with the same name ??

please check the attached file that will clarify my point !!

please advice,

Thanks in advance

1 ACCEPTED SOLUTION

Accepted Solutions
Bronze

Re: Box-to-Box redundancy question ?

Dear Hasan,

Is great to know that the sync worked fine. It is an indicator that everything is ok.

If the config is the same in both boxes, SSL should work fine in the backup CSS as it is working on the master CSS.

Kindest regards,

Jose.

5 REPLIES
Bronze

Re: Box-to-Box redundancy question ?

Dear Hasan,

As you correctly said, having the SSL files with different names is definitely going to cause a failure on the sync script.

Unfortunately, the only way to fix this is by having the same certs and keys on both CSS'; but you don't need to create new certs and keys, as you can export the certs and keys you have on CSS1.

The command to export the certs off the CSS1 is: 'copy ssl..'

Here is the reference: http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_810/cmdrefgd/cmdgena.htm#wp1030885

Actually, if you create new certs and keys, there is a possibility that the files would have a different amount of bytes than the ones you have on CSS1, if that happens, the script would fail due to a different byte count between the CSS'.

Thanks & Regards,

Jose Quesada.

New Member

Re: Box-to-Box redundancy question ?

Dear Jose,

i have exported the files from CSS1 and importes them to CSS2,

but im trying now to apply commit_redundany command and still showing me failed to synch

here you have the output that i got:

CSS1# commit_redundConfig "10.0.207.18 -d -s"

Checking the disk space locally before continuing with the script.

COMMIT_REDUNDANCY Version: 4.6

Verifying that ip redundancy is activated on Master switch.

Verifying that app session is up with backup switch.

Making sure app session is up.

Seconds to wait before calling it quits: 120

Checking the disk space remotely before continuing with the script.

Config Sync Failed.

CSS1# commit_redundConfig "10.0.207.18"

Checking available disk space on systems ...

Verifying app and redundancy configs ... /|-\-

Previous synchronization still occurring on remote switch.

i tired to dissconnet and restart CSS2 (Backup) but still im getting that message "Previous synchronization still occurring on remote switch."

please advice,

Thanks,

hasan odeh

Cisco Employee

Re: Box-to-Box redundancy question ?

try the '-f' option for FORCE.

Also, since it failed the first time after checking disk space I would suggest to do a 'show disk' and see if you have empty space.

If not clear some of your log files or core files before running the config synch script again.

Gilles.

New Member

Re: Box-to-Box redundancy question ?

Gilles,

i tried the "-f" and its working fine now :-)

Jose

i tried also the import and export and i have no issue when doing the commit_redundConfig, all of the configuration replicated the to the CSS2 (Backup) including the CSS associate

but i didnot test the SSL request from the CSS2, but i think when it has been taken it should work, am i right ?

Thanks guys,

Bronze

Re: Box-to-Box redundancy question ?

Dear Hasan,

Is great to know that the sync worked fine. It is an indicator that everything is ok.

If the config is the same in both boxes, SSL should work fine in the backup CSS as it is working on the master CSS.

Kindest regards,

Jose.

328
Views
4
Helpful
5
Replies
CreatePlease to create content