CSM or CSM-S and cat6500

[aliver]

Good day!

We have two CSS11503 working in VIP redundancy mode. But we want to increase power and port capacity and buy 2 CSM-S modules for our 2 cat6500 and configure it in VIP redundancy mode too. Is it possible?

and our first cat6500 has SUP2 and second cat6500 has SUP720. So what kind of CSM or CSM-S we can to buy? As I see in http://www.cisco.com/en/US/products/hw/switches/ps708/module_installation_and_configuration_guides_chapter09186a0080441264.html and in http://www.cisco.com/en/US/products/hw/switches/ps708/module_installation_and_configuration_guides_chapter09186a008022ff5b.html We can buy only CSM, not CSM-S. Is it correct?

Just we have only one free slot on both cat6500 and want to buy CSM-S, because SSL we need also.

Thanks!

[Gilles Dufour · Accepted solution]

the CSMS requires a Sup720.

There will be a next generation card that does firewall,loadbalancing and ssl at the same time.

This card should come out this month or next month.

Regarding redundancy, the CSM uses a box redundancy.

So, it is not per vip, but per box.

Gilles.

[aliver]

Thank you,Gilles, for your answer!

And is CSM now can terminate SSL traffic without SSL module or not? Or at least loadbalance SSL?

Thanks!

[Gilles Dufour]

the CSM can loadbalance SSL as SSL is a TCP protocol.

So, you can use the CSM to loadbalance SSL as a regular TCP protocol.

However, you can't ask the CSM to look for a any data in the SSL payload - like url or any http header info.

All the CSM can do is look for the SSLID in order to perform stickyness.

So, if you need to loadbalance based on HTTP info contained inside the SSL packet, you need an SSL module.

Gilles.

[aliver]

Thanks a lot,Gilles!

Perhaps,we'll wait for new generation modules. And now we'll continue to use CSS11503.