Anyone have any experience with load balancing with CSS 11000s in one-armed mode and SCA 11000s in non-tranpareent mode with .NET servers? We're seeing delays on the .NET servers when switching to secure pages, but not on "legacy" W2K servers.
You could try having a sniffer setup in front of the CSS and between the CSS and the webservers to see where the latency is being introduced. Check If you go directly to the webservers without using the CSS is it much faster. show system-resources will show you CPU usage. You could also check if the delay occurs before the transaction from the .NET servers contacts the SCAs. A trace might help you isolate the problem area and then take appropriate action..
As it turns out the solution was, like many, a very simple one. The server guys didn't tell me that the problem was intermittant until yesterday; I was first told that it never worked. So I took a new look at the 3 SCAs to see if one or more was mis-configured and found that one had an incorrect remoteport value on an ssl server. Duh, my typo. This explains why it was intermittent as it only failed when one of three SCAS was chosen by the CSS and the remoteport value didn't match the content rule. It also explained why the legacy servers had no problems as they used different ssl servers/content rules.
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...