Alright, I have a CSS11506 in the lab and I am trying to configure it into a reverse proxy config. So I would like to have all inbound http requests hit the CSS and then have it redirect to our web server on correct DMZ. Having never setup a CSS before I need some help.
- Is my service type proxy-cache, type redirect or type transparent cache ?
I know this should be fairly easy to do with the 11506. Can you also provide some docs explaining the config walkthru.
If requirement is simply to direct all http requests to an application's virtual IP (defined on CSS) to a group of web servers then you dont need to define any service type. The default "type local" will work for you.
transparent-cache/proxy-cache type services are needed when you are dealing with Cache engines instead of webservers.Redirect type service is used to redirect client's request to a diffrent host (using 302 messages).
So assuming the following, DMZ web server ip is 192.168.20.50 and VIP for CSS is 192.168.20.100, basically I would want to redirect all inbound http requests from 192.168.20.100 to the 192.168.20.50 using the following CSS config ?
ip address 192.168.20.50
add service rprox1
vip address 192.168.20.100
Like I said, never configured one yet so this is my first attemtp.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...