I have 2 CSS 11500 switches. Each CSS has an interface connecting to "outside" routers and another connecting to "inside" where the web servers resided. Both interfaces are running VRRP. CSS1 is the master of two VLANs. CSS2 is the backup. If the "inside" interface failed in CSS1, only the "inside" interface of CSS2 become the Master. The "outside" interface of CSS1 is still the Master. From what I understand, VRRP is similar to HSRP. How do I make the CSS1's "outside" interface failover? In other words, I want CSS2 to be the Master of both interfaces if either interfaces of CSS1 failed.
Since you set up redundant VIPs, the box should fail those VIPs to the other box if it loses communication to the services.
You should also track the upstream connections. Do this by specifying your upstream router or firewall as a service and using the "type redundancy-up" command. Then use the "ip critical service" command under your virtual router section to specify the upstream device.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...