I have a pair of failover CSS 11503s and I need a technology answer. Is it possible to remove a service from a content rule without dropping the existing connections to the server? I simply want to be able to pull servers out of rotation for some of my VIPs and let the connections to them complete and disconnect on their own before doing some server resets. I know how to do this with an F5, but I'm not sure if the CSS has the same functionality and/or the proper process to do this. Can anyone help me out? Thanks in advance!
Try using the change service weight command in the content rule.
Dependent on the version you are running, a weight of zero in the content rule for this service will gracefully close the service to new connections for this content rule. It will also preserve sticky-table entries.
Changing the weight in the service to zero does similar but affects all content rules that the service is added to. I am not sure about the sticky-table entries in this case though.
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...