We have application servers who need to send mail to a pair of web servers, which are behind two 11501. And then the web server will lookup DNS and send the mail to the Internet.
We can ping between application servers and web servers without any problem.
But, we find that, from the application server, we CANNOT send mail to the real ip of the individual web servers. I think the reason is the return IP is changed to vip.
However, with content rules of port 25, from application server, we CAN send mail to the vip (of the two web servers), which CAN then forward the mail to each web server in round robin successfully. The short coming of the setup is the 11501 cannot failover if the smtp deamon of one of the web servers down. That means, smtp (mail service) has no resilience.
Is there any way that we can send mail from the application servers to the real ip of the web servers? In that case, resilience will be retained as UNIX sendmail will check the availability of smtp deamon.
And we have routes, which points all traffic (from outside) to the real IPs to the external VLAN. But it seems only ping is working. Other applications such as like SSH cannot make connection to real IP of the web server successfully.
However, the web server can ssh to servers of external network.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...