Hi, I have a need to terminate 2 SSL connections on our CSS11506. The backend web connections are http 80. In order for this to work do the web servers need to be connected to the CSS switch ports or can I have then located on another segment (seperate switch) and simply have the CSS redirect to them via in place routing.
Thanks Jon, for some reason when I move the servers off the CSS module and onto the same segment but different switch I can no longer make the connection.
The other problem I noticed after sniffing the traffic is that the client arps to the CSS VIP for the HTTPS connection, then makes the HTTP connetion directly to the backend server. Which is not what I want, I need the CSS to be handling all of the communication to the backend web servers.
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...