×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Gilles Dufour

Member Since: Feb 21, 2002

User Badges:
  • Cisco Employee,

English
Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

You can use direct connection if you want. DRA are not mandatory.However they offer some...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

The config is what I sent you for pgw.qci-qos-mapping allows you to set the user dscp (inner header...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

policing and marking are done separately.If you need to mark your traffic, you can do it in many...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

diameter for Gx and Gy can be very chatty.  So indeed you need a robust server to handle all the...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

Did you capture sniffer trace to check if there is any packet drops on the network ?Are you using...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility with Gilles Dufour in Security and Network Management 2 years ago

I believe you are talking about virtual-apn http://www.cisco.com/c/dam/en/us/td/docs/wireless/...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Indeed the ASR5k could also be configured with eWAG service to interconnect Wifi world with LTE.It...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

I believe the structure is like this : * 31  30 29          24 23          18 17               9 8...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Here is a potential solutiona) “rau-inter restrict access-type umts/gprs all”  To restrict Inter...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Assuming you have LTE environment and Wifi network, what you need  is a gateway between the 2.The...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

SAEGW is a combination of SGW/PGW services, once you add following three lines SGW/PGW services (in...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Hi Henry, The username displayed in monitor info can be received in “Protocol Config Options” IE...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Hi Evan,yes it is possible but you need 14.0 or higher version.You need a version which fixes ddts...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

There is hidden commands to access a linux shell of every card inside the chassis.From the linux...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Evan, when you have redundancy, not just on ASR5k, you typically have 2 options.One is active-...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Intra E-UTRAN Handover is used to hand over a UE from a source eNodeB to a target eNodeB using X2...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

As far as I know you can't bypas SGW for inter UE communication using X2 interface.The main purpose...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Yes, we do have debugging like feature in Staros.It's called 'monitor subscriber' and 'monitor...

Gilles Dufour commented on Ask the Expert: 3GPP Mobility in Security and Network Management 3 years ago

Thanks for the first question.In terms of troubleshooting, typically I will first identify the...

Gilles Dufour commented on Out of Sockets error message on ACE Module in Application Networking 5 years ago

This is not a cosmetic issue.If you are running out of sockets, you can create new management...

Gilles Dufour commented on Cisco CSS Load Balance Issues in Application Networking 5 years ago

Rhe URL command is not mandatory.If your site is slow, you should first check if it slow only when...

Gilles Dufour commented on Cisco ACE SSL Front-End of non HTTP traffic in Application Networking 5 years ago

yes this should work ok.Gilles.

Gilles Dufour commented on Cisco ACE Health probe in Application Networking 5 years ago

there is an example in the configuration guide :http://www.cisco.com/en/US/docs/interfaces_modules/...

Gilles Dufour commented on CSS11503 SAM module on 99% utilization in Application Networking 5 years ago

sounds like there is way too much traffic going through this CSS.You will start seeing drops and...

Gilles Dufour commented on Bypass Traffic with source and destination from Loadbalancing in ACE in Application Networking 5 years ago

sounds identical to https://supportforums.cisco.com/thread/2161495?tstart=0

Gilles Dufour commented on CSS to transparent Proxy load-balancing in Application Networking 5 years ago

no concern.  Should work as well.Gilles.

Gilles Dufour commented on Source Base Policy in Application Networking 5 years ago

honeslty, that's going to be painful to setup.  If possible, let the proxy/cache decide what to...

Gilles Dufour commented on CSS to transparent Proxy load-balancing in Application Networking 5 years ago

check this solution :http://www.cisco.com/en/US/products/hw/contnetw/ps789/...

Gilles Dufour commented on ACE module is dropping packets and closing connection. in Application Networking 5 years ago

Hello,you can verify if your traffic will  be permitted with the following command : show np 1...

Gilles Dufour commented on CSM to ACE migration /client vlan gateway and 0.0.0.0 route on ACE/ in Application Networking 5 years ago

I'll try to make it sound clear.First, the CSM actually uses only one default gateway for the...

Gilles Dufour commented on Connectivity Issue - Server Network in Application Networking 6 years ago

capture the output of the command "show tech" from the context having the issue and post it here....

Gilles Dufour commented on CSS with single SSL module.. balance option needed? in Application Networking 6 years ago

You're correct.There is no need to specify the application type as ssl and the advanced-balance...

Gilles Dufour commented on Multiple certificates on the same shared SSL VIP possible using a CSS? in Application Networking 6 years ago

How do you know which certificate to use ???The reason it's not possible is because the SSL...

Gilles Dufour commented on Connectivity Issue - Server Network in Application Networking 6 years ago

Get us a show tech.Also check the advanced troubleshooting guide in the blog section.Gilles.

Gilles Dufour commented on ACE MODULE IN BRIDGE MODE NOT LOADBALANCING in Application Networking 6 years ago

Check my troubleshooting guide on this forum.There are few things to do to narrow down the issue....

Gilles Dufour commented on Problem with ACE and Internet Explorer 8 in Application Networking 6 years ago

I would suggest to test version A2(3.3)If the problem persists report it to the TAC.But I believe...

Gilles Dufour commented on when to use action-list vs redirection in Application Networking 6 years ago

If your server is already sending a redirect, you can use the action-list solution.The "Location"...

Gilles Dufour commented on ACE 4710 Multiple Server Farms and Multiple SSL Certs? in Application Networking 6 years ago

You can upload as many certificates/keys as needed.You then bind the key and cert under an ssl-...

Gilles Dufour commented on Sorry Server for CSS 11500 in Application Networking 6 years ago

Create a redirect service and use it in place of your current sorryserver.This way, you redirect...

Gilles Dufour commented on Redirect based on list of source IP ranges in Application Networking 6 years ago

Yes, you can use an HTTP class-mapScimitar1/User1(config)# class-map type http loadbalance...

Gilles Dufour commented on syslog and snmp posibilities with multiple contexts in Application Networking 6 years ago

You can't get the syslog from other contexts into the admin context.And you can only send SNMP...

Gilles Dufour commented on Best stick option for End-to-End SSL in Application Networking 6 years ago

This is the only solution when you need to work with proxy servers.ACE should not modify the...

Gilles Dufour commented on CSS multiple websites on same IP address in Application Networking 6 years ago

The services are configured with ip addresses.You can use the same services with whatever content...

Gilles Dufour commented on CSS multiple websites on same IP address in Application Networking 6 years ago

First, you need to set your dns server to response with the same vip address for the 2 domain names...

Gilles Dufour commented on CSS as default gateway in Application Networking 6 years ago

Problem is that asymetric routing is not supported with loadbalancer.Because they are statefull...

Gilles Dufour commented on establishing a connection to the VIP through an optimizer in Application Networking 6 years ago

ACE is only listing the flows that come in.So, on the backend (server side), the flow that will...

Gilles Dufour commented on FTP Transfer failure after 1 hour through transparent ACE 4710 in Application Networking 6 years ago

What version do you run ?As long as traffic is going through the data channel, the FTP connection...

Gilles Dufour commented on establishing a connection to the VIP through an optimizer in Application Networking 6 years ago

Not sure to understand the question.But on ACE you should see 2 entries.  One flow client-> VIP...

Gilles Dufour commented on CSS 11500 - Old OpenSSH Version? in Application Networking 6 years ago

We do not upgrade the openssl, so the version does not change.All known vulnerabilities are fixed...

Gilles Dufour commented on CSM Sync with diff in Application Networking 6 years ago

The ACE module does the diff synch by default.You activate config synch with the following command...

Bio

Joined Cisco Systems Belgium in 1997 after completing my 5 years engineering school at University of Liege (Belgium).
After 6 months of intensive training, I joined the TAC.
One year later, I got my first CCIE in routing/switching.
In 2000 I moved to Denver Colorado as consulting engineer to assist Cisco's customers deploying MPLS/VPN.
In the meantime, I got the Security CCIE.
Two years after that I came back to belgium to work on loadbalancers (CSM and CSS).
I'm now technical leader inside the Application Datacenter BU working primarily on the ACE module and appliance.

User Badges:
  • Badge.
    Cisco Employee

Gilles Dufour's Stats

Points7224
Discussion started 0
Answers marked as Correct 663
Endorsed 1
Content Rated 140
Website: