ohynderi

Member Since: Nov 18, 2010

English
ohynderi commented on Changing the air flow in Nexus 5596UP without interuption. in LAN, Switching and Routing 2 years ago

This is actually not supported to hot swap normal airflow fans an PSs with reverse airflow fans and...

ohynderi commented on Question Cisco ACE mode bridge - client side connect to servers in Application Networking 5 years ago

Hello agin!So in bridge mode, with below topology, servers should have their gateway pointing to...

ohynderi commented on ACE: reply to ping with loadbalance vip icmp-reply active in Application Networking 5 years ago

My mistake, you indeed need to have "loadbalance vip icmp-reply active" instead of "loadbalance vip...

ohynderi commented on ACE idle connections timeout in Application Networking 5 years ago

Even if normalization is disabled, idle timeout still applies. Only different (if not mistaken),...

ohynderi commented on ssl rewrite issue for IDM application in Application Networking 5 years ago

Just have a look at this:http://www.cisco.com/en/US/products/hw/modules/ps2706/...

ohynderi commented on ACE: reply to ping with loadbalance vip icmp-reply active in Application Networking 5 years ago

You should configure loadbalance vip icmp-replyinstead of loadbalance vip icmp-reply activeThanks,...

ohynderi commented on Question Cisco ACE mode bridge - client side connect to servers in Application Networking 5 years ago

Technically yes you can. A couple of questions:- Will 10.1.40.50 be part of a serverfarm on ACE (...

ohynderi commented on ACE20 - boolean combination of probes? in Application Networking 5 years ago

Hello!You can configure the ACE so that a rserver remains up as long as there is one probe up. See...

ohynderi commented on ACE 4710 FT ip address change in Application Networking 5 years ago

To avoid any risk, i would proceed as following:1/ Make sure that all contexts on primary have...

ohynderi commented on ssl rewrite issue for IDM application in Application Networking 5 years ago

You basically need to rewrite the action-list so that it doesn't matchhttp://stagesupport.netap.com...

ohynderi commented on ssl rewrite issue for IDM application in Application Networking 5 years ago

I assume you didn't apply the rewrite action to the LB-rtp-login-stg-S80 policy. Do you maybe have...

ohynderi commented on ssl rewrite issue for IDM application in Application Networking 5 years ago

Can you show me your multi-match policy as well? I guess you have a different class for http and...

ohynderi commented on ACE synch fail from device manager in Application Networking 5 years ago

Hi Vikil,Can you tell me if both active and standby ACE are still in sync? Check the "sh ft group...

ohynderi commented on Mgt Access to servers Behind ACE & Default Gateway in Application Networking 5 years ago

In bridge mode, the server gateway should be the router on the client vlan and not the ACE IP.You...

ohynderi commented on ACE FT Vlan Down in Application Networking 5 years ago

Hi again!Ok, i believe i have found where the issue is…"sh gi 1/4" shows that the port got indeed...

ohynderi commented on Mgt Access to servers Behind ACE & Default Gateway in Application Networking 5 years ago

Hello!You said "I can access the http & https vips". I guess you meant "I can not access the...

ohynderi commented on GSS to CSS, convert ICMP keepalive to shared KAL-AP in Application Networking 5 years ago

Every GSS (including primary and standby GGSM) sends keepalive individually to the Answers. So, if...

ohynderi commented on ACE Design Question in Application Networking 5 years ago

Tom,Just pay attention to not have asymmetric routing (ie traffic from server to client bypassing...

ohynderi commented on ACE FT Vlan Down in Application Networking 5 years ago

Tom,Ft group 1 on ace2 should be configured with the Admin context and put inservice. What if you...

ohynderi commented on ACE FT Vlan Down in Application Networking 5 years ago

Thanks Tom,Would be better if you could send me a show tech from both ACEs.Thanks,Olivier

ohynderi commented on ACE FT Vlan Down in Application Networking 5 years ago

Hi Tom,It looks the vlan and the physical interface are up. You can anyway check the following to...

ohynderi commented on Hash cookie predictor with ACE Cookie insert in Application Networking 5 years ago

Your understanding is correct, in case a request doesn't contain the cookie name configured in the...

ohynderi commented on ACE Design Question in Application Networking 5 years ago

Hello,From ACE perspective, it doesn't matter if the VIPs are part of an interface subnet or not....

ohynderi commented on Unable to connect to ACE30 from 3845/2811 -ssh - Invalid modulus length in Application Networking 5 years ago

What is the ssh key size that you have on the ACE? For this just have a look at the "sh ssh key"...

ohynderi commented on Hash cookie predictor with ACE Cookie insert in Application Networking 5 years ago

If an http request doesn't contain the expected cookie, ACE should do round robin. In that case,...

ohynderi commented on 2 quest ssl offload and DR in Application Networking 5 years ago

Hi,1/ ACE can be configured to setup a second ssl tunnel and encrypt data between ACE and server....

ohynderi commented on Hash cookie predictor with ACE Cookie insert in Application Networking 5 years ago

Hi,Why do you need hash predictor with cookie insertion?The predictor algorithm will only be used...

ohynderi commented on Question about CSM and SSLM with NAT in Application Networking 5 years ago

Hi,Both CSM and SSLM can be configured to perform client nat. Is the traffic hitting the sever...

ohynderi commented on ACE NAT configuration - is it possible to use a different source PAT IP per rserver in a serverfarm? in Application Networking 5 years ago

Hi Tia,I don't think we can do this. We can easily configure a different nat pool per serverfarm...

ohynderi commented on GSS to CSS, convert ICMP keepalive to shared KAL-AP in Application Networking 5 years ago

Hi,With KAL-AP Keepalive, GSS only needs connectivity to the primary / secondary ip address...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Hello Surya,The SSL/TLS protocol allows clients to re-use same key materials for multiple TCP...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Rob,ACE can indeed sync with the clock of the chassis if chassis is configured with "clock calendar...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Hello Bryan,What kind of issues are you facing?Common problem with radius load balancing is that...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Hi Rob,When troubleshooting cookie-insertion issues, best is to look at a network capture. With...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Hi again George,With cookie insertion, ACE generates a cookie value based on the serverfarm and the...

ohynderi commented on ASK THE EXPERTS:Configuring and troubleshooting Session Persistence on Application Control Engine in Application Networking 5 years ago

Hello George,In case ACE receives a request containing a cookie value but the corresponding server...

ohynderi commented on GSS- domain and subdomain in Application Networking 5 years ago

Hello David,GSS doesn't announce anything. It responds to dns queries that it receives based on his...

ohynderi commented on Traceroute not working on ACE in Application Networking 5 years ago

Fariha,Applying the icmp error inspect should do the trick. Just make sure to apply the policy on...

ohynderi commented on Cisco ACE Module in Bridge Mode in Application Networking 5 years ago

Hello Graham,Can you maybe write a basic l3 network diagram with the ace, fwsm, the server and the...

ohynderi commented on SIP (Compact Form) in Application Networking 5 years ago

Hi Ivan,Rfc states the following:"A header field name MAY appear in both long and short forms...

ohynderi commented on ACE dropped conns problem (Bridged mode) in Application Networking 5 years ago

Abdelaziz,I understand that the example i gave to you is in routed mode, but, if not mistaken, you...

ohynderi commented on ACE dropped conns problem (Bridged mode) in Application Networking 5 years ago

Abdealziz,Did you check this?http://www.cisco.com/en/US/products/hw/modules/ps2706/...

ohynderi commented on ACE dropped conns problem (Bridged mode) in Application Networking 5 years ago

Very likely you have asymetric routing (ie traffic from server to client bypassing the ACE). If...

ohynderi commented on ACE - health check for link on two ports in Application Networking 5 years ago

Hello Gavin,What about this:rserver host server1  ip address 10.10.10.1  inserviceprobe http...

ohynderi commented on ACE dropped conns problem (Bridged mode) in Application Networking 5 years ago

Hello Abdelaziz,I am not sure to understand your issue. Are all connections to vip (172.22.22.130)...

ohynderi commented on https to https redirection on Cisco ACE in Application Networking 5 years ago

Hello Karthik,Can you show me what you have configured so far?Thanks,Olivier

ohynderi commented on ACE Virtual context -TACACS authentication issue in Application Networking 5 years ago

Hello Parvees,What value did you set to shell attrribute on your ACS? It should be like:shell:ABC=...

ohynderi commented on ACE connection limit and remote TCP security scans in Application Networking 5 years ago

Idle timeout should be working even if normalization is disabled. Will those connections stay till...

ohynderi commented on aces and soap in Application Networking 5 years ago

ACE won't look at the http payload exepted if you have an ACE 4710 configured with application...

ohynderi commented on ACE connection limit and remote TCP security scans in Application Networking 5 years ago

Hi,With normalization disabled, only solution that i see to "mitigate" this is configuring a very...

Bio












ohynderi's Stats

Points34
Discussion started 0
Answers marked as Correct 4
Endorsed 0
Content Rated 0