Why do we configure the Redundant Interface in CSS Public Face

Hi,
I have a question : Why do we configure the redundant interface in a CSS facing the public side of a CSS.
I understand the need for the interface in the server side though. Please refer to the URL below;
http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_810/redundgd/vipredun.htm#wp1063393

this is not a requirement if your vips belong to the public vlan subnet.
But if your vip addresses are from a different subnet, then the upstream router needs a route pointing to the CSS redundant interface ip.
Gilles.

Similar Messages

Having issues after installing Essbase V9.3.1,configuring the SQL interface

I am having issues after installing Essbase V9.3.1 and configuring the SQL interface. we are using UNIX/AIX box for our Essbase server and UDB DB2 9.1 SP6 as our SQL Interface.
When tried to run an ESSCMD script to perform BUILDDIM operation on Essbase application using the load rule (with the SQL interface), got the error as recorded in the application log file and is attached at the bottom and the .odbc.ini file on the server looks as follows.
Can somebody tell me whether .odbc.ini needs any correction or what else should I do to correct the issue and able to work thru using SQL interface? Appreciate any help provided in this regard. Thanks,
.odbc.ini
[ODBC Data Sources]
DOLU003=IBM DB2 ODBC DRIVER
[DOLU003]
Driver=/home/db2inst1/sqllib/lib/libdb2.a
Database=DOLU003
[ODBC]
Trace=0
TraceFile=odbctrace.out
InstallDir=/home/db2inst1/sqllib/odbclib
[Mon Apr 20 15:16:29 2009]Local/New_Bud/Budget/Olapadm/Info(1021020)
Cannot read SQL driver name for [] from [home/hyperion/.odbc.ini]
[Mon Apr 20 15:16:43 2009]Local/New_Bud/Budget/Olapadm/Info(1013091)
Received Command [SQLRetrieve] from user [Olapadm]
[Mon Apr 20 15:16:43 2009]Local/New_Bud/Budget/Olapadm/Info(1021020)
Cannot read SQL driver name for [] from [home/hyperion/.odbc.ini]
[Mon Apr 20 15:16:43 2009]Local/New_Bud/Budget/Olapadm/Info(1021004)
Connection String is generated
[Mon Apr 20 15:16:43 2009]Local/New_Bud/Budget/Olapadm/Info(1021041)
Connection String is [DSN=DOLU003;UID=...;PWD=...]
[Mon Apr 20 15:16:43 2009]Local/New_Bud/Budget/Olapadm/Info(1021006)
SELECT Statement [SELECT * FROM DB2OLADM.BD_DIMENSION_DEF_PC WHERE DIMENSION_ID
= 12 ORDER BY TREE_NODE_NUM, PARENT_NODE, CHILD_NODE] is generated
[Mon Apr 20 15:16:44 2009]Local/New_Bud/Budget/Olapadm/Info(1021013)
ODBC Layer Error: [7] ==> [[DataDirect][ODBC 20101 driver]6013]
[Mon Apr 20 15:16:44 2009]Local/New_Bud/Budget/Olapadm/Info(1021014)
ODBC Layer Error: Native Error code [0]
[Mon Apr 20 15:16:44 2009]Local/New_Bud/Budget/Olapadm/Error(1021001)
Failed to Establish Connection With SQL Database Server. See log for more information
--------------------------------------------------------------------------------------------------------------------------------------------

I had similar errors when first setting up the SQL interface. Are you on a 64 bit operating system on the essbase server? If so Essbase needs to use the 32 bit odbc driver, not the default 64 bit driver.
The 32 bit driver is still available here SysWOW64\odbcad32.exe <-----This is the 32 bit (Use)
The Administrative tools by default uses system32\odbcad32.exe <----This is the 64 bit (Don't Use)
Once I opened the 32 bit driver interface directly and set it up the errors went away.

How to configure the web interface of service desk

Hi All,
We are currently doing a configuration on solman service desk. I am on a stage where in i need to use the web interface of service desk via tcode notif_create_bsp. However, every time i call the transaction code (call the url) i cant view the web. Only an error the "Network Access Message: The website cannot be found".
I already activate needed services and already publish
SIAC_PUBLISH_ALL_INT but it still doesnt work.
I might have missed some configs/procedure on how to do it correctly.
My questions are.
1. How am i going to know the qualified domain name
of the Web AS for solman? How to configure it?
2. Can anyone give me some guide and any step by step documentation/procedure on this.
You help/suggestion will be very much appreciated
Thank you very much,
Ice

Hi,
+"Check the following 2 things. See if the port 8000 is open and in the url for the BSP in internet explorer, replace the host name with the IP address of your Solman server.+
+"+
That was a helpful tip. I change the host name with the ip address ofour solman server. However, upon login, it promts me to enter username and password. I've tried to login using my solman password but it shows an error like this.
Business Server Page (BSP) error
What happened?
Calling the BSP page was terminated due to an error.
SAP Note
The following error text was processed in the system:
Die URL enthält keine vollständige Domainangabe (10.123.161.125 statt 10.123.161.125.).
Exception Class CX_FQDN
Error Name
Program CX_FQDN=======================CP
Include CX_FQDN=======================CM002
ABAP Class CX_FQDN
Method CHECK
Line 10
Long text -
Error type: Exception
Your SAP Business Server Pages Team
Is there anything i need to configure so that i can maintan the username and password?
Thank you for your assistance,
Ice

In Multimapping how can we configure the Receiver , Interface Deter for BPM

Hi Friends ,
I am trying the the BPM scenario using Integration Process
BpmPatternCollectTime
from SAP BASIS ® SAP BASIS 7.00 in the namespace http://sap.com/xi/XI/System/Patterns
I have done the scenario like the above . I have followed all the Steps which are used in above scenario.
I am using a File Sender Adapter and Receiver Adapter .
It is Successfully picked up the File but nothing is happening after that .
I am using two receiver Determination one from Ob to IP and other from IP to FIleReceiver ( IB) .
But, I am Getting error as Block1 (No agent) Error in the PE graphical diagram
I have checked in SWWL my Integration Process Return code is "0"
The steps Which i have followed in BPM are
1. Block with Deadlkine branch and Exception handler( as TimeOut Exception)
Block Start and Block End as New Transaction
2. Inside Block infinite Loop which contains Receive step ( Actives the Correlation ) and Multiline Container element which appends the Messages with CollectMessage
3. Transformation Step
It creates the New Transaction and Interface Maping from CollectMessage List to New Mesage
4. Send Step
It sends the New Message . It creates the New Transaction .
Can you Please tell me how to configure the Receiver and Interface Determination for the above scenario ?
Regards.,
V.Rangarajan

Hi Ranga
have a look at these
you can ref: this link to find example where a receiver determination step is used in BPM- http://help.sap.com/saphelp_nw04/helpdata/en/43/6211b11c895f6ce10000000a1553f6/content.htm
More abt RD step in BPM - http://help.sap.com/saphelp_nw04/helpdata/en/14/d5283fd0ca8443e10000000a114084/content.htm
if useful pls reward

Why "Setup" or "configure" the AX?

Probably a dumb question, but I'm just trying to understand the wireless world a bit more....
I'm reading everywhere that I would have to setup or configure the AX or any wireless router for that matter. I don't understand why? Is it just "turning on" the router? I'm asking this because I never have to setup or configure a wireless connection anywhere else..ie, coffee shop.
And what about taking the AX to a hotel room or to a friends house....Would it have to be setup each time?
Thanks for any help. Just trying to understand it a bit more. If I get a AX, I want to be able to take it with me AND allow other users (PC included) to use it.

hi hendogger,
wireless routers need some configuration depending the way you want to operate them. connecting to internet can be done by several means; wirelessly, DSL, cable, ethernet...
First of all, the router must be configured in order to negociate an internet connection with you internet service provider; therefore you need to setup your account information.
The, if you want to active the wireless broadcast, you may/must want to configure encryption that will be compatible with your computers; WPA, WEP, etc.
Then, you may want to configure the built-in firewall by redirecting and/or openning port or for remote access.
since wireless router have plenty option and can work in various way, you need to configure them. but still, no big deal given you can read its user manual.
the airport express allow you to have multiple configuration on it so you do not have to configure each time you move to a different location.

Configuring the Network interface settings in E250

Hi All ,
I have installed a Solaris 9 in E250. We are not able to bring that in network.
We are able to ping the local ip address and not able to reach the gateway address.
I checked the NIC settings, the link_mode is half duplex and link_status is 0 and link_speed is 10 mbps.
and also i have checked the port status in Layer 3 Switch, the port is half duplex and speed 10 mbps.
Please advice how to resove this is issue. Your reply is highly appreciable.
Regards.
R. Rajesh Kannan.

Try setting ur layer 3 switch port settings to 100FD and autonegotiate.

Why does BC reorder the head content (meta,css,js)?

The HEAD of my HTML document is within the master page template. Within the HEAD is meta tags, css links, and js references. The order of this content is changed when the system renders a page. Why does the system do this?
M.

You can not control the head BC sorts at the moment.
Change it to -
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
And it should stay right after the head for that bit though.

Ability to ping redundant interface IP address

Hi,
I have this setup for our content switches.
Primary F/W --> Primary CSS --> Local Switches
| |
| |
Secondary F/W --> Secondary CSS --> Local Switches
This is the relevant configuration.
Primary CSS
circuit VLAN4
ip address 192.168.76.4 255.255.255.0
ip virtual-router 4 priority 101 preempt
ip redundant-interface 4 192.168.76.254
Secondary CSS
circuit VLAN4
ip address 192.168.76.5 255.255.255.0
ip virtual-router 4 priority 90
ip redundant-interface 4 192.168.76.254
The problem is that the Secondary F/W can not ping the redundant interface IP address via the secondary path when all devices are in normal mode.
Is this normal?
The ping is occuring for firewall failover checking.
Thanks,
Ben

it should work.
Your diagram does not display very well, so I don't know where are the | links.
What should be the path of traffic from secondary firewall redundant-interface ?
Is the traffic going to 1 CSS and being bridge to the 2nd CSS ?
If that's the case, you need the command 'ip uncond-bridging' on both CSS to force CSS to bridge first and then route.
Regards,
Gilles.

Reg. Redundant interfaces in ASA 8.0

Hi
In ASA 8.0,I have following queries related to redundant interfaces
a)While configuring redundant interface can the redundant interface again be divided into logical interface like red1.1 , red1.2 ?
b)Is Redundant interface supported in the Multiple context mode
Regards
Ankur

Yes Ankur,it is possible.
##snippet##
interface Ethernet0/0
shutdown
no nameif
no security-level
no ip address
interface Ethernet0/1
speed 100
nameif inside
security-level 100
ip address 192.168.16.19 255.255.255.128
ospf network point-to-point non-broadcast
ospf message-digest-key 123 md5
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
interface Ethernet0/3
nameif null0
security-level 50
ip address 10.2.1.1 255.255.255.0
interface Management0/0
no nameif
security-level 0
no ip address
interface Redundant1
member-interface Ethernet0/0
member-interface Ethernet0/2
no nameif
no security-level
no ip address
interface Redundant1.1
vlan 32
no nameif
no security-level
ip address 1.1.1.8 255.0.0.0
Regards,
Sushil

ASA Redundant interfaces with stack switches

Hi All,
we have two ASA 5510 connected in failover, and a pair of cisco 2960s switch connected in stack.
Currently one interface of primary ASA is terminated on switch1 and a interface from standby is connected to switch2 as Inside, and switch1 and switch2 are in stack.
for redundancy purpose i want to use multiple interfaces of ASA for inside , so first i thought to use etherchannel , but it has a limitation that , it cannot be terminated on stack switch(as per cisco document http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/general/interface_start.html ).
So my question is :
1. can we use redundant interface feature where 2 physical interfaces combined to a redundant interface (eg interface redundant 1) for inside redundancy purpose.
2. Can these ports from primary/standby ASA terminated on stack switches (2960s), will this work (if the switch with active port goes down, will the other port take over in the redundant interface with the other switch).
I have attached the nw diagram,
Regards,
Ashraf

Hello Ashraf,
1. can we use redundant interface feature where 2 physical interfaces combined to a redundant interface (eg interface redundant 1) for inside redundancy purpose.
Sure, you can. That's the whole purpose of the feature.
2. Can these ports from primary/standby ASA terminated on stack switches (2960s), will this work (if the switch with active port goes down, will the other port take over in the redundant interface with the other switch).
It would make sense if that happens, as the status of the interface will be on a different state than up/up so failover to the other interface will be triggered,
Regards,
Julio

CSS redundant interface and DNS server

We're attempting to implement a pair of CSS's using redundant ASR and GSLB where the CSS's act as DNS servers.
But I'm not sure if the 2 features are compatible. The CSS's answer DNS queries to their direct interface but not the redundant interface.
Does anyone have any suggestions or work-arounds? We're running version 8.20.
TIA,
Dan

Dan doing some research I can see that the option to configure redundant-interface to resolve dns queries is not included on CSS 11500 series, this from the documentation.
On the document for CSS 11000 series that I provided before shows:
Configuration Requirements and Restrictions
The following requirements and restrictions apply to the configuration of this feature.
â¢You can configure this feature only on Cisco 11000 series CSSs (not 11500)
If I look at the redundant-interface configuration on old CSS 11000 series I see the option for dns:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11000series/v6.10/configuration/advanced/guide/VIPRedun.html#wp1067528
Look at this line:
dns-server - Keyword that enables the CSS to respond to DNS queries destined for the redundant interface IP address. For more information, see the "Configuring a Redundant Virtual Interface to Respond to DNS Requests" section.
On new CSS 11500 series this option is not available:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/VIPRedun.html#wp1067528
I am trying to find if there is any workaround but so far semms that is expected to miss this feature on CSS11500.

Why use *31L in the following code?

Why use *31L in the following code?
* {@inheritDoc}
public int hashCode()
return (int) ((long) getAreaCode() * 31L + getLocalNumber());
public class PhoneNumber
        implements PortableObject
    // ----- constructors ---------------------------------------------------
    * Default constructor (necessary for PortableObject implementation).
    public PhoneNumber()
    * Construct a Phone.
    * @param nAccessCode   the numbers used to access international or
    *                      non-local calls
    * @param nCountryCode the numbers used to designate a country
    * @param nAreaCode     the numbers used to indicate a geographical region
    * @param lLocalNumber the local numbers
    public PhoneNumber(short nAccessCode, short nCountryCode,
            short nAreaCode, long lLocalNumber)
        m_nAccessCode = nAccessCode;
        m_nCountryCode = nCountryCode;
        m_nAreaCode    = nAreaCode;
        m_lLocalNumber = lLocalNumber;
    // ----- accessors ------------------------------------------------------
    * Return the access code.
    * @return the access code
    public short getAccessCode()
        return m_nAccessCode;
    * Set the numbers used to access international or non-local calls.
    * @param nAccessCode the access code numbers
    public void setAccessCode(short nAccessCode)
        m_nAccessCode = nAccessCode;
    * Return the country code.
    * @return the country code
    public short getCountryCode()
        return m_nCountryCode;
    * Set the country code.
    * @param nCountryCode the country code
    public void setCountryCode(short nCountryCode)
        m_nCountryCode = nCountryCode;
    * Return the area code.
    * @return the area code
    public short getAreaCode()
        return m_nAreaCode;
    * Set the numbers used indicate a geographic area within a country.
    * @param nAreaCode the area code
    public void setAreaCode(short nAreaCode)
        m_nAreaCode = nAreaCode;
    * Return the local or subscriber number.
    * @return the local or subscriber number
    public long getLocalNumber()
        return m_lLocalNumber;
    * Set the local or subscriber number.
    * @param lLocalNumbeer the local or subscriber number
    public void setLocalNumber(long lLocalNumbeer)
        m_lLocalNumber = lLocalNumbeer;
    // ----- PortableObject interface ---------------------------------------
    * {@inheritDoc}
    public void readExternal(PofReader reader)
            throws IOException
        m_nAccessCode = reader.readShort(ACCESS_CODE);
        m_nCountryCode = reader.readShort(COUNTRY_CODE);
        m_nAreaCode    = reader.readShort(AREA_CODE);
        m_lLocalNumber = reader.readLong(LOCAL_NUMBER);
    * {@inheritDoc}
    public void writeExternal(PofWriter writer)
            throws IOException
        writer.writeShort(ACCESS_CODE, m_nAccessCode);
        writer.writeShort(COUNTRY_CODE, m_nCountryCode);
        writer.writeShort(AREA_CODE, m_nAreaCode);
        writer.writeLong(LOCAL_NUMBER, m_lLocalNumber);
    // ----- Object methods -------------------------------------------------
    * {@inheritDoc}
    public boolean equals(Object oThat)
        if (this == oThat)
            return true;
        if (oThat == null)
            return false;
        PhoneNumber that = (PhoneNumber) oThat;
        return getAccessCode() == that.getAccessCode() &&
               getCountryCode() == that.getCountryCode() &&
               getAreaCode()    == that.getAreaCode()    &&
               getLocalNumber() == that.getLocalNumber();
    * {@inheritDoc}
    public int hashCode()
        return (int) ((long) getAreaCode() * 31L + getLocalNumber());
    * {@inheritDoc}
    public String toString()
        return "+" + getAccessCode() + " " + getCountryCode() + " "
                   + getAreaCode()   + " " + getLocalNumber();
...

31 is a nice prime number that is used here to decrease hash collisions
thanks,
-Rob

Use of the second interface

Hi,
I just configured the first interface of my C150 ESA with ip address, default gateway,listener, RAT and SMTP routes. I want my IronPort to handle mail for another domain with a totally independant netwotk (subnet and mail servers...). Can I configure the second interface the same way I configured the first one (obviously with all the good settings...;-)) ? Does it work? Is there no problem of IP or SMTP routing ?
To be short, I want to do two "one interface configuration" scheme with my ESA (which has two physical interfaces) and not a "two interfaces configuration" scheme
Thanks,
Vincent

Vincent - should be ok to do this. You have two options to do this:
1. Use the 2nd NIC port and assign IP.
2. Use the virtual gateway feature to get this 2nd IP address onto the network and then create a new listener on the virtual interface..this is much simpler and less work.
Use the interfaceconfig CLI command or in the GUI to do this. Bind the new interface with it's unique DMZ ip onto the same network card as used for the previous interface (data 1 i assume).
Option 2 is much easier
:wink:

CSS redundant-interface ping response

Hi,
I just wan't to make a simple question:
Should the css11151 respond to ping requests made to a redundant-interface?
If yes, what can be the reason for the redundant interface, not being responding to ping requests?
Thanks in advance,
Regards,
LR

Hi,
Did you ever find solution to the issue.
I have 11503 and I have same problem, I cannot ping the redundant-interface address from the directly connected switch.
It works for first few seconds when the CSS reboots or interface bounces then stops.
Any ideas?
Thanks

Possibility of adding the 3rd interface as a 2nd Public interface?

Is it possible, with VPN 3030, to configure the 3rd interface (which is labeled as "External" and, is usually used for "management", I assume) as another Public interface? So that two different kinds of VPN connections can be physically separated....
Any help and pointers will be much appreciated! -Bill

Hi Aamir,
I am having problem to understand the use of External interface of VPN3000.
Does it mean I can have a VPN3000 with two Providers? Public interface terminates to ISP 1 and External interface terminates to ISP 2 ?
Regarding the routing (only one default gateway) does it mean the following traffic flow ?
1. Incoming traffic from ISP 1 will go to the Public interface and outgoing traffic will go through the same Public interface.
1. Incoming traffic from ISP 2 will go to the External interface , but outgoing traffic will go through Public interface.
Thanks,
Engel

Why do we configure the Redundant Interface in CSS Public Face

Similar Messages

Maybe you are looking for