ASA In Data Centers, why not routed mode?

Hi Guys,
As i can see, Cisco is recommending for the ASAs to be in transparent mode in data centers, my question, why not routed mode?
How to decide? what is the problem in having the routing on ASA?
I know that transparent mode is easier to place, but in my case it is new design and i want to use the interface vlans on the ASA not core. so the gateway of each server will be the ASA.
what is the problem here? why it is not recommended?
I'm using ASA clustering as well over two DCs.
In Cisco links they explain why to use Transparent mode, but i couldn't find what is the problems/limitation in using routed mode?
Any clue?
Thanks & Regards,
Rami

but in my case it is new design and i want to use the interface vlans on the ASA not core. so the gateway of each server will be the ASA.
If that's the case use routed mode on your ASA.
Cisco's design docs are a great place to start but there is nothing that says you have to follow them to the letter, you modify them to fit with what you need.
Bear in mind as well that it's not an either or choice. With contexts you can have some in transparent mode and some in routed mode so you have flexibility.
I don't know what design guides you are referring to but it may be that they include some L2 features eg.
a long while back we wanted to RRI (Reverse Route Injection) from a CSM load balancer that was behind a firewall. For it to work the CSM had to be L2 adjacent to the 6500 which meant you couldn't use the FWSM in L3 mode.
Not saying you want to do that but it is an example of where other parts of the design can dictate how you run your firewalls.
Jon

Similar Messages

Why to use chnage pointers for master data idoc why not the change idoc

Hi Gurus,
I have one doubt about Idoc.
When changes to master data has to be sent Change pointers are configured and used. (CDPOS & CDHDR). In case of the transaction data change change idoc is used as is the case with orders (we use ORDCHG for ORDERS message type to send the chnage details to a order which was already sent to other system.
Why we can't use change idoc or message type whatever, instead of Chnage pointers in case of master data or vice versa in case of transaction data.
Your valuable input will be rewarded with suitable points!!
-B S B.

Hi,
It was a good question ... SAP seems never designed the change pointer to handle transactional data IDocs. Only for master data IDocs distribution purposes.
It may due to volume data ... the transactional data can change many times within a day compare with master data which hardly change or once a while.
Regards,
Ferry Lianto

WAN Vlan optimization between 2 Data Centers - 4451 Router

Hello Group gurus,
I have little odd question
We have 2 Data Centers, we have dedicated 1Gig link across them. we want to optimize certain Vlan traffic across them.
we have 4451 routers installed at each location and OSPF running for end subnets to know each other. but that is routing part completed.
however how can we utilize UCSE chassis of 4451 to optimize vlan traffic across data center is still a query.
I tried to find out document on google but specific to my requirement has not seen on.
if someone already set up this type of scenario, please help.
Thanks in advance

Hi John, I think it's best to use the right equipment for the job. If you've already got a router in place and you're not in a campus/metro/ISP environment, it's not really prudent to use another router. A simple layer 2 or layer 3 switch can accomplish this and give you plenty of ports at a much better price per port.
You may want to look in to the SG300 series switch if you want something that can handle route load and give ample amount of ports.

Calendar: Why not allow freedom to set alerts on any date/time?

Hypothetically speaking...
A man's wedding anniversary is every July 29th, however his memory has failed to prepare himself for the date appropriately for the last few years.
He recently added this date to his Iphone Calendar app, however it only allows him to alert the event the maximum of 2 days before. Why not allow the freedom to set alerts weeks in advance? Or perhaps allow alerts to be provided at any date/time you feel necessary?
I feel this scenario, and many varieties of others would benefit to the availability of this feature within the Calendar app.
I also have one additional recommendation for the app. If an event is considered an ALL DAY event and an alert is set as a reminder, this alert will go off at midnight since it 'technically' is the beginning of the day. Quite annoying in my opinion. Lets also have the availability to set the alert notification time for ALL DAY events.
I look forward to Apple recognizing these innovative ideas and providing these additions to their next upgrade! THANKS!
Message was edited by: Drew Henderson

I agree completely that this sort of freedom is needed.

HT5463 Why is there not an option to allow texts from the same group of allowed callers in do not disturb mode? Seems like a no-brainer!

Why is there not an option to allow texts from the same group of allowed callers in do not disturb mode? Seems like a no-brainer!

www.apple.com/feedback

Forum FAQ:Why Application Data folder is not accessible

Why Application Data folder is not accessible
Question
When I access the Application Data folder with administrative privilege on my computer, I get an error message "Access is denied".
Answer
Note:
This FAQ is based on discussions from a previous forum thread (
Accessing "Application Data" in Windows 7 ). Thanks to Ronnie Vernon and other participants' information sharing.
In Windows Vista or later Operating Systems, the default location of user data has changed. The
Application Data folder is not an actual folder. It is a
Junction Point for backward compatibility. A Junction Point is a physical location on a local hard disk that points to another location on that disk or another storage device. It is essentially a shortcut.
You might have noticed when clicking on a folder in
Windows Explorer with a shortcut icon shown on it (a Junction Point ), you get an
Access Denied error message. This is to be expected. By default, the Read permission for Junction Points is set to
Everyone – Deny . You are not supposed to access these folders, and there really is no reason to access these folders.
If you want to know where are those Junction Points pointing to. You can track down the real location of the files by running the command
dir /aL to display all the Junction Points and the locations that the
Junction Points refers to.
For example:
If you want to track down all Junction Points on C: drive, please locate C: drive and enter the following command:
C:\>dir /aL /s
More Information
For more information on Junction Points, click the following links to view the articles:
Junction Points and Backup Applications
Junction Points
Junction Points in Vista
Applies to
Windows 7 Starter
Windows 7 Home Basic
Windows 7 Home Premium
Windows 7 Professional
Windows 7 Ultimate
FOR INTERNAL INFORMATION RECORD
Related Bug number:
[Optional]
Source Thread:
[5ae36d5d-cb29-49ae-a379-a8be0dde0abc]
Reference link:
[Optional]
Author
[v-daleq]

This article is nonsense. Applications store data in this folder that needs "backed up." As one example only, bookmarks for Google Chrome.
"You are not supposed to access these folders, and there really is no reason to access these folders."

When I want to scroll through My picks why do I get this Error message (A necessary data reference could not be resolved."

When I want to scroll through My pictures why do I get this Error message (A necessary data reference could not be resolved)

Before anyone can help, they need information to work with. Basic stuff:
- What version of iPhoto.
- What version of the Operating System.
- Details. What were you doing when the problem arose?
- Did it ever work properly?
- Are there error messages?
- What steps have you tried already to solve the issue.
Anything else you can think of that might allow someone else to understand your issue.
With this kind of information somebody can develop a starting point for troubleshooting the issue.
Posts that consist of "iPhoto doesn't work. Help" or "iPhoto won't print" or "Suddenly I have no photos!!!!!!!!!!" mean that any helper is simply guessing. With information, s/he may be able to get your issue resolved sooner.

Why does the sum of data in subfolders not add to the top folder?

I am trying to remove folders in my primary drive of my MacPro so as to free-up space on the primary drive. I have been using the Info button for each folder to see the total amount of data for that particular folder. When I add up the data contained in each folder they sum to a substantially lower amount of Gigabytes that is shown by the info button for the top folder. If you add the data shown in each of the top folders on the drive, the sum is considerable less than is shown for the drive in its info tab. Why is there this difference in the sum of individual folders and the drive Gigabytes shown? Is there data that is not apparent because hidden folders not shown in the Finder?

Suppose you had folder with three one-byte files in it. GetInfo reports three bytes in the folder. But each file takes a whole number of allocation blocks on the drive, probably something like 12K total.
Mac OS X also blurs exactly what is meant by a folder. For example, an Application is typically presented to you as one file, but if you look inside it, you would see that it may contain a hundred files in folders.
Some Users have reported better luck using OmniDiskSweeper (run as admin) to show how much real disk space is taken up by various items -- the GetInfo byte counts can be hard to deal with.

Elements organizer: Geo Tags - why not in the meta-data ?

Hi again,
Some of my Photos have geotags (i.e. GPS-Information) in the meta data. Elements Organizer finds it - all right.
Now when i put a Geotag to a photo (without GPS-Information in the meta data) with elements organizer it also works, but there is still no Information in the GPS meta data.
Why is that?
Where is the GPS Information stored, when not in the metadata?
Thanks to all!

elenah
I do use the Elements Organizer, but not to great extent.
So, please review the following and then let me know if you have been there and found that already.
If I setup a photo GeoTag in the Elements Organizer 13/13.1, after that I see
a. The description of the GeoTag itself in Tags/Place Tags
b. When I select the GeoTagged image in the Elements Organizer browser, the Image Tags information
for that photo is shown at the bottom of the Information/Image Tags column at the right.
c. The GeoTab information appears as a caption under the zoomed in photo in the Elements Organizer Browser.
If the GeoTab image is saved as in Photoshop Elements 12/13.1 and imported back into the Elements Organizer, the GeoTagging is recognized.
I do not see GeoTab information elsewhere in the Elements Organizer nor in the Photoshop Elements Editor
(File Info or other) at that point.
Please remind me if you have Photoshop Elements 13/13.1 as well as the Premiere Elements 13/13.1. I need to explore
the possibility of adding metadata into the program by pointing to Photoshop Elements Editor/File Menu/File Info. If that is at
all possible, it looks like you are facing creating xmp templates. Have never been there and done that.
In the Elements Organizer itself, I suspect what we do not see is being supplied by the Elements Organizer catalog behind
the scenes. But, please check out the Elements Organizer 13 Help PDF Chapter 6 Adding Metadata to see if there is anything
there that you do not already know.
https://helpx.adobe.com/pdf/elements-organizer_reference.pdf
https://helpx.adobe.com/photoshop-elements/using/file-information.html
For the best possible answer and not assumptions and any unlikely scenarios from me, you are probably best served putting this GeoMapping question before the Adobe Photoshop Elements Forum people if you do not get some Adobe help on this.
Photoshop Elements
ATR

Payroll extractor 0HR_PY_1 do not return any data in RSA3 in full mode

Hi,
I have activated Payroll extractor 0HR_PY_1.
I use RSA3 to check the extractor.
It does not return any data(0 records) in full mode.
Do i need to do activate any other object, apart from the datasource?
Thanks in advance for your help.
Regards,
Suresh.

Hi Suresh,
HR extractors need additional authorizations. When the extractor is run, there would be a check if the user is authorized to extract data. Check SAP notes 672514 & 397208. Also find my previous post on this.
Re: Extractor 0HR_PY_1 does not return data to BW
Best Regards,
Murali.

If the data network is not available for some time, to get it again we need to restart the phone instead it is not finding the data network instantly. why cant the iphone searches data net work offten if not available. i am totally disappointed with this!

If the data network is not available for some time, to get it again we need to restart the phone instead it is not finding the data network instantly. why cant the iphone searches data net work offten if not available. i am totally disappointed with this!

Still it could not find the data network.it searches for voice network instantly and works too. but even full voice network available, there is no data network.when i restart the phone it could find data network.
Already i reset network settings for two times.

HT4623 how can i update my 1st gen ipad when its running at 5.1, i do the update scan and it just says ipad is up to date? why will it not update to 7.1???

how can i update my 1st gen ipad when its running at 5.1, i do the update scan and it just says ipad is up to date? why will it not update to 7.1???

iPad 1's can only be updated to IOS 5.1.1. The iPad 1 doesn't have the processing power to handle any higher.

Why does Safari (or any other browser with up to date Flash player) not play Facebook videos?

Why does Safari (or any other browser with up to date Flash player) not play Facebook videos?

You're welcome. Glad I could help.
If you haven't done so, using Disk Utility in your Applications/Utilities folder.
Thanks for the and Aloha from Big Island.

My international data roaming is not working in china, why?

I am currently traveling in mid-east china, but my data roaming is not working. it shows good single bar, but when I try to receive emails (from gmail or AOL account), it gives me error messages. it is very frustrating. it has been 3 days that I can't retrieve emails. I do have voice service though.

You might need to contact VZW for some trouble shooting help. Unless you are using a 3rd party simcard...then you might have to check with them to make sure their isn't an issue.

Max OSX10.10.3, Adobe acrobat/document cloud goes into "application not responding mode" right away. must force quit. cannot use the program. Why?

Have never been able to get this application, adobe acrobat dc, to work on my mac. Constantly goes into "application not responding" mode. Happen to anyone else and know how to fix it?

Hi Nicholas,
Verify if Protected View and Enhanced Security are Off. Go to Acrobat-> Preferences -> Security (Enhanced):
Also having too many fonts active can hurt the performance of any application.
Try the step 10 of the KB: https://helpx.adobe.com/x-productkb/global/troubleshoot-fonts-mac-os-x.html
Regards,
Rave

ASA In Data Centers, why not routed mode?

Similar Messages

Maybe you are looking for