ASR and suspending critical services

Hi All
I have two old CSS 11500 that are doing nothing but providing load balancing for 2 terminal servers.
As per the documentation, I setup my ASR config (at least i think its right). I'm now faced with two problems:
Problem #1: If I suspend the first Terminal Server service on CSS-1, CSS-2 takes over and continues to allow connectivity until the service on CSS-2 is suspended. Is this normal behavoir?
Problem #2: Once I suspend the service on both servers, My rule goes down. Show summary says the state is down and I cannot access any terminal server at all. I am assuming this is because I have them configured as critical services, can anyone confirm? If so, what is the process to suspend a service temporarily?
One other question, I have been using in testing balance aca (configs below are set to leastconn), but i'm not sure if it will work with RDP. Can anyone confirm? Should I instead be using leastconn or one of the others?
Many thanks!
Mark

#1
The critical service should be an upstream/downstream device, not the services that you are using for loadbalance. That's why the CSS failover everytime you suspend one of the services.
Here are more details about it:
http://tools.cisco.com/squish/e0272
#2
The VIP is INSERVICE when at least one of the services in the Content Rule is Alive. If all the services in the Content Rule are down, the VIP address will be down as well.

Similar Messages

Ask the Experts: Understanding Cisco ASR 9000 Series Aggregation Services Routers Platform Architecture and Packet Forwarding Troubleshooting

With Xander Thuijs
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn how to Cisco ASR 9000 Series Aggregation Services Routers with Cisco expert Xander Thuijs. The Cisco ASR 9000 Series Aggregation Services Routers product family offers a significant added value compared to the prior generations of carrier Ethernet routing offerings. The Cisco ASR 9000 Series is an operationally simple, future-optimized platform using next-generation hardware and software. The ASR 9000 platform family is composed of the Cisco ASR 9010 Router, the Cisco ASR 9006 Router, the Cisco ASR 9922 Router, Cisco ASR 9001 Router and the Cisco ASR 9000v Router.
This is a continuation of the live Webcast.
Xander Thuijs is a principal engineer for the Cisco ASR 9000 Series and Cisco IOS-XR product family at Cisco. He is an expert and advisor in many technology areas, including IP routing, WAN, WAN switching, MPLS, multicast, BNG, ISDN, VoIP, Carrier Ethernet, System Architecture, network design and many others. He has more than 20 years of industry experience in carrier Ethernet, carrier routing, and network access technologies. Xander holds a dual CCIE certification (number 6775) in service provider and voice technologies. He has a master of science degree in electrical engineering from Hogeschool van University in Amsterdam.
Remember to use the rating system to let Xander know if you have received an adequate response.
Xander might not be able to answer each question because of the volume expected during this event. Remember that you can continue the conversation on the Service Providers community XR OS And Platforms shortly after the event. This event lasts through Friday, May 24, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.
Webcast related links:
Slides
Webcast Video Recording
FAQ

Is there a Cisco lab available for ASR 9000
we have "XR4U" stations coming available soon when XR 511 comes alive. The plan is for a downloadable play image like that. In the interim we have 2 demo systems available, and they can be booked via your account manager representative.
How will MOD160 perform with multiple 9000NVS?
very well. the mod 160 has 4 NPU's, 2 per bay. So if you have a 4x10 MPA to serve a satellite, you effectively have a single NPU per 20 1Gigs from the satellite. The pps performance will be stellar. However it might be price technically more ideal to connect satellite with a 36x10. Since the MOD-x has native MPA's with 1G also.
2. Is there a shortcut for a Bundle-EthernetX interface, such as port-channel interface (poX), in Cisco IOS® ?.
usability enhancement is there, we are trying to push this into a new reasonable release. follow CSCuh04526
3. What is the revolutions per minute (RPM) on these hard disk drives (HDDs) compared to the solid state drives (SDDs)? Will the spinning drives be slow?
depends on the type we had avaialble at time of production, you will see different sizes and disks on the RSP2. the rpm of the HD is not so much an issue as much as the buffered writing we used to do in XR. This is fixed up with XR43 where the disk writing performance is much better. the HD/SDD is used for logging storage only (and maybe your pictures) but other then that we're not that concerned with write perf of the HD.
regards
xander

Hey I got my phone stolen yesterday, but it was dead for 24 hours before i checked find my phone so it says offline. I called verizon suspended my service and they said if the person tried to sell it back, or put their number on it, it will get flagged. I

Hey I got my phone stolen yesterday, but it was dead for 24 hours before i checked find my phone so it says offline. I called verizon suspended my service and they said if the person tried to sell it back, or put their number on it, it will get flagged. I was just wondering if i should reinstate my service and try and wait for it to turn back on and then go get it because you need internet for it to track and with the suspended service, it can only track if connected to wifi, but they wont get past my password.

Where exactly did you buy the "new iPhone "
A country might help as well .This is a WW forum
Are Direct Mobiles an Approved Apple iPhone reseller if not it may well be a fake

Hi, my iPhone 4 was stolen two weeks ago, and I called ATT to suspend the service. Today, we were able to trace it and it is under a different name. What should I do? Should I report to police?

Hi, my iPhone was stolen two weeks ago, and I called ATT to suspend the service. Today, we were about to find it using my iPod, and it is now under a different name. What should I do? Should I report to police? I did called ATT again, and they told me that they cannot do anything, since the SIM card might have been replaced.

Doesn't hurt to call the police.
The SIM wasn't replaced; if it were, you wouldn't have been able to locate it.

I am on deployment and i need to suspend my service, can't seem to get live chat to work.

Title says it all I am in Kuwait for a year and i need to suspend my service i have a copy of my official orders and i need to speak with a representative. Live chat does not work because there is no "Chat Now" button available.

We appreciate your sacrifices for our country, timeba. Once you've logged into www.vzw.com/contactus for live chat, it usually takes a bit of time for someone to become available. If you haven't already chatted or called the Global Team that Ann154 mentioned, I have sent you a follow request here in the forum. Please access https://community.verizonwireless.com/actions to accept my request and follow me https://community.verizonwireless.com/people/jenniferh_vzw back so you can send me a private message https://community.verizonwireless.com/docs/DOC-1613 so we can get started with completing your needed suspension.
JenniferH_VZW
Follow us on Twitter www.twitter.com/vzwsupport

I'm now outside the country (since January 1). I try to register, and it says it will text me the pin. This doesn't happen. I need to check my service suspension request. I spoke with a rep before leaving. She told me to suspend the services on the day I

I'm now outside the country (since January 1). I try to register, and it
says it will text me the pin. This doesn't happen. I need to check my
service suspension request. I spoke with a rep before leaving. She told me
to suspend the services on the day I left the country, but there was no rep
to help me with that when I called on January 1. I tried to do it with the
mechanized options. I think it told me only three months was granted, but I
want to suspend for six months (until June 29). CAN YOU PLEASE TELL ME HOW
TO PROCEED SINCE I CAN'T ACCESS MY VERIZON ACCOUNT. I'm in Morocco.

well, you know how it is - glitches that usually resolve with a hard reset etc
then a restore. then a factory restore....then ..... nothing fixes so I try the next step with apple online - fill out my serial number and find it is a couple of weeks out of date - and then with the holidays who has time to get to the apple store? this is my second 4s handset as it is - first one the glass cracked from L to R without any impact/damage etc - they changed it out automatically because it's a 'known fault' apparently - so technically, this handset is only 6 months old - but warranty is from original purchase date -
never imagined it would turn out to be a warranty issue with the phone - and hey maybe when I get a chance to go to the apple store they'll be sympathetic, but I won't be able to get there till at least Jan 4th as it is. On the other hand, another iOS update might resolve the issue - but how long till that release? at the moment I'm having to use my old 3gs for wifi and 4s for phone!!!

My daughter is going on an exchange to France for a year. I saw that there is a SIMS prepaid card that fits into an iPhone 4S. Do you think this is the best way to go and oDo d I suspend her service with our carrier?

My daughter is going on an exchange to France for a year. I saw that there is a SIMS prepaid phone card that fits into an iPhone 4S. Is this the best way to go and if so, Do I suspend her service with our carrier?

Is your daughter's phone officially unlocked? If not, you won't be able to use any sim other than a sim from the carrier your daughter's phone is locked to. To do what you want, you need to get your daughter's phone officially unlocked. Once done, she can then purchase a local sim when she gets to France.

Suspend a Service and current connections

When you suspend a service, does the current connections to that service remain instact and only new connections are no longer sent to that service?
Or are all connections severed?
I've tried to do a search for this, but I'm getting conflicting results.
We are using a CSS11506 version 7.20 Build 405.
I found one person saying the connections continue while a FAQ document saying if you are using a Layer 3 or 4 rule the connections are maintained, but a Layer 5 rule severs the connections.
Thanks.

drex,
I can only speak to how my network works with our CSS 100 and 150's. When I suspend any one of my content groups the existing connections that have been passed onto a server finish there session but no new connections are allowed (vip isn't active to pass anything along thru the device).
For us sessions and cookies don't matter but they might for you. Just somehting else to consider.

Critical Services on CSS - All or Any?

I've configured vip redundancy on a pair of 11506. I would like critical services defined to failover when ALL the services are down or the upstream gateway is down. The documentation isn't very clear on this. There are simple examples and only the one line about an ALL SERVICES option. (see below)
"Local critical services for any service other than scripted or redundancy
uplink, such as a Web service. The VR goes down when all associated local
critical services go down."
I assume you do the ALL services option by creating multipe critical services under the IP Interface. But the documentation doesn't say. Am I right?

Hi Gilles,
Thanks for the weekend reply! I'd read that section on critical services. It lists three options. The first two will fail if ANY of the configured keepalives fail while the third we clarified how to do an ALL option.
What I really want to do is fail over when the upstream gateway is unreachable OR all services are down (basically a hybrid ANY/ALL option).
Rather than build a separate service should I use the existing ones? I'm already using port specific keepalives under my services (port 80 and a custom application TCP port).
Can I add a second keepalive type to each service with the ping script listing the server IP and upstream router IP? That way if the router fails the service is down.
I'm guessing if it isn't possible to add a second keepalive to a service I will need to write a custom script to accomplish what I'm trying to do. No biggie I'm just looking for the quickest way to do this.
Thanks in advance.

Rtmt error exception in publish content on Critical Services cucm

Hi everybody, i have a problem with RTMT version 8.7 over CUCM 8.5.1.10000, when i try see the Critical Services of my cluster, i see a error "Exception in publish content", and it not show my service list, another functions of my RTMT have not any problem, only this. i attach an image.
Can anybody help to me or suggest what is the problem.
Thanks for advanced.

i found the problem just now, this occurs when you have a mixed cluster UCS/MCS, the reference of this bug is presented in the next link,
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCty47592
this was fixed in the release 8.6(2.23061.1) and up.

How do I suspend my service if I am already overseas (military)?

I got overseas about 6 months ago. I called from skype and had my service suspended, everything worked out just fine. Problem is, I reactivated because I went on leave for a week or so back in the states... and now that I have returned overseas I am having a very hard time getting ahold of customer service!
I can no longer call customer service with skype. It tells me I need to call from my verizon phone and then hangs up on me.
I cannot get live chat to work. The option stays greyed out even though I am pretty sure I am trying it during times the service is supposed to be live.
I'm really not sure what else I can do. I just need to get a hold of a single customer service rep so I can take care of this...

Have you tried using the Global Support calling card, or mailing a copy of your orders/request via snail mail? Is there anyone else on your account (an Account Manager?) who could call VzW on your behalf?
International Support - Verizon Wireless

Critical service type "ssl-accel" (not documented)

I only found the documentation for critical services "scripted, redundancy uplink and local" in the advanced admin guide Rel 7.2
--snip-->
scripted - the priority changes to 0 when one service in the scripted group goes down.
redundancy uplink - the priority changes to 0 when all of the services in the uplink group go down.
local - the priority changes to 0 when all of the services in the local group go down. Local services include all services other than scripted and uplink.
<--snap---
Now I configured a critical service of type "ssl-accel".
This one looks like working, as a local service.
Is this service type supported and somewhere documentated ?
the service looks like:
service ssl_modul1
type ssl-accel
keepalive type none
slot 3
add ssl-proxy-list proxy-list-1
Critical-Services:
ssl_modul1 State: active Type: Ssl-Accel

1. you are correct, I use the service ssl_modul1 as a normal SSL Service
2. Now if the ssl module fail, I´ll failover to the Backup CSS.
3. My question is: could I use the service "ssl_modul1" of type ssl-accel as critical service and configure this on my circuit.
In the documentation, you only find critical services of type "local, scripted and redundancy-uplink".
I tried to configure it and it looks like the critical service of type "ssl-accel" works like a critical service of type local, but I am not sure, if this supported by cisco.

Notified Verizon of International Travel & The Fraud Dept Suspends My Service for One International Call

I called Verizon to notify them that I would be out of the country traveling to Portugal and Spain. Based on the customer service representative's advice, I added international calling to my plan. While in Spain, I called my daughter. My phone stopped working. Luckily, it was near the end of my trip and I had internet access at the hotel to communicate with my family. When I arrived in the U.S., my phone did not have service. I called Verizon three times and finally learned that they had suspended my phone service because of suspected fraud. My one call from Spain had somehow caused them to suspend service even though I had called to activate international calling. I did not receive any type of notification that my service was suspended. Today, three weeks after the call from Spain, the fraud department called and were on the verge of suspending my service a second time. If I had not answered, they were suspending my service. I understand that preventing fraud is important, but I am very upset that my service was suspended when I did everything that I was supposed to do to use Verizon's international calling feature. Today, the representative said there was not a note in my file about my previous call to the fraud department. Why would they suspend my service two weeks after reinstating it? Is one call from Spain enough to warrant suspending service when a customer has international calling? What can I do to prevent this happening in the future?

I called Verizon to notify them that I would be out of the country traveling to Portugal and Spain. Based on the customer service representative's advice, I added international calling to my plan. While in Spain, I called my daughter. My phone stopped working. Luckily, it was near the end of my trip and I had internet access at the hotel to communicate with my family. When I arrived in the U.S., my phone did not have service. I called Verizon three times and finally learned that they had suspended my phone service because of suspected fraud. My one call from Spain had somehow caused them to suspend service even though I had called to activate international calling. I did not receive any type of notification that my service was suspended. Today, three weeks after the call from Spain, the fraud department called and were on the verge of suspending my service a second time. If I had not answered, they were suspending my service. I understand that preventing fraud is important, but I am very upset that my service was suspended when I did everything that I was supposed to do to use Verizon's international calling feature. Today, the representative said there was not a note in my file about my previous call to the fraud department. Why would they suspend my service two weeks after reinstating it? Is one call from Spain enough to warrant suspending service when a customer has international calling? What can I do to prevent this happening in the future?

Need to suspend my service

Hi,
I've been trying to suspend my service over and over via Verizon website because I am out of states now.
I also need to reconnect automatically on May 19th.
But whenever I click the suspend button it keeps saying error. Also I am not able to chat with any assistance.
I need to suspend my service ASAP.
Thanks.

Hi,
This is what I've been trying to suspend my service on this website.
I've been clicking the suspend and reconnect button on the left side of Verizon website. I've been trying everyday since last Friday, but it never worked. They keep giving me an error message.
Also, I did chat with an assistant and I asked her if she could suspend my service. But she said I needed to pay $15 per line if I suspend my service through her because the stuff is not a part of her department. I believe there is a no fee for suspend service and you guys have to have the same policy about the suspend service.
I've found a lot of issues I've got wiht Verizon.
I do not want to see FAQ Link, I NEED TO slove the problem!
I need to suspend my service until May 18th, will reconnect May 19th. This is what I want.
Please figure out the fastest way to suspend my service.
I am so tired clicking the suspend button and keep getting an error message.
Thanks.

Critical physical interface or critical service ?

Hi,
I use a one arm solution ( Trunk interface) in active/standby environment made by 2 CSS 11501, working in router mode. They, each, connect to a separte swicth through the trunk interface. In such configuation, I ask,if configuring critical physical interface is suficient? the switchs are connect through a trunk interface also, and the server and client side are distributed among them in their respectives VLANS.
David

David,
The trunk with the switch could be up but the servers or the default gateway not reachable.
You could add a critical service for the gateway.
Gilles.

ASR and suspending critical services

Similar Messages

Maybe you are looking for