Can the CSS operate in bridged mode with multple subnets?

The white paper below notes that the CSS CAN operate in bridged mode but it is not recommended. Is it possible to load balance more than a single subnet while operating the CSS in bridged (single VLAN) mode? I would like to test how effective it is despite the warning. Thanks.
http://www.cisco.com/en/US/products/hw/contnetw/ps1894/products_white_paper09186a00801bd4ae.shtml

you can assign multiple ip from different subnets to a single circuit vlan.
You link the physical interfaces with the "vlan" command. Then assign ip addresses under the circuit-vlan.
The CSS will bridge traffic on physical interfaces belonging to a same vlan.
I hope this is what you need.
Thanks,
Gilles.

Similar Messages

Hi Since upgrading to Firefox 4.0 I am unable to clear history and get the message "quick time failed to initialize". I can delete history when in safe mode with plug-ins disabled. Re-installing quick time fails to resolve the issue. Any ideas?

Hi I Run Windows 7. Since upgrading to Firefox 4.0 I am unable to "clear history" and get the message "QuickTime failed to initialize". I can delete history when in safe mode with plug-ins disabled. Re-installing quick time fails to resolve the issue. Any ideas or suggestions?

i have that quicktime problem too

TC in Bridge Mode with ISP router vs TC as Ethernet with VDSL modem

Hi, I have a time capsule. It's the newest generation of the old shape/design - i.e second to newest version. It's running 7.6.4. firmware.
I recently updgraded my ISP to Fibre VDSL and the ISP sent me a crappy router with a built-in modem that you have to use. I checked the ISP support forums and found plenty of advice to configure the TC over ethernet with this router using the DMZ of the router etc. Anyway, I got it all working but i wasn't happy. port forwarding was a pain and you end up with double NAT issue - not surprising.
The alternative config was to switch the TC to 'bridge mode' so the crappy ISP router does the NAT / DHCP, port forwarding, dpnp, internet routing. I got this all working and i have made sure that all of my network nodes/clients (wired and wifi) are all off the TC and only use the ISP router for internet, dhcp etc. This is all working with good speeds, solid internet access but...
Major issues with airplay (use this a lot) and also with stuff like facetime etc. The connection is much faster (40mbps down/10mbps up) than my old ASDL setup but as I said, key services that I use are not as stable.
I think my only alternative solution is to buy a VDSL modem seperately and use the TC as the router i.e. go back to my old config with TC doing all the routing, port forwarding etc.
Does anyone here have a view as to whether this is worth trying? I'm hoping that it if the TC is doing all the routing, I will get less drop outs and services will work as they should. On the other hand, I hoped airplay would be OK as it's a wifi/Lan service rather than WAN but I have had quite a few issues.
Appreciate any help with this and sorry for the lengthy note!
Jata.

In theory, you will do better by using a simple bridge mode modem and then setting up the Time Capsule as the router to provide DHCP and NAT services.
But, as you might imagine, it is not possible to predict whether your results will actually be better using this type of setup.
Worth a try, in my opinion, if you can find a store that will let you return the modem for credit if it does not do what you want.
Even a simple modem will still likely have to be configured to operate in bridge mode, but the setup should only take a few minutes using the web based configuration interface.
Let us know how things are working if you can, if you decide to the try the simple modem approach.

Is anyone using a 1252 ap in bridge mode with channel bonding?

Is anyone using a 1252 ap in bridge mode, with channel bonding?
I had a question a while ago from a customer with regards to bridging with a 1252 ap to increase throughput for a wireless link he was using, from the throughput improvements in 802.11n. At the time I spoke to Cisco Pre-Sales, and they indicated that the bridge function in the 1252 exists for 'testing' purposes. I advised our customer that although it should be possible to implement, we may run into difficulties with TAC support ect. in the event of problems with the link.
Can anyone comment if this is a Cisco validated/approved design now?
Also, has anyone done this and tested the throughput achievable?
Has anyone bridged both 2.4Ghz and 5Ghz radios on a 1252?
The reason I ask is I've seen a note about a Cisco 5Ghz 802.11n bridge being launched.
Thanks in advance.
Alex.

Hi All,
Thanks for all the feedback; I have finally done some throughput testing with the 1252's. Please note, this is very rough, just to give an idea on throughput that's achievable, and what you can enable. Did this a few weeks back, and have now wiped the cnf, so dont have the show runs any more....
The two devices were set up a few feet apart, with the standard 2dBi and 3dBi antenna.
All tests done on the 5GHz radio with Autonomous AP IOS.
I did data transfers via a laptop either end of the link; transferring data using the Test TCP utility (wasn't going for scientific tests, just getting some idea of throughput).
802.11a @ 54mbs (20Mhz chan) WGB - root to non root = 2.43 - 2.5MB/Sec = 19.44 - 20 Mbps
802.11a @ 54mbs (20Mhz chan) WGB non root to root = 2.42 - 2.44MB/Sec = 19.44 - 20 Mbps
802.11n @ 'n' rates( 20Mhz chan) WGB root to non root = 6.18 - 6.33MB/Sec = 49.44 - 50.64 Mbps
802.11n @ 'n' rates ( 20Mhz chan) WGB non root to root = 4.77 - 5.00MB/Sec = 38.16 - 40 Mbps
802.11n @ 'n' rates ( 40Mhz chan) WGB root to non root = 8.59 - 8.58MB/Sec = 68.64 - 68.64 Mbps
802.11n @ 'n' rates ( 40Mhz chan) WGB non root to root = 6.35 - 7.20MB/Sec = 50.8 - 57.6 Mbps
802.11n @ 'n' rates ( 40Mhz chan) Bridge root to non root = 9.73 - 10MB/Sec = 77.84 - 80 Mbps
802.11n @ 'n' rates ( 40Mhz chan) Bridge non root to root = 8.40 - 8.57MB/Sec = 67.2 - 68.56 Mbps
So basically, as per the above posts, you can implement bridging on the 1252's and utilise the 802.11n rates and features, SGI, Spatial Streams and Channel Bonding etc, to achieve higher throughput.
Also, as per the above posts, this is still not supported by Cisco, so, in my case, I'd be highlighting that to customers straight off, but don't see it as too much of an impediment to deploy, as long as the customer weighs up the risks.
On a side note, I attended a Cisco session recently, and was told that the 802.11n Bridge, (the 1430?) was on hold indefinitely. My feeling is that this makes it more pressing that Cisco introduces support for bridging on the 1252.
Get in the ear of your local Wireless SE's, the more they hear it, the more they'll moan to the Wireless BU in San Jose! ;-)
Bridging with 802.11n has some interesting possibilities, I worked with Alvarion 5GHz bridges 6 or 7 years ago, that could do 'near LOS' - Worked well in cities, using reflection of the RF from buildings. I had never heard of 802.11n back then, but I'm guessing Alvarion was using MIMO to achieve good non-LOS connectivity in the 5GHz band.
Cheers,
Alex.

Using a Dlink router in bridged mode with Airport Express

I have a broadban connectiond via a Zyxel P-660 wifi modem + router. I have connected the Airport Express to this modem via ethernet and set up a wifi network. The wifi on the Zyxel has been turned off.
Since the wifi signal is weak in the other rooms, I am planning to link up a Dlink DIR-600 router running on the DD-WRT firmware on the bridged mode with the AE.
What settings do I need to have on the Dlink ?

I am planning to link up a Dlink DIR-600 router running on the DD-WRT firmware on the bridged mode with the AE.
If you are planning to have the Dlink device pickup the wireless signal from the AirPort Express and then "repeat" that signal, it is extremely unlikely that this will work.
Apple uses proprietary settings for their "extend" feature, which will only work with other Apple routers. It is....as far as we know....not compatible with devices from other manufacturers.
What settings do I need to have on the Dlink ?
All you can do is try to follow Dlink's instructions to setup the device as a "repeater" or "relay". The DD-WRT Forum might provide some tips. As you might imagine, there will not be much chance of a Dlink user ever seeing your post on an Apple forum.
DD-WRT Forum :: View topic - D-link DIR-600
There are no settings on the AirPort Express to adjust for this other than the obvious setting to check the box next to "Allow this network to be extended" on the Wireless settings page.
Good luck

Ace module in bridged mode with client nat

Could someone confirm whatever a NAT is supported for ACE-20 module, please?
Let me to explain technical details.
I do need to convert working CSM(SLB) config to ACE configuration and I am not quite sure
if the configuration below is correct. ACE module should be configured in bridge mode with two
vlans - vlan 36 (client) and vlan 436 (server) - bridged with interface bvi 36.
NAT on ACE configurad as "nat dynamic 1025 vlan 436" into corresponding
"policy-map type loadbalance"
Could you check two parts of configs and advise me if the ACE config is
properly converted from CSM and will be working in the same way (especialy for NAT).
Thank you in advance.
CSM config
=======
vlan 36 client
ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0
gateway 10.36.3.1
vlan 436 server
ip address 10.36.3.3 255.255.255.0 alt 10.36.3.4 255.255.255.0
natpool WEB-MAIL 10.36.3.100 10.36.3.100 netmask 255.255.255.0
sticky 30 netmask 255.255.255.255 address source timeout 60
probe SHAREPOINT tcp
interval 30
failed 120
open 3
port 80
probe WEBMAIL-443 tcp
interval 5
failed 60
open 2
port 443
serverfarm WEBMAIL-443
nat server
nat client WEB-MAIL
predictor leastconns
real 10.36.3.101 443
   inservice
real 10.36.3.102 443
   inservice
probe WEBMAIL-443
serverfarm WEBMAIL-80
nat server
nat client WEB-MAIL
predictor leastconns
real 10.36.3.101 80
   inservice
real 10.36.3.102 80
   inservice
probe SHAREPOINT
vserver WEBMAIL-443
virtual 10.36.3.100 tcp https
serverfarm WEBMAIL-443
sticky 60 group 30
replicate csrp sticky
replicate csrp connection
persistent rebalance
inservice
vserver WEBMAIL-80
virtual 10.36.3.100 tcp www
serverfarm WEBMAIL-80
replicate csrp connection
persistent rebalance
inservice
ACE config
=======
probe tcp WEBMAIL-443
interval 5
open 2
passdetect interval 60
port 443
probe tcp SHAREPOINT
interval 30
open 3
passdetect interval 120
port 80
serverfarm host WEBMAIL-443
predictor leastconns
probe WEBMAIL-443
rserver 10-36-3-101 443
    inservice
rserver 10-36-3-102 443
    inservice
serverfarm host WEBMAIL-80
predictor leastconns
probe SHAREPOINT
rserver 10-36-3-101 80
    inservice
rserver 10-36-3-102 80
    inservice
class-map match-all WEBMAIL-80
match virtual-address 10.36.3.100 tcp eq www
class-map match-all WEBMAIL-443
match virtual-address 10.36.3.100 tcp eq https
sticky ip-netmask 255.255.255.255 address source 30
serverfarm WEBMAIL-443
replicate sticky
timeout 60
policy-map type loadbalance first-match WEBMAIL-80
class class-default
    serverfarm WEBMAIL-80
    nat dynamic 1025 vlan 436 serverfarm primary
policy-map type loadbalance first-match WEBMAIL-443
class class-default
    sticky-serverfarm 30
    nat dynamic 1025 vlan 436 serverfarm primary
parameter-map type http HTTP_ADV_OPT
persistence-rebalance
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
interface vlan 36
bridge-group 36
service-policy input IFVLAN36-POLICY
mac-sticky enable
no shutdown
interface vlan 436
bridge-group 36
nat-pool 1025 10.36.3.100 10.36.3.100 netmask 255.255.255.0
no shutdown
interface bvi 36
ip address 10.36.3.3 255.255.255.0
peer ip address 10.36.3.4 255.255.255.0
no shutdown

Hello F.Makarenko-
You will want to use PAT while you do nat, so change the natpool configuration to this:
   nat-pool 1025 10.36.3.100 10.36.3.100 netmask 255.255.255.0 pat
You also need to apply the nat like this:
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
    nat dynamic 1025 vlan 436
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
    nat dynamic 1025 vlan 436
If you are going to build out a lot of classes, you can instead do source nat like this:
policy-map multi-match IFVLAN36-POLICY
class WEBMAIL-80
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-80
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class WEBMAIL-443
    appl-parameter http advanced-options HTTP_ADV_OPT
    loadbalance policy WEBMAIL-443
    loadbalance vip inservice
    loadbalance vip icmp-reply active
class class-default
    nat dynamic 1025 vlan 436
Regards,
Chris Higgins

Westell 6100G in bridge mode with Linksys BFSR41 wired router

I have had a long go-round with V tech support over slow DSL speeds since March 2011. They sent me the Westell 6100G to replace an ancient Westell that had provided satisfactory service for many years, connected through my LInksys BFSR41.
Initially, I connected the Westell directly to a PC and did not see any improvement in speed (always around 1.3M since March). So I re-connected it in bridge mode with the LInksys. Slow speeds continued, plus periodic hiccups, where the connection would simply not exist, although the lights were all good and the LInksys said "connected. Cure was to wait or power down modem and router. The following week a V tech called and said they had made changes to the network and fixed a problem with my line.
Thereafter I did see a vast improvement in speed as tested by Speedtest.net and Speakeasy.com (usually 2.8 M or thereabouts). But I still had the "hiccups". Now you see it, now you don't.
V tech support said, "connect the Westell directly". This indeed solved all intermittance problems. But I need the router and I need it to do the DHCP addressing dynamically as I frequently swap out machines. FYI this is a PPOe connection.
I hope someone on the forum can help me before I spend anther 2 hours in voicemail limbo.
Solved!
Go to Solution.

Well, my heat/humidity solution helped, but has not solved my problem. My connection still disappears at unpredictable, though less frequent intervals. Any and all ideas willl be appreciated.
Thanks

ACE in bridge mode with FWSM as gateway

our design
FWSM--vlan 7--ACE-vlan 8---servers with default gateway as FWSM
originally there were no plans of servers looking to load balance traffic when they wanted to communicate each other. now there is a need this
since ACE is in bridge mode, there are no ip address to VLAN configured on it and cant do source NAT
what we want servers in serverfarm A can contact a single ip which can be load balanced and traffic to be sent to serverfarm B. both serverfarms reside in vlan 8 and ace is in bridge. with VLAN not having IP how can we get this working. we were looking to create a policy on ACE with an ip address in vlan 8 and then do a source NAT to send the traffic to serverfarm 7.
with FWSM as the default gateway, by enabling permit intra traffic , it doesnt work because the command routes the traffic, dont think will send the traffic back to the same vlan
e.g static (inside,outside) 10.7.0.1 10.7.8.13 and allow intra traffic.
so when a machine 10.7.8.11 pings 10.7.0.1 it goes to the FWSM but fwsm doesnt look for 10.7.8.13
with ACE in bridge and FWSM doing above how to get around. can something be done on ACE in bridge mode with source NAT
Thanks

First, why don't you have an ip in your ACE vlan ?
Then, for traffic hitting a vip, we can do source nating even in bridge mode.
But if the vip is not an ip in vlan 8, your server will anyway send the traffic to the FWSM and ACE will first bridge the request.
The FWSM should then send the request back to ACE (not sure how this can be done).
So the request from the server will actually hit the vip on vlan 7 (not vlan 8).
So your policy-map with client nat must be on vlan 7.
Another option would be to configure a static route on the server to point the vip to the ACE vlan 8 ip address (which you should have configured).
In this case, the policy-map will have to be in vlan 8 with client-nat.
Gilles.

Airport Time Capsule will only operate in Bridge mode

Im a Verizon dsl customer and am trying to configure an Airport Time Capsule with a Westell 2200 modem. The only workable configuration I can come up with is bridge mode. Every other configuration has some sort of conflict with the modem. I have tried to set the modem in bridge mode, with DHCP service both on and off, and connect with the Airport Time Capsule, but was unable to get an internet connection ( I used the password and login for my main email account - perhaps I should have used the vzid but I don't know the password - in the modem I see it says "set by verizon").
I never had this problem with any other router I have used.
Any ideas? Thanks, Klaus
Solved!
Go to Solution.

klaus57 wrote:
Very sorry if this is a stupid question, but if I don't get the dns service from the westell 2200, where will I get it from? The routher asks for this address during the PPPoE setup.
Thanks,
Klaus
DNS should come from the PPPoE connection itself automatically. If you have to, define servers such as 8.8.8.8 and 8.8.4.4. If you have about a half an hour of time where you can leave your machine idle, I would recommend running the DNS Benchmark program from Gibson Research to choose the best (fastest) servers for you.
https://www.grc.com/dns/benchmark.htm
Pick the two consistently fast servers. The program will give you some general recommendations when it completes. I recommend setting up the Custom nameserver list when theprogram asks for that.
========
The first to bring me 1Gbps Fiber for $30/m wins!

Setup airport extream in bridge mode with ethernet

how do i setup airport extream in bridge mode with ethernet connection to extend wireless coverage. thanks for help.

We need some additional information to be able to provide the correct answer for your question.
What is the make and model of your "main" router?
What device will you use to set up the AirPort Extreme? Mac? iPad/iPhone?
If you have a Mac, we need the operating system that you are using on the computer. If you are not sure, click the Apple icon in the upper left corner of the screen, then click About This Mac. Post back with the OS X Version number that you see there.

Can the css pass on the original source ip to the actual server

hi,
I have css11501, and load balacing is done for 3servers. The server application registers the source Ip of the client login. At present server is getting only the Vip. How can the css made to pass the client/source IP to the server.
Thanks
Mathews

Thanks for your reply.. yes this is due to the source natting configured, since css is being used in one-armed mode.
Thnx
Mathews

I have two airport extremes, one acting as amodem and the other operating in bridge mode. The extremes are connected using ethernet, but remain connected even when I disconnect the Cat5a cable. How do I know if they are operating wired or wirelessly

I have two airport extremes, one acting as a modem and the other operating in bridge mode. The extremes are connected using ethernet, but remain connected even when I disconnect the Cat5a cable (I did this to check that the 100 feet of Cat 5a cable connecting them was working). How do I find out if they are operating wired or wirelessly? I want to know as I assume I will get much better speeds if they are wired.

Hi Bob, many thanks for the prompt response. I think I did what you suggested, but you're the expert so I have sent over a few screenshots. The extreme in question is High Birches Home Office (the rest of the network has been in place and working well for some time). My new home office is going to be in the garden, circa 100 feet from the main house. I have installed armoured Cat5e cable down to the shed that is going to be adjacent to the home office once built and situated the High Birches Home Office Airport Extreme there temporarily. Everything works well, so I was surprised when I unplugged the ethernet, that it still worked. I also tested the ethernet cable by switching off my laptop's wifi and unplugging the cable from the airport extreme and directly into the laptop and that worked ok.
If the screenshots below (I did every Airport utility tab for the High Birches Home Office) don't tell you anything more, then the set-by-step instructions would greatly appreciated so I can ensure I completed the steps correctly.
Many
Thanks, Greg.

HT4623 Can the I-Pod 4th generation communicate with TV to be used as a mirror?

Can the I-Pod 4th generation communicate with TV to be used as a mirror?

No. TV out on 4G only works with apps that support TV out. TV out does NOT mirror the iPod's screen

Question: why is my computer booting up slow? can the battery have anything to do with it?

why is my computer booting up slow,can the battery have anything to do with it?

Hi tecknik!
I'm so sorry for any trouble with calls and messages! I know how important it is to have a properly working phone. Which iPhone do you have? Please reset the network settings: settings/general/reset/reset network settings. Once that is done, please monitor the device and see if that corrects the issue. What is your zip code?
I'm anxioud to get to the bottom of this for you!
ChristinaB_VZW
VZW Support
Follow us on Twitter @VZWSupport

HT201209 can the same gift card be used with a differencet itunes account?

can the same gift card be used with a differencet itunes account?

No, a gift card can only be redeemed onto one account - it can then only be used to buy items for that account (it can't be used to gift content to another account).

Can the CSS operate in bridged mode with multple subnets?

Similar Messages

Maybe you are looking for