Cisco CSS and ACE study guide

Hi,
Im ready to kick start Cisco CSS and ACE load balancers. I found that 642-972 DCASD and 642-975 DCASI are the relevant exams for that. But, they are expired now. And, I couldn't even find the old materials for those. Could you please anyone assist me in getting started with this?

Hi Kanwal,
Thanks for your reply. BTW, wasn't there any specific study guides for 642-972 DCASD and 642-975 DCASI from Cisco? The reason behind this question is, I want to go step by step starting from how load balancing works, the basics and terminologies of load balancing and its various options and operations etc. I have been working with Network Security and just stepping in to DC operations.

Similar Messages

CSS and ACE appliance SSL TPS

Hi,
Can someone explain how are SSL Transactions per second calculated on CSS and ACE?
We need to select appropriate SSL license needed for future ACE appliance, wich is defined in terms of TPS.
We also currently have CSS device with SSL module. Is there any way to find current SSL TPS info on a CSS device?
Thank you and regards,
Jasmina

What is the method used to calculate SSL TPS requirement.
example,
Current: Peak SSL Transactions 6,000
If I expect a peak concurrent connection of 200,000 what would be the methodology for calculating SSL TPS needs. (Some sample calculation steps would be appreciated.)
Can I interpret the licensing as follows,
SSL TPS: SSL Transactions per second: Number of NEW transactions that can be setup by ACE per second. (Does this mean established SSL transactions are not counted by the license, though each of the packets in established transactions require SSL termination!)
Thanks
Sri

SCJP and SCWD Study guide

I found it is good study guide for SCJP and SCWCD
SCJP
http://www.techfaq360.com/tutorial/scjp/scjp.jsp
SCWCD
http://www.techfaq360.com/tutorial/scwcd/scwcd.jsp

artonlinehome wrote:
All your latest posts are related to that site so I guess you are in some way related to the site, especially since this post was unsolicited. I'm blocking it. This is not a forum where you should post announcements / advertisement.
Kaj

Cisco CSS11503 and ace question

we are migrating from css11503 to ace. is there a utility to migrate the config to ace? we have 9000 lines of config on css11503. also is there a white paper which compares css with ace and csm?

TFTP the config file from CSS11503 to the TFTP server and back from server to ACE. ACE can handle 16Gbps of traffic while the CSS can only handle 6 (in the 11506).

Virtual Webserver Hosting on CSS / CSM and ACE

Hello,
i've a big project on my company.
There shoul'd b e set up about 8 Servers, with 14 virtual Servers on each machine.
Each virtual webserver shout get it's own IP Address.
But this is not the end, they would need more virtual Servers over time.
So the we will use 112 IP Adresses the first time, and about up to 200 for later use.
There shoul'd be implemented many domains. Each Domain should be hostet on 2-8 virtual Webservers depending on the load of the site.
I've read about the Virtual Web Hosting Application Guide:
http://www.cisco.com/en/US/customer/products/hw/contnetw/ps789/products_tech_note09186a0080094b4d.shtml
As i understand, i can configure the 8 Servers with an IP Addressrange of 20
10.1.1.10 - 10.1.1.29 for Server 1
10.1.1.30 - 10.1.1.49 for Server 2
and so on....
code:
service web1
ip address 10.1.1.10 range 20
And i can configure a content rule with an VIP Range of 20
10.1.255.10 - 10.1.255-39
content L4_HTTP
vip address 10.1.255.10 range 20
port 80
So as i understand, if client requests virtual IP 10.1.255.10 it will be directed to the Server1 with 10.1.10 or Server 2 with 10.1.1.30.
Or with by requesting 10.1.255.12 it will be directed to Server 1 with 10.1.1.12 or Server 2 10.1.1.32.
As i read, only the first IP Adress will be used for Keepalive checks. How can i check if all virtual Servers are operating? May, there will be shut down only one virtual webserver on a machine and not all.
Is it also possible to do such things on CSM or ACE?
Also my CSS is not directly connected to the Servernet. Does this configuration work if there is a router between the CSS and the Server?
Is there another solution for such things? What would you recommend?
Sven

Sven,
I would not go with the range option.
You should looks each ip as a separate server weither this is a virtual or real server.
Configure a service for each ip with its own keepalive and configure a content rule for each domain and assign the services accordingly.
The config will be bigger but it is easier to see what's going on and to do modification and to troubleshoot.
Maybe you could use CVDM for operating the config and do modification.
Gilles.

Does reading ACE certification study guides help me understand photoshop?

There are plenty of tutorials online teaching people how to do this and that; but for a newbie like me, the biggest problem is, I can follow the recipes, but most of the time, I don't understand the reason behind them. I have been wondering if these things would become more obvious and intuitive if I have a fundamental understanding of the tools first.
Adobe seems to give out certification exams. I am just wondering if it would be helpful to buy a exam study guide and read it through (not necessarily going for the certification). Has anyone done it? What guide is the best? Or do these guides are just more advanced recipes without explaining anything either?

I would suggest that you look at Adobe Classroom in a Book Photoshop CS5, Adobe Press.
It does a good job of sharing the "why," almost as much as the "how." I feel that too many books, and tutorials skip the why, while only concentrating on the how. Many of the ACE questions come from the chapter review material, which is in Q&A form.
Good luck,
Hunt

Cisco CSS 11500 and RDP

Dear NetPros:
Does anyone know that does Cisco CSS 11500 Series Content Services Switch support 'Session Caching of RDP Clients? session for roaming of disconnected sessions' features?
Thanks
Bernard

The Cisco CSS 11500 is a compact modular platform, specifically designed to provide robust Layer 4-7 traffic management services for e-business applications in Internet and intranet data centers.
This URl should help you:
http://www.cisco.com/en/US/netsol/ns340/ns394/ns50/ns254/networking_solutions_package.html

Openng up and retrieving a study guide.

I had to log into my class and they sent me a study guide threw adobe. I tried to open it up but I don't know how, I don't even know how to retrieve the file from my email what should I do?

Is that a PDF? What operating system? Email client? Reader version?

CVP: CSS or ACE

Could you please help us in answering the below query from the customer,
Kotak Mahindra Bank currently has one Primary and one Secondary CVP Server on Version 7.X
Now since they are expanding, we are proposing an additional server MCS-7845-I2-CCE2
Now for load balancing, do i propose CSS or ACE?
If CSS, then which model is being currently sold by Cisco?
If ACE, then how do i select which model of ACE suits best...There is 0.5Gbps, 1Gbps, 2Gbps and 10Gbps..Which one is more appropriate for this CC Size?
The CVP BOM guide suggests an ACE Appliance on CVP 8.0, but for CVP 7.X it suggest CSS 11500 series with WebNS 7.5X...
Can i chose ACE for CVP 7.X, will it be supported?

ACE is the direction going forward.
I have used the CSS pair in the past, but at Cisco Live I spoke to the ACE team in the World of Solutions and ACE pricing was quite similar to CSS (say the ACE 4710 1U model) and it looked to be an effective solution. ACE is also soon available on a Network Module (ACE30 - could be out now) and that looked great.
Be aware of the similar restrictions that apply to CSS if you have the pair geographically separated. With ACE, you would need a GSS above.
Regards,
Geoff

CSS to ACE Convertion

Hello all,
We will change the CSS's to ACE's plataform's.
Do u know any aplication wich can convert the basic CSS configuration into ACE configuration?
Plataform's:
CSS11501S-C-K9
ACE 4710
The certificates installed in the CSS could be migratted to the ACE ?

Hello,
The 4710 with the ACE software has a built-in CSS-to-ACE conversion tool accessible through the web interface. See http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/css_to_ace/user/guide/cssaceug.html for example.
The tool may not convert 100% but it may provide a good starting point.
I don't see any reason why you can't export the certificates from the CSS (assuming you remember the password) and import them into the ACE.
HTH
Cathy

CCNP Security Study Guide

Hi..
Could anyone pls share me link to download book in pdf of CCNP Security Study guide.

Hi,
I would imagine you could go to the Cisco Press site and buy the eBook. I have not bought any myself. I have gotten the previous books through courses I have taken.
http://www.ciscopress.com/markets/detail.asp?st=44730
I only just started getting the certifications myself so I have just done CCNA R&S and will probably go on taking CCNA Security.
Personally I will probably prefer the actual book than an eBook/PDF
- Jouni

Question about IDS Self Study Guide for IDS

Hello,
i'm searching for a self study guide for the ips (ASA-SSM-10/20) where i can see how to configure signatures and deployment.
Thanks in advance for your help
regards
Klaus

The signature configuration for the SSM module is identical to any of the other IPS sensors. The root of all IPS documentation is here:
http://cisco.com/en/US/products/hw/vpndevc/ps4077/tsd_products_support_series_home.html
Here is the ASA 7.1 doc on how to move traffic to the SSM
http://cisco.com/en/US/docs/security/asa/asa71/configuration/guide/ssm.html

Cisco CSS ICS via DWDM

We are currently splitting up a campus installation (2 datacenters with < 300m cable distance).
One datacenter remains on the campus, the other one is moved to another part of the town, approx. 30km away.
The two datacenters are interconnected using DWDM (don't have the exact specs at the moment, but I think we have got the equivalent of 16 duplexed 4Gb/s conenctions between the two data centers)
So far we have been able to move most of the equipment (including several members of Oracle RAC clusters on Linux and OpenVMS, VPN server farms, ESX cluster members and similar services), but we do not seem to bei able to get the Cisco CSS ICS link up on the DWDM.
Is there anything we can ask the DWDM provider to check, or is there no chance to get the ICS link up over DWDM?

Hi Martin,
I guess you are referring to ISC port, right?
As per CSS documentation: You must connect the ISC ports directly to the two CSSs. You cannot use Layer 2 devices on the ISC links between the two CSSs. Also, the ISC links must be dedicated to passing only ISC traffic.
For that reason I believe you need to reconsider your plan.
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/ASR.html#wp1038263
Best regards,
Ahmad

Cisco CSS as non-HTTPS SSL-traffic terminator

Hi!
Does anybody know is it real to use Cisco CSS as SSL-traffic terminator. I need to terminate non-HTTPS SSL-traffic on this device (i.e. SSL-encrypted sessions of any particular TCP-based application-layer protocol, not https)? If not, is there any CISCO device capable of doing such a job?
Regards, Amir

Hi!
Thank you very much for your reply.
I know about the S model - as per my post - but unfortunately I have realized after making the purchase.
Can you please help me with the following issue: my unit is not able to boot from FTP, even if I follow up the CISCO official documentation for that version (I issue all the commands as in the manual). More than that, if I setup the Primary Boot Configuration and then I want to check it up there is nothing in that field. The Secondary Boot Configuration keeps its settings and after the Primary failure it will try the Network Booting but with Failed status - returning me to the OffDM.
I mention that I am using the OffDM because the unit I bought has no Flash Card.
Also I am not sure how can I have a "network mounted filesystem" and in the meantime to use the FTP protocol; setting up a NFS server wont provide me with Windows style absolute path like k:/.... as per CISCO official guide. Is that a plain-ftp generically called as Network File System??? "First, create these subdirectories on the FTP server, then copy the files from the boot image to the subdirectories"
Is this linked with the fact that I am using a Linux box for my FTP Server? Can you please help me to understand what the following line from CISCO official guide means "A network boot is not supported on UNIX workstations"
Thank you!

Cisco css http keepalive is not working with GET command

Dear all
i have Cisco Css connected to Dell Server (via switch)
Cisco CSS - 192.168.1.3 and Dell Server - 192.168.1.5
Dell server is setup with windows 2009R2 and Apache HTTPD is version 2.2
This server is dedicated to host multiple doamins with Apache lik
www.abc.co.uk
www.xyz.co.uk
Now the clinet wants to setup the http keepalive with specfic web page like /testpage.html for all these domains. i have teseed with single URI. it is working the comamnds are
config)# service serv1
(config-service[serv1])# ip address 192.168.1.5
(config-service[serv1])# keepalive type http
(config-service[serv1])# keepalive method head    ( get i have not used due to hash mismatch with apche server, if i use GET it is not working)
(config-service[serv1])# keepalive uri "/testpage.html"
(config-service[serv1])# active
It is working with single URI. but how can i do the same thing for multiple doamins ?
for multiple doamins do i need use script ? or can i use with commands ?
if i need to use script the script is
!no echo
! Filename: httptag-test
! Parameters: HostName WebPage HostTag
! Description:
!       This script will connect to the remote host and do an HTTP
!   GET method upon the web page that the user has asked for.
!   This script also adds a host tag to the GET request.
! Failure Upon:
!   1. Not establishing a connection with the host.
!       2. Not receiving an HTTP status "200 OK"
if ${ARGS}[#] "NEQ" "3"
        echo "Usage: httptag-test \'Hostname WebPage HostTag\'"
        exit script 1
endbranch
! Defines:
set HostName "${ARGS}[1]"
set WebPage "${ARGS}[2]"
set HostTag "${ARGS}[3]"
! Connect to the remote Host
set EXIT_MSG "Connection Failure"
socket connect host ${HostName} port 80 tcp
! Send the GET request for the web page
set EXIT_MSG "Send: Failed"
socket send ${SOCKET} "GET ${WebPage} HTTP/1.1\nHost: ${HostTag}\n\n"
! Send the HEAD request for the web page
set EXIT_MSG "Send: Failed"
socket send ${SOCKET} "HEAD ${WebPage} HTTP/1.1\nHost: ${HostTag}\n\n"
! Wait for a good status code
set EXIT_MSG "Waitfor: Failed"
socket waitfor ${SOCKET} "200 OK"
no set EXIT_MSG
socket disconnect ${SOCKET}sh w
exit script 0
in the script i have not used GET becasue, when CSS send GET request to apache it use hash, but apache is not able to respond with same hash and it shows that website is down. more information- click below url
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/command/reference/CmdKeepC.html#wp1139668
(config-keepalive) method
I have uploaded in CSS with httptag-test file and applied these commands
service comp.brit.co.uk-80
keepalive port 80
ip address 192.168.1.5
keepalive frequency 10
keepalive maxfailure 2
keepalive retryperiod 10
keepalive type script httptag-test "192.168.1.5 /testpage.html www.abc.co.uk
keepalive type script httptag-test "192.168.1.5 /testpage.html www.xyz.co.uk
but this script is not working
my question is:
1.do i need use script only to setup http keepalvie with webpage for multiple domains ?
2.with out using script is there any solution like CICSCO CSS commands to setup http uril for multiple domains which are on 1 singl server.
please help me asap

Hello Muhammad,
If you wish to use multiple domains for a URI keep-alive check, and perform a HEAD request what Daniel mentioned is correct. You have to use a scripted keep-alive check on the service. However, you should not use the default "ap-kal-httptag" script to do so as it's limited to only 1 website (unless you modify the script). You're best bet would be using the "ap-kal-httplist" script on the CSS as it allows the checking of 2 different websites along with a webpage to check for each site using HTTP HEAD method.
!no echo
! Filename: ap-kal-httplist
! Parameters: Site1 WebPage1 Site2 WebPage2 [...]
! Description:
!    This script will connect a list of sites/webpage pairs. The
!   user must simply supply the site, and then the webpage and
!   we'll attempt to do an HTTP HEAD on that page.
! Failure Upon:
!   1. Not establishing a connection with the host.
!   2. Not receiving a status code 200 on the HEAD request on any
!      one site. If one fails, the script fails.
! Make sure the user has a qualified number of arguments
if ${ARGS}[#] "LT" "2"
        echo "Usage: ap-kal-httplist \'WebSite1 WebPage1 WebSite2 WebPage2 ...'"
        exit script 1
endbranch
while ${ARGS}[#] "GT" "0"
        set Site "${ARGS}[1]"
    var-shift ARGS
    if ${ARGS}[#] "==" "0"
        set EXIT_MSG "Parameter mismatch: hostname present but webpage was not"
        exit script 1
    endbranch
    set Page "${ARGS}[1]"
    var-shift ARGS
    no set EXIT_MSG
    function HeadUrl call "${Site} ${Page}"
endbranch
exit script 0
function HeadUrl begin
! Connect to the remote Host
set EXIT_MSG "Connect: Failed to connect to ${ARGS}[1]"
socket connect host ${ARGS}[1] port 80 tcp 2000
! Send the head request
set EXIT_MSG "Send: Failed to send to ${ARGS}[1]"
socket send ${SOCKET} "HEAD ${ARGS}[2] HTTP/1.0\n\n"
! Wait for the status code 200 to be given to us
set EXIT_MSG "Waitfor: Failed to wait for '200' on ${ARGS}[1]"
socket waitfor ${SOCKET} " 200 " 2000
no set EXIT_MSG
socket disconnect ${SOCKET}
function HeadUrl end
Rather then modify the default "ap-kal-httplist" script on the CSS I would simply define the arguments within the service configuration itself.   Something like the following (using your service example):
service dell-192.168.1.5
ip address 192.168.1.5
keepalive type script ap-kal-httplist "www.abc.co.uk /testpage.html www.xyz.co.uk /testpage.html"
active
As long as the server is configured to reply to host headers, and the page is configured to retuen a "200 OK" the above service configuration should work. If there are any errors simply run "show service " to view why there was a failure. If there is a failure, and the output from the command specified shows a line number run the following command against the script to view at what point (line) did the failure occur:
show script ap-kal-httplist line-numbers
Hope this helps!
- Jason Espino

Cisco CSS and ACE study guide

Similar Messages

Maybe you are looking for