Communications behind CSS11501

Hello all,
I have two 11501s that are currently running in ASR mode. All is working great with that. I now have a need for some of the servers to communicate with each other behind the CSS's as well.
So, I have traffic from:
a)Internet to VIP address 192.168.2.129
b)Internal to VIP and host IPs
c)Host IPs to Internal
and now
d)Host IP to VIP address.
(Without -d-, parts a-c work just fine)
When I activate the config for the source groups, users will get intermittant delays. What could I be doing wrong. Below is my current config minus the actives for the server to server config stuff.
Any help would be appreciated!!
Todd.
******* Configurations ***********
CSS-1
circuit VLAN3
ip address 192.168.2.8 255.255.255.0
ip virtual-router 128 priority 110 preempt
ip virtual-router 93 priority 120 preempt
ip redundant-interface 93 192.168.2.10
ip redundant-vip 128 192.168.2.129
circuit VLAN5
ip address 172.16.1.8 255.255.255.0
ip virtual-router 95 priority 120 preempt
ip redundant-interface 95 172.16.1.1
!************************** SERVICES *************************
service reports1
ip address 172.16.1.122
redundant-index 32
active
service reports2
ip address 172.16.1.123
redundant-index 44
active
!*************************** OWNER ***************************
Owner Front-side
content reports
protocol tcp
port 443
balance leastconn
vip address 192.168.2.129
add service reports1
add service reports2
redundant-index 144
advanced-balance sticky-srcip-dstport
active
content reports80
port 80
protocol tcp
vip address 192.168.2.129
add service reports1
add service reports2
balance leastconn
redundant-index 152
active
owner back-side
content back-side-reports
vip address 172.16.1.97
add service reports1
add service reports2
protocol tcp
port 80
balance leastconn
redundant-index 100
!*************************** GROUP ***************************
group rpts
add destination service reports1
add destination service reports2
vip address 172.16.1.97
redundant-index 200
CSS-2
ircuit VLAN3
ip address 192.168.2.9 255.255.255.0
ip virtual-router 128
ip virtual-router 93 priority 110
ip redundant-interface 93 192.168.2.10
ip redundant-vip 128 192.168.2.129
circuit VLAN5
ip address 172.16.1.9 255.255.255.0
ip virtual-router 95 priority 110
ip redundant-interface 95 172.16.1.1
!************************* SERVICES **************************
Services
service reports1
ip address 172.16.1.122
redundant-index 32
active
service reports2
ip address 172.16.1.123
redundant-index 44
active
!*************************** OWNER ***************************
Owner front-side
content reports
port 443
protocol tcp
balance leastconn
vip address 192.168.2.129
add service reports1
add service reports2
redundant-index 144
advanced-balance sticky-srcip-dstport
active
content reports80
protocol tcp
port 80
vip address 192.168.2.129
add service reports1
add service reports2
balance leastconn
redundant-index 152
active
owner back-side
content back-side-reports
add service reports2
vip address 172.16.1.97
add service reports1
protocol tcp
port 80
balance leastconn
redundant-index 100
!*************************** GROUP ***************************
group rpts
add destination service reports1
add destination service reports2
vip address 172.16.1.97
redundant-index 200

Todd,
What you need is to add the same services to groups and "add service" and as "add destination service". Unfortunately you cant do this, its not a legal config.
The way around this is to use access lists on the CSS, where you can define which traffic will use a group and in which direction.
Be aware that CSS acl's are like IOS acl's in that there is an implicit deny at the end of every list. But unlike IOS, there is also an implicit deny LIST applied to all circuits that dont have a list specifically applied. So you need to create "permit any any" lists for circuits where you dont need the group controls, if any.
Peter

Similar Messages

What do you recommend to use as an offline data store, since SQL CE support is not in VS 2013?

A few years back I was architecting an occasionally connected .Net desktop application.
VS 2010 was offering full support for Microsoft Sync Framework and SQL CE with Entity Framework.
This seemed like the perfect marriage, so I ran with it, and the resulting software solution is still successfully running in production, years later.
Jump forward to today, and I am architecting a new occasionally connected .Net desktop application.
I was really looking forward to taking advantage of the advances made by Microsoft in using the tools built into VS 2013.
However, what I discovered has dumbfounded me. VS 2013 has no designer support for Sync Framework, and worse, built in support for SQL CE has been completely removed, including the ability to generate Entity Framework models from a
CE database using the designer.
My question to the community is, what tools should I be using to solve the problem of offline storage in my brand new .Net application?
I am aware of ErikEJ’s SQL Server Compact Toolbox, which brings back some support for these features in VS 2013, but it is not as fully featured as the VS 2010 native support was, plus it does not have the institutional “Microsoft” stamp on it.
I am building a multimillion dollar corporate solution that I will have to support for many years.
I would like to have some comfort that the technologies I select, today, will still be supported 5 years from now, unlike the way Microsoft has discontinued supporting Sync Framework and CE in the most recent VS.
I can accept open source technologies, because there is a community behind them, or off the shelf corporate solutions, since they will be driven by financial gain, but I have trouble committing to a solution that is solely supported by an individual,
even if that person is a very talented Microsoft MVP.
Some of the features of SQL CE that I would like to keep are
Built in encryption of the file on disk
Easy querying with an ORM, like Entity Framework
Tools to easily sync up the offline data store with values from SQL Server (even better if this can be done remotely, such as over WCF)
Does not require installation of additional software on the client machine, as SQL Express would
Please, provide your feedback to let me know how you have achieved this, without resorting to simply using an older version of VS or Management Studio.
Thank you.

Hello,
Based on your description, you can try to use SQL Server 2012 Express LocalDB.
LocalDB is created specifically for developers. It is very easy to install and requires no management, but it offers the same T-SQL language, programming surface and client-side providers as the regular SQL Server Express.
SQL Server LocalDB can work with Entity Framework and ADO.NET Syc Framework. However, there is no built-in encryption feature in LocalDB which
can let you encrypt database. You should decrypt/encrypt data on your own, for example, using
Cryptographic Functions
Reference:SQL Express v LocalDB v SQL Compact Edition
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

WCF Binding for Session

Hi
We are developing a Azure WCF service as a webrole which uses Azure AD for authentication. This works fine when using the default BasicHTTPBinding. Client is a windows forms application using Active Directory authentication library with token in the headers.
However, we require sessions and therefore would need to use WSHTTPBinding.
Kindly advise how to configure this binding with respect to security on the service as well as client side.
Thanks
Abhishek

Hi Vivian
Reply still awaited.
Update from my side: Came to the conclusion that we will need to go for NetTcpBinding because we need duplex communication behind a NAT.
Now I am looking for a sample where WCF BearerTokenMessageInspector on server and AdalAuthorizer on client can be applied along with message security using NetTcpBinding.
Kindly advise asap.
Best Regards
Abhishek

Considering a switch from Windows to Macbook Pro, Help

Hi, I've never owned a Mac before and I just recently noticed a lot of cool things they can do. I own a Lenovo laptop that is 3yrs old and works just fine. My question for you is, that if the only thing I use my laptop for is to surf and play poker on the web, am I just wasting a lot of money on this machine since I wouldn't be using everything it is capable of?? I use Itunes also a lot, but that's about it for my laptop. Thanks for any suggestions and help!

This sort of sounds like you want to move to a MacBook Pro... you just need to justify the purchase (a position I often find myself in). As you've pretty much mentioned, your current Lenovo machine works just fine for what you are using it for... so you probably know that you don't "need" a new machine. Having said that, if you are looking to get a new machine, the MB Pro is an excellent choice. You can still install Windows (either natively through something called BootCamp, or by setting up a virtual machine within OS X). So... with a new MacBook Pro, you're not losing anything. It will be faster (even for Windows). I personally am the type that just likes to play around with different operating systems as well. I don't really have any issues with Windows (and I actually like Windows 7)... but I also like to try out different Linux distros as well. OS X is really the only other operating system out there that is really consumer friendly. The community behind Apple products tends to be top notch as well. All too often when I go to a PC forum... if someone is asking a question where the answer may seem obvious... you end up with a ton of derogatory comments from users telling them how much of an idiot they are. That is very rare in the Apple support forums. Frankly, I'm not sure I have ever seen it... but since I can't say for sure it "never" happens... I'll just go with it happens "rarely". Other users are always very supportive and willing to help out with the simplest to the most complex issues... often taking the time to actually research questions and provide comprehensive responses.
So... in going with a Mac... you're not just getting the newer hardware (which... lets be honest... as nice as it looks... inside it's the same stuff as every other PC maker)... you're also getting a great secure OS and a support community that's second to none.
It doesn't sound like you "need" a new machine now... but if you really are itching to upgrade, moving to a MacBook Pro is a great choice.

Lightroom5 unable to authorize Flickr account?

When attempting to authorize my Flickr account in Lightroom 5, I get the following error message "Could not contact the Flickr web service. Please check your Internet connection." I'm using Safari. Lightroom 5 is the only version of Lightroom I have ever had.
I am looking for a solution to fix this problem. Surely there's a solution that would allow me to continue using Safari and not have to download a separate plug-in.
Thanks,

Hah, so this thread ends the same as so many others...someone behind the scenes realizes the oopsie et voila, problem mysteriously disappears into the Internet ether from whence it came.
In all seriousness, though, this issue has been going on since at least a few days. For shared services like this I usually look for other posts to see if anyone else is experiencing the issue within the same timeframe. This was the first thread I found that coincided, and that was already at least day 2 into the issue as far as I could see.
Either way, the timing was unfortunate such it was this weekend that I finally decided to try Flickr out for the first time, and I was really looking forward to using it in conjunction with LR. The steps to get them to work together were very straightforward...but with all the simplicity it still wouldn't work and only made it that much more frustrating. Talk about getting a sour first impression of both the LR software integration and the Flickr service! Being a techie, I still felt compelled to investigate further, looking at my system logs (but not so far as doing packet sniffing) in search of any clues as to what was going on in the communication behind the scenes since the LR error messages were not very descriptive. The jf Flickr plugin at least referred to an HTTP error.
Since I made no changes to my system or to the software, it's reasonable to assume the problem was on the server side.
Ah well, one can't complain too much using a free service...even though I was willing to pay them money for a subscription.
Enjoy!
- D

[Solved] UEFI + Partitioning + Bootloader = Hell

I've installed arch twice before this one, those were like a lovely stroll in the park compared to this Clockwork Orangesque torture i've been putting myself through. This time it's different because I have a system with UEFI firmware and I cannot for the life of me sort out this beginners guide to get this thing up and running.
As stated in the guide I verified through
efivar -l
that I am infact booted up through UEFI Mode.
It later goes on to recommend that I used GPT for my setup for UEFI booting.
It is recommended to always use GPT for UEFI boot, as some UEFI firmwares do not allow UEFI-MBR boot.
So I follow the instructions for creating GPT Partitions: https://wiki.archlinux.org/index.php/beginners'_guide#Using_cgdisk_to_create_GPT_partitions
Which tells me to create just two partitions: Root and Home
Later on in that same page however: https://wiki.archlinux.org/index.php/beginners'_guide#Create_filesystems
It tells me that I need to:
For UEFI, you should format the EFI System Partition (for example /dev/sdXY) with:
# mkfs.fat -F32 /dev/sdXY
With very little to elaborate on this earlier in the page. Although it does mention that:
If you have a UEFI motherboard, you will need to create an extra EFI System Partition.
But it gives no indication how large this partition needs to be.
I then find this:
https://wiki.archlinux.org/index.php/Un … _Partition
The EFI System Partition (also called ESP or EFISYS) is a FAT32 formatted physical partition (in the main partition table of the disk, not LVM or software raid etc.) from where the UEFI firmware launches the UEFI bootloader and application. It is a OS independent partition that acts as the storage place for the EFI bootloaders and applications which the firmware launches them. It is mandatory for UEFI boot. It should be marked as EF00 or ef00 type code in gdisk, or boot flag in case of GNU Parted (only for GPT disk). It is recommended to keep ESP size at 512 MiB although smaller/larger sizes are fine (smaller sizes provided it is higher than the minimum FAT32 FS partition size limit (as mandated by FAT32 specification from Microsoft).
(BTW, who uses mebibytes instead of megabytes?)
So... yeah... this was mostly a rant of sadness, after I get this thing up and running (After like 3 hours of beating my head against a wall and like 4 hours trying to get this to work) I really need to fix that friggan wiki... so that the next poor bastard that comes through, doesn't have to endure this PTSD enducing psychological torture...
My major issue was that I was not creating an EFI Partition for the GPT. Without which the bootloader (Gummiboot) is unable to communicate with the UEFI Firmware.
=============================================================================================
Solution - My two major mistakes were failing to create an EFI partition and using syslinux instead of gummiboot
=============================================================================================
1. Verify that your system is booting in UEFI Mode
https://wiki.archlinux.org/index.php/Be … _UEFI_mode
efivar -l
If you are in UEFI Mode, your system will output a list of UEFI Variables properly, if you are not, you will receive an error.
Continue on with the beginners guide as usual until you reach the "Using cgdisk to create GPT" portion
https://wiki.archlinux.org/index.php/Be … partitions
2. Create partions with cgboot (This was a crux for me, I didn't include the EFI Partition)
cgdisk /dev/sda
Choose New (or press N) – Enter for the first sector (2048) – type in 15G – Enter for the default hex code (8300) – Enter for a blank partition name.
Press the down arrow a couple of times to move to the larger free space area.
Choose New (or press N) – Enter for the first sector (2048) – type in 512M – Enter for the hex code for and EFI partition (ef00) – Enter for a blank partition name.
Choose New (or press N) – Enter for the first sector – Enter to use the rest of the drive (or you could type in the desired size; for example 30G) – Enter for the default hex code (8300) – Enter for a blank partition name.
here's how it will look
Part. # Size Partition Type Partition Name
1007.0 KiB free space
1 15.0 GiB Linux filesystem
2 512 MiB EFI Filesystem
3 123.45 GiB Linux filesystem
Now continue on with the Beginners guide until you reach the boot loader partition, I used Gummiboot successfully by following the simple instructions:
https://wiki.archlinux.org/index.php/Be … #Gummiboot
Last edited by cynicalpsycho (2014-11-02 04:55:35)

mrunion wrote:1) Since 1998
2) First install was in January 2007.
3) In total? 5-6 times. As a UEFI install? 2 times (including last Wednesday like I mentioned in my post).
1. Exactly, You're an arrogant, condescending snob that's been doing this for quite some time. Congrats, you can put together a linux box... well I would certainly hope so, you've been doing it for over 15 years now. But don't forget there was a point that even you had to overcome the learning curve and just because it's simple and clear to you, doesn't mean there aren't people out here that don't have 16 years of linux centric "common sense" behind them. Your current level of expertise is a cumulative evolution of 16 years of study and exposure and that is something you should take pride in, but being an arrogant twit about it just makes you look like a douche and it epitomizes exactly what gives the linux community a bad rap.
2. This Arch Wiki is (compared to most) massive, it's not streamlined, it has several passages that may or may not be used depending on the person, their equipment, preferences etc etc... So forgive me if I didn't read the parts telling me to configure my keymap to a language I don't need to configure it too. It also links to other pages without giving full elaboration on why. It eventually leads you through several rabbit holes and isn't clear by any means to someone who doesn't do this on the regular.
3. I get that Arch isn't a COTS windows solution... it does have a level of difficulty that must be overcome, and it does require research, (which I am totally all about doing, and if you'd read my post, you would see that I never asked directly for an answer, instead I was trying to offer solutions to make the wiki itself better, because there was something omitted within an example) but there is also a great community behind it, that does (or so I thought) work hard to help its user base through forums and documentation. But your previous post, was completely nonconstructive, and served no purpose other than to stroke your own overblown ego.
Last edited by cynicalpsycho (2014-11-04 16:34:35)

Adobe for PC has "Lifecycle" where a user can insert an image in PDF..

that has been Reader Enabled. How can someone using Acrobat for Mac do the same thing? Everything I've read says only PC users can do this. "Lifecycle" calls it an "Image Stamp"?

And.... Yo want to know the funny thing. Acrobat was originally created for the Mac Platform First.
See most PC people are afraid to try cutting edge technologies. So Companies will usually create something (such as Acrobat) on Mac Platform because we (Mac people) are so hungry for software, we'll try anything. If it goes great guns with us they'll let it stay with Mac, then they develop one for PC Platform, naturally because the PC Community is a bigger base, they will put more features, bells and whistles, in the PC version; and leave the Mac Community behind, because they figure we are happy just to get working software, we will put up with the less bells and whistles. And in some cases. Companies once they get a good software going on the Mac platform, then get one for the PC platform, will just abandon the Mac Platform Altogether.
Corel use to have products for Mac, they don't now. Intuit stopped selling Quickbook Pro for Mac for almost 10 years. At one point before Office 2004 came out for Mac there was some question even if a another Mac version would be available. The MacBU (mac Business Unit), is constantly having to beg for personel and funds to keep office going for Mac (though from recent reports since Gates has gotten out of the picture, the next version will have adequate personel and Funding. MS quit outright developing IE for the Mac (Billy boy got upset about Apple coming out with Safari, and picked up his marbles and left.) Lotus 1-2-3 had a good database program for the Mac. Wordperfect was a Super Word Processor for the Mac. Many Lawyers still use it by means of a program called SheepShaver. Its a lot better than word ever was. It does legalese and boilerplating far better than word ever will. And they have a feature called Reveal codes everyone brags about. However the PC version of WordPerfect still exist, on PC. IF I had the time I could think of other examples.

Which ports to open on FW for Voip

Hello,
Can anyone tell me which ports (TCP and UPD) to open on the firewall when you have ip phones and ip communicator behind it?
This just to squeeze down the range a bit.
Thanks for your help.
Kurt

Kurt,
Take a look at the following link.
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/sec_vir/udp_tcp/index.htm
Hope this helps. If so, please rate the post.
Brandon

Getting cFP-1808 Data to cFP-2120 Controller

Hello,
We have an existing cFP-2120 Controller with the following embedded system software. We are on LabView 7.1.1 on the Windows Host.
LabView Realtime
7.1
NI-Watchdog
2.1.2
NI-VISA
3.2
NI-Serial RT
2.5.4
NI-IrDA RT
1.0.1
Datsocket for LabView Realtime
4.2
FieldPoint Drivers
5.1.0
FieldPoint VI Manager
3.1.0
We have purchased a cFP-1808 Ethernet/Serial backplane and additional I/O modules to extend the I/O on this system (as the I/O on the existing controller's 8-slot backplane is already full with 3 AI-111, 3-DI-301 and 2-RLY-420 modules). We were told and I have seen documents that suggest that we should be able to read data from the cFP-1808 on the cFP-2120.
Unfortunately, however, we can only read data on the first module (an AI-111) and up to the second module's channel 11 (a DI-301). The data reads fine within NiMAX, but not from the controller. No channels after that channel can be read either. The module has been swapped and the backplane swapped as well.
The cFP-1808 is on the same subnet, etc. The Ethernet info is:
cFP-2120 Controller, 10.0.0.242
cFP-1808 Backplane, 10.0.0.142
Subnet Mask(s) 255.255.255.0
As I said, some of the data can be read up to a certain channel and the I/O data can be read within MAX. So, it's not really an Ethernet config issue. So please, *no replies on the Ethernet config* or hardware setup.
We are also trying the Optomux (extended) Commands via the serial connection (direct via null modem cable), but have not had much luck there either.
If we can not extend the I/O in this way, then how else would be with such an existing controller?
Thanks,
Tom Held
Miller Engineering
Information Technologies Group

Please allow me to answer my own post here.
We were able to read data on modules residing on a cFP-1808 I/O backplane from a cFP-2120 controller. This was done using "logos" protocol and the Datasockets functions. The format of the URL is as such
logos://10.0.0.10/FP/4DI/12
where,
10.0.0.10 is the configured IP address of the cFP-1808
FP is constant for FieldPoint
4 refers to the number "4" module in the bank
DI is a designation of a digital input module (in our case a DI-301 module), and
12 is the number "12" input channel
We were under the incorrect impression that Datasockets could not be used on an embedded/controller system. To the contrary, this does work.
There are recent documents released by Idaho National Labs and other government studies in SCADA security that suggest that the Datasockets protocol is not secure. Therefore, we have made some reassurances by isolating this communication behind a firewall. Only a single Windows XP host can communicate with the network segment which contains both the cFP-2120 controller and the cFP-1808 I/O backplane.
We were never able to get the Extended Optomux functions to work between cFP-2120 controller and cFP-1808 I/O backplane (using respective serial ports and null modem adapter). This would be a secured method as well, if it could be made to work.
Tom Held

Arch is amazing!

I Just wanted to show my appreciation for Arch linux and the strong community behind it. I have been a Slackware user for a very long time because I wanted a system that could be customized to my personal needs. However I recently ran across Arch linux & decided to give it a try; and i must say, I am VERY impressed!
impressed enough to convert from Slackware altogether! Over the years I have probably tried hundreds of distros, each with there own quirks and pre-packaged options. I'm not saying there is anything wrong with that, but for an advanced user it can feel like being trapped in a box.
Arch linux is, in my humble opinion, one of the finest versions of Linux it has ever been my pleasure to use!:cool:

Arch is my weapon of choice.
I was so happy when I found it.
It's odd.. there are so few OS's that let you do what you want to do with your hardware.
I mean.. Technically any linux can be customised, but for some reason when I start mucking around with other distros the way I tend to they tend to get unstable. But because with arch you get things pretty much "out of the box" you can tweak and things don't break. Its like getting one of those Tomika cars. You know the moulded plastic ones with the little electric motors. All the important parts are there, but they are in pieces. And if you know what your doing, you can change the way it goes together.
Im ranting now.. but damn it.. It's just that amazing!

Control flow extraction

I am looking for a package that gives me the control flow of a given java program. I need this information so that I can do some static analysis on the control flow.
Can anyone recommend anything?
Thanks

Barat (http://pmd.sourceforge.net) provides a very nice object view of Java source (control structures and all). The distribution is very untidy and it relies on the "Poor Man's Genericity" package. It is a pain to use but I like it a lot. Not much of a community behind it.
PMD (http://sourceforge.net/projects/barat) seems to be a very solid and polished static analysis framework. I haven't used it much. If I remember correctly it gives you an abstract-tree view of the source rather than a coupled object model of it.
Then again you can roll your own. Both these projects rely on JavaCC/JJTree combo (https://javacc.dev.java.net) to build a syntax tree.

How SunOS, Linux & Unix differs from each other?

Hi,
I have worked on Windows based Oracle database. Now, I have to work on Oracle which is Sun OS based. I have never worked on either of Sun OS, Linux or Unix.
I am confused whether Sun OS is same Unix or Linux? Whet should I learn?
Please help me.
Thanks

so if you are to work with Oracle on Sun OS (Solaris) why not trying out at home ?
You can go with Linux first and after you became a real Unix freak and want to try a VERY userfriendly Unix, you may try Solaris10 on your box. It is Open Source like Linux and can be downloaded free at sun.com (the stable release used for production systems). The newest Oracle releases and patchsets are available for it (32 and 64 bit). It offers some new concepts and (what I like most) is a system usable for home apps up to really big and mission critical applications (you can use it in production systems with 100 or more CPUs).
I am using it even as my desktop system in my office since 2 years.
I got nerved by those Linux-Distributions always doing something in a different way in each new release. But sure, the driver support for some taiwanese hardware there is still better than with Solaris.
Solaris is IMHO not too different anymore in terms of user friendlyness (Gnome is just called Java Desktop System, KDE is also available) and there is a real professional open source community behind it at opensolaris.org. Due to it's kernel qualities there are discussions about releasing Solaris under GPL and creating the GNU operating system from it.

Zen Micro Revision Question's

I work at a local reatailer which sells zen micro's, & i've done a ton of research - i have to say that the zen's have a good reputation so far and what appears to be a solid community behind them (not surprising given creatives overall rep).
I have knowticed however, that there seems to be 2 different part numbers associated with the Zen Micro's, for example the black zen has both 70PF0800000 & 70PF08000000, both are black, post the same spec's and seem to be identical. Anyone know what the differance is (Firmware, headphone jack etc. - <EM>yes i have read the READ ME FIRST post</EM>)?
I ask this because im looking to buy one and have the oportunity to order myself either one... and i'd rather get the newest. Also there's some exclusi've mailin rebates floating around some retailers but they require a specific part number (not going to say where or how much, im not trying to promote), but as they seem identical to me, i dono if creative will kick up a fuss about it.

The only 00% confirmed differences are the repackaged version since the price drop (without mains adapter etc.) and the very minor change to the face plate.

DMVPN: HUB's behind a LoadBalancer and Spoke-Spoke communication

Hallo,
we are planning a scaling DMVPN network for around 2000 spokes.
Is it possible to install the HUB's behind a Load Balancer so that they are reachable only through 1 VIP address and ALSO the possibility of a direkt spoke-spoke communication when needed?
I only found Phase 2 and SLB for HUBs but
without a spoke-spoke communication.
http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313ca3.pdf
see page 13 there is what we like to have but with the extension of spoke-spoke communication.
regards
Karlheinz

I have been waiting for Cisco to get the spoke-spoke functionality working for this DMVPN HUBs behind load balancer environment. The traditional DMVPN with multiple HUBs does not really scale well, plus it is not very stable routing and NHRP wise.
Would you care to tell more about your solution. As far as I know on a HUB you cannot have one tunnel for spoke to HUB connections and the other just for HUB-HUB, the NHRP requests from the spokes to find out about the other spoke public IP will not be forwarded between the tunnel interfaces on the HUB

Hi Apple Community. I have a iPhone 4S . The phone works perfect, besides when to swipe to unlock to home screen. It takes 1-4 swipes. Whats the reason behind it?

Hi Apple Community. I have a iPhone 4S . The phone works perfect, besides when to swipe to unlock to home screen. It takes 1-4 swipes. Whats the reason behind it?

Ghubash wrote:
My iphone 4s haven't facetime?
This is an unrelated issue... Please start your own thread.

Communications behind CSS11501

Similar Messages

Maybe you are looking for