Content Switch sending request to both servers

Hi,
I have following configuration on the content switch and it send the request to both the servers. due to two tcp stream from going via two different server it second request fails and generate false alerts.
It was working fine but since last week it is giving lot of false alerts.
content StatePMVQLMVMS_8PR3
    vip address X.X.X.X
    add service W8PRAKLQLM01_StateVMS_8HTTP3
    add service W8PRAKLQLM02_StateVMS_8HTTP3
    advanced-balance sticky-srcip
    port XXXX
    protocol tcp
    active
Please let me know what should I check to get this fixed. I hardly work with content switch.
Is there a way I can set up to send all the request to primary server and when it dies then and only then it send a request to secondary and when primary comes back online it restore back to primary ????
I am fine if it does not load balance .. but at least it stop sending false alerts..
Thanks.

Hi Nilay,
You have configured sticky based on src-ip which means that as long as src IP remains same the user would be sent to the same server.
Now a situation where CSS starts sending the request to different servers could be due to the fact that sticky table was full. In that situation a new connection from same user will be load balanced according to the LB method. If the sticky table is full and none of the sticky entries has expired, the CSS rejects the new sticky request.
You can use sticky-inact-timeout to ensure that sticky entries flush out after they have been inactive for some amount of time.
Please visit the below link for more details about it.
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/content_lb/guide/cntntgd.pdf
Regards,
Kanwal

Similar Messages

Firefox apparently sends requests that some servers cannot understand. For example, if I try to log out of Facebook, I get an error that says it is a bad request. Same thing doesn't happen with Safari.

I get this message:
Bad Request
Your browser sent a request that this server could not understand.

Not sure from your example but it appears that the address doesn't have a full domain, i.e., the part between http:// and the next / is not a valid internet domain name, e.g.,
http://sometext-webproxy/
In that case, it's probably something running on your computer, either as part of your security software, or as a Firefox add-on, or malware.
A standard diagnostic to bypass interference by extensions (and some custom settings) is to try Firefox's Safe Mode.
First, I recommend backing up your Firefox settings in case something goes wrong. See [[Backing up your information]]. (You can copy your entire Firefox profile folder somewhere outside of the Mozilla folder.)
Next, restart Firefox in Firefox's Safe Mode ([[Safe Mode]]) using
Help > Restart with Add-ons Disabled
In the dialog, click "Start in Safe Mode."
If you can access sites normally, this points to one of your extensions or custom settings as the problem.
To also disable plugins, you can try here:
orange Firefox button ''or'' classic Tools menu > Add-ons > Plugins category
Any change?

DNS request behind content switch: troubleshooting

Hi, sometimes we experience problems resolving a dns name behind a content switch. The problem solves himself after 5 minutes or something like that. We see the dns request on the dns servers subnet. It looks like the is a problem when the packet returns. I'm thinking of a nat problem. How can i best troubleshoot this?

Can i e-mail you the config file? I will also e-mail as soon as possible a network capture in front of the CSS. Where can i e-mail it? For the moment dns is working so i will have to wait for network capture untill it fails again.
Kind regards,
Frederik De Muyter
[email protected]

How to send request to web service using .pem certificate.

Dear All,
I have a .pem, WSDL file and (Request and Response format), this files are provided by the customer, now I have generated the ServiceClass using WSDL file using wsdl.exe.
Now when I send the request I am getting error as "The underlying connection was closed: An unexpected error
occurred on a send" when I told my customer to remove the certificate validation from their web service the "Request
and Response both are working fine".
When I opened the .pem file in notepad the content was
-----BEGIN CERTIFICATE-----
dfkhdfhsdfghgfjhAklajdaJHZKkjjHAKJhjkhkjhkjhkjhkjJKJHKJ......................................
/R-----END CERTIFICATE-----
and nothing else was there as per my client my code is proper for sending request to web service but the using of file i.e .pem file is not proper.
I want to know what else I have to do my customer have given me only .pem file with -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- nothing else in the file.
Can anybody please help me in this, below is my code snapshot.
try
var pem = System.IO.File.ReadAllText(Application.StartupPath + "\\server_selfsigned.pem");
byte[] certBuffer = GetBytesFromPEM(pem, "CERTIFICATE");
SMSService sms = new SMSService(txtURL.Text.Trim());
sms.ClientCertificates.Add(new System.Security.Cryptography.X509Certificates.X509Certificate2
(certBuffer));
SMSRequest smsReq = new SMSRequest();
smsReq.UID = "2000";
smsReq.SMSDetails = new SMSRequestSMSDetails { MessageText = txtMessage.Text.Trim(), MobileNumber = txtMobile.Text.Trim() };
SMSReponse smsRes = sms.sendSMSOperation(smsReq);
MessageBox.Show(smsRes.Code + " = " + smsRes.Message + " = " + smsRes.Status);
catch (Exception ex)
MessageBox.Show(ex.Message);
Thanks in advance.
Best Regards,
Manoj Gupta.

Hi,
This issue might be due to the invalid .pem certificate file.
Make sure to include the beginning and end tags on each certificate.
The result should look like this:
-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: DigiCertCA.crt)
-----END CERTIFICATE-----
For more detailed information, you could refer to:
https://www.digicert.com/ssl-support/pem-ssl-creation.htm
Regards

SAP talking to another sever that is load balancing (with a content switch)

Hi All,
We are retrieving some files from an external server in SAP from an ABAP report using HTTP. The external server is also load balacing on 3 servers. There is a content server (proxy server) which carries the sap request to one of the three servers.
We are able to retrieve the files when we directly connect to one of the three server, However when SAP calls the content server, we get a HTTP code error -404 Status - Not found. Here is the excerpt of code where this error is coming up-
CALL METHOD w_http_client->response->get_status
IMPORTING
code = lv_http_code
reason = lv_status_text.
The external server (content server) is supposed to be transparent and thus SAP should be able to connect. But this does not happen.
Any ideas?
Thanks in advance! Liz

We are now connecting SAP directly one server since we could not connect to the content switch.
Thanks, Liz

Cisco Content Switch 11503

Directed towards any users of this product line out there.
I have a client who is on the older hardware platform (11100);. and is
looking to invest in a pair of new switches/balancers. I have the follwoing
outsntanding questions that i'm needing to confirm on the 11503
- Source NAT - is this required to always be on? for marketing, reporting and debugging purposes, we're wanting to ensure we can have the client's original ip address preserved once request hits web/app, not rewritten at the content switch.
- sessions - any concerns running up to 30 - 50k of simultaeous sessions on
the 11503? require the the addt'l session accel modeule?
thanks for the input.
> Byron
> www.kennedytechgroup.com

Byron,
source nat is not a requirement of the CSS.
It depends how you design your network and where you place the CSS.
If you do not want source nat, make sure the servers are placed behind the CSS and that the path from server to client always goes through the CSS.
For the amount of connections, each module can handle up to 200k concurrent connections.
So, the CSS with only 1 module should be ok.
Gilles.

I'm having trouble with my Apple ID. I changed my email account, and recently (a month ago) and since I switched is requested every time I open any app to Apple ID password to the old email. How can I solve this? Could it be that my iPhone 4S is in sync w

I'm having trouble with my Apple ID. I changed my email account, and recently (a month ago) and since I switched is requested every time I open any app to Apple ID password to the old email. How can I solve this? Could it be that my iPhone 4S is in sync with my Ipod???

If you updated your existing account then try logging out of it on the iPhone by tapping on the id in Settings > iTunes & App Stores and then log back in and see if that 'refreshes' the account on the iPhone. If you created a new account then any content that you purchased/downloaded via the old account will remain tied to that old account, and only that old account can download updates to its apps.

Java.lang.Exception: IOException in sending Request :: Connection refused:

Hi all,
I am a new to Oracle 10g.I am using Enterprise manager for DBA jobs.After ogging in to enterprise manager, when i click the refresh button, i get the folllowing error
" java.lang.Exception: IOException in sending Request :: Connection refused: connect"
Please do help to slove this problem.
Thanks

I'm having the same error in my console header. Here is the content of the emagent.trc file.
Running 10gR2 on Win 2K3 server. (bold added for readability)
emctl status dbconsole responds with 'EM Daemon is not running'
2007-03-29 14:02:23 Thread-1776 ERROR pingManager: nmepm_pingReposURL: Did not receive a response header from repository
2007-03-29 14:02:23 Thread-1776 WARN main: clear collection state due to OMS_version difference
2007-03-29 14:02:23 Thread-1776 WARN command: Job Subsystem Timeout set at 600 seconds
2007-03-29 14:02:24 Thread-1776 WARN upload: Upload manager has no Failure script: disabled
2007-03-29 14:02:24 Thread-1776 WARN upload: Recovering left over xml files in upload directory
2007-03-29 14:02:24 Thread-2920 ERROR command: nmejcn: received no status header from repository at http://dB_Domain:5500/em/upload/
2007-03-29 14:02:24 Thread-1776 WARN upload: Recovered 0 left over xml files in upload directory
2007-03-29 14:02:25 Thread-1776 WARN metadata: Metric collectSnapshot does not have any data columns
2007-03-29 14:02:27 Thread-1776 WARN metadata: Metric Disk_Path does not have any data columns
2007-03-29 14:02:27 Thread-1776 WARN metadata: Metric osm_diskGroupPolicies does not have any data columns
2007-03-29 14:02:53 Thread-1776 WARN TargetManager: Regenerating all Metadata
2007-03-29 14:05:17 Thread-1776 ERROR util.files: ERROR: nmeufis_new: failed in lfiopn on file: E:\oracle\product\10.2.0\db_3\dB_Domain_SIGD\sysman\emd\agntstmp.txt. error = 2 (No such file or directory)
2007-03-29 14:05:28 Thread-1776 ERROR collector: nmecs_validateStateFile(): state file invalid : E:\oracle\product\10.2.0\db_3\dB_Domain_SIGD\sysman\emd\state\snapshot
2007-03-29 14:05:28 Thread-1776 ERROR collector: Collector state files cleaned, severity will be resent
2007-03-29 14:05:35 Thread-3660 ERROR upload: Error in uploadXMLFiles. Trying again in 60.00 seconds.
2007-03-29 14:05:48 Thread-676 ERROR upload: Failed to delete/move xml file C:\WINDOWS\TEMP\X11.uod, ret = -2 ; agent exiting
2007-03-29 14:05:48 Thread-676 ERROR : Signalled to Exit with status 3
2007-03-29 14:05:48 Thread-1776 ERROR main: EMAgent abnormal terminating
2007-03-29 14:06:29 Thread-2996 WARN command: Job Subsystem Timeout set at 600 seconds
2007-03-29 14:06:29 Thread-2996 WARN upload: Upload manager has no Failure script: disabled
2007-03-29 14:06:29 Thread-2996 WARN upload: Recovering left over xml files in upload directory
2007-03-29 14:06:29 Thread-2996 WARN upload: Recovered 5 left over xml files in upload directory
2007-03-29 14:06:29 Thread-2996 WARN upload: Merging leftover data file named errors.dat
2007-03-29 14:06:29 Thread-2996 WARN upload: Merging leftover data file named severity.dat
2007-03-29 14:06:30 Thread-2996 WARN upload: Merging leftover data file named rawdata.dat
2007-03-29 14:06:30 Thread-2996 WARN metadata: Metric collectSnapshot does not have any data columns
2007-03-29 14:06:31 Thread-2996 WARN metadata: Metric Disk_Path does not have any data columns
2007-03-29 14:06:31 Thread-2996 WARN metadata: Metric osm_diskGroupPolicies does not have any data columns
2007-03-29 14:07:29 Thread-2328 ERROR util.files: nmeufile_getLength: Error in lfilen. Error = 2 (No such file or directory)
2007-03-29 14:15:19 Thread-1960 WARN http: 268,-1: nmehl_httpListener: signaled to exit from emctl
Thank you for your help!
Message was edited by:
david.d

Switch sending tcp traffic to incorrect interface

Need help diagnosing a layer 2 networking issue. We had a report from an end user of slow file server access from his computer but local applications were responding normally. No one else was having issues in his area. Port mirrored the employees access port (Gi1/0/33) and noticed traffic from another computer crossing onto his port. Our design is to have one computer per port. This traffic was not intended for his computer as it was another employee opening and closing files on the file server (file server located on another switch). Checked MAC address table and his MAC address was the only one associated on the port. Traced the 2nd employees MAC address to a neighboring port (Gi1/0/35). Only MAC address associated on Gi1/0/35 was the 2nd employees. Cleared the mac address entry for Gi1/0/33 only and the extra traffic was eliminated immediately.
Why would a switch send tcp traffic to a port that a client does not communicate on? I asked the second employee if they noticed any issue in accessing the file server and none were reported. Switch is a 3750x with version 12.2.

I've been double checking everything this morning and I feel we were not attacked. All the MAC addresses in my capture are valid system addresses. ISE does not show any authorized machines attempting to connect to the switch. We have DHCP snooping enabled throughout the organization. That was a great article to learn from though.
I've included a visio of the setup and a snippet of the wire capture and arp/mac tables as were captured during the incident. Traffic from the fileserver intended for employee 2 was flooding the port employee 1 was connected on. The destination MAC address of the packets were not meant for employee 1.
Default config for both ports:
switchport access vlan 101
switchport mode access
ip access-group ACL_DEFAULT in
authentication event fail action next-method
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication violation restrict
mab
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
spanning-tree bpduguard enable
Am I missing something? Was this an attack? Was it a fluke?

Two load balanced server sending requests to external system on different protocol

Hi,
I have two loadbalanced OEG servers (server A and server B) with same endpoint configurations in envsetting.props. But when requesting the service, it is creting different URI in both servers. In one of server (server A)it sets URI with following details :
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set host='abc.tdc.dk'
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set port='80'
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set scheme='https'
and fails with following error : ERROR   30/Mar/2015:07:29:34.370 [92b0e940]         [SSL_connect, 0x1220]: error - SSLv2/v3 read server hello A.
However another server (server B),sets URI as :
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set host='abc.tdc.dk'
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set port='80'
DEBUG   30/Mar/2015:07:29:34.356 [92b0e940]     Set scheme='http'
and successfully processes the request.
So can you please help here to know even if we are using same endpoints configuration (abc.tdc.dk ) and port (80) on both the servers , then why the URL is set as http on one of server and https on another.
Thanks !!!
Akshay

Hi
Thanks for immediate respose. I tried the ping/acknowledgement example in the biginning itself. It doesn't work. I also tried by changing the agents ( to respective values suitable for my systems) of that example. Then also it failed. The error in that case also same. The message will not propogate from the out going agent.

Citrix and Content Switches

I'm curious if anyone is using the Cisco Content switches to load balance traffic/sessions across a citrix server farm. Any luck and what type of load balancing method did you use? Round robin? Response time? And do these methods REALLY work with Citrix applications/servers for appropriate load balancing?

I just load balanced two Citrix servers using Cisco CSS11150 load balancing switches. Because Citrix uses login for each user, load balancing required stickyness. I load balanced using cookies. This works great. You need to configure the cookie string in the service. You need to configure prefix and length in the content rule. There are several ways to load balance using cookies. The server needs to set the cookie in the first reply back to the client.
[email protected]

CSM-Content Switching Module

Hi All,
How to shutdown Content Switching Module in Cat 6500 switches ? I want to shutdown only CSM-Module without disturbing Chassis.
Can anyone please send me the command on that ?
Highly appreciate your valuable reply.
Thanks,

Hi,
Assuming you are using IOS, you can power-down a module in a 6500 chassis using the command
"no power enable module " in global config mode where is the slot number of the CSM.
If you are using CatOS then the command would be:
"set module power down "
The CSM should be hot-swappable so you should be able to just pull it out of the chassis, but I think that is a bit vicious if you only want to shut it down.
HTH
Cathy

We are unable to connect to the content you've requested (message when I try to view a DVD)

"we are unable to connect to the content you've requested." I'm trying to view a DVD, but I'm getting this message on both my iMac and my MacBookAir. There are two DVD's and I'm getting the same message using either DVD on both computers. I was sent a Flash drive w/ the same video, but I am getting the same message again. One of the DVD's was a replacement, because I thought it was a DVD problem, but now I think it's a computer problem, but I have no idea what to do. It must be a setting, but I know nothing about hardware. If there is a solutiion, I need a step by step answer that I can print out and follow.

My apps are updating OK. This may be an iTunes/App Store server issue, but you can try restarting the iPad and see if that helps. You can also try quitting the app store, restart and try again,
Restart the iPad by holding down on the sleep button until the red slider appears and then slide to shut off. To power up hold the sleep button until the Apple logo appears and let go of the button.
In order to quit or close apps - Go to the home screen first by tapping the home button. Quit/close open apps by double tapping the home button and the task bar will appear with all of you recent/open apps displayed at the bottom. Tap and hold down on any app icon until it begins to wiggle. Tap the minus sign in the upper left corner to close the apps. Restart the iPad. Restart the iPad by holding down on the sleep button until the red slider appears and then slide to shut off. To power up hold the sleep button until the Apple logo appears and let go of the button.

How do I connect my phone to my iPad to receive and send iMessage from both?

How do I connect my phone to my iPad to receive and send iMessage from both?

You can't physically connect an iPad and iPhone. However, you can bluetooth tether.
iOS: Understanding Personal Hotspot
http://support.apple.com/kb/HT4517
Use Bluetooth to tether your iPhone, iPod touch, or iPad
http://www.macworld.com/article/1159258/bluetooth_tethering.html
How to Connect an iPad to an iPhone Via Bluetooth Tethering
http://techtips.salon.com/connect-ipad-iphone-via-bluetooth-tethering-25472.html
Using FaceTime http://support.apple.com/kb/ht4319
Troubleshooting FaceTime http://support.apple.com/kb/TS3367
The Complete Guide to FaceTime + iMessage: Setup, Use, and Troubleshooting
http://tinyurl.com/a7odey8
Troubleshooting FaceTime and iMessage activation
http://support.apple.com/kb/TS4268
iOS: FaceTime is 'Unable to verify email because it is in use'
http://support.apple.com/kb/TS3510
Using FaceTime and iMessage behind a firewall
http://support.apple.com/kb/HT4245
iOS: About Messages
http://support.apple.com/kb/HT3529
Set up iMessage
http://www.apple.com/ca/ios/messages/
iOS and OS X: Link your phone number and Apple ID for use with FaceTime and iMessage
http://support.apple.com/kb/HT5538
How to Set Up & Use iMessage on iPhone, iPad, & iPod touch with iOS
http://osxdaily.com/2011/10/18/set-up-imessage-on-iphone-ipad-ipod-touch-with-io s-5/
Set Up Alert Sounds
http://www.quepublishing.com/articles/article.aspx?p=1873027&seqNum=3
Extra FaceTime IDs
http://tinyurl.com/k683gr4
Troubleshooting Messages
http://support.apple.com/kb/TS2755
Troubleshooting iMessage Issues: Some Useful Tips You Should Try
http://www.igeeksblog.com/troubleshooting-imessage-issues/
Setting Up Multiple iOS Devices for iMessage and Facetime
http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l
FaceTime and iMessage not accepting Apple ID password
http://www.ilounge.com/index.php/articles/comments/facetime-and-imessage-not-acc epting-apple-id-password/
Fix Can’t Sign Into FaceTime or iMessage iOS 7
http://ipadtutr.com/fix-login-facetime-imessage-ios-7/
FaceTime, Game Center, Messages: Troubleshooting sign in issues
http://support.apple.com/kb/TS3970
Unable to use FaceTime and iMessage with my apple ID
https://discussions.apple.com/thread/4649373?tstart=90
iOS 7 allows you to block phone numbers or e-mail addresses from contacting you via the Phone, FaceTime, or Messages
http://howto.cnet.com/8301-11310_39-57602643-285/you-can-block-people-from-conta cting-you-on-ios-7/
How to Block Someone on FaceTime
http://www.ehow.com/how_10033185_block-someone-facetime.html
My Facetime Doesn't Ring
https://discussions.apple.com/message/19087457#19087457
How to watch FaceTime calls on the big screen with Apple TV
http://www.imore.com/daily-tip-ios-5-airplay-mirroring-facetime
Send an iMessage as a Text Message Instead with a Quick Tap & Hold
http://osxdaily.com/2012/11/18/send-imessage-as-text-message/
To send messages to non-Apple devices, check out the TextFree app https://itunes.apple.com/us/app/text-free-textfree-sms-real/id399355755?mt=8
How to Send SMS from iPad
http://www.iskysoft.com/apple-ipad/send-sms-from-ipad.html
How to Receive SMS Messages on an iPad
http://yourbusiness.azcentral.com/receive-sms-messages-ipad-16776.html
Apps for Texting http://appadvice.com/appguides/show/apps-for-texting
You can check the status of the FaceTime/iMessage servers at this link.
http://www.apple.com/support/systemstatus/
 Cheers, Tom

Content switch "stickiness"

I manage a content switch version: sg0810106. I have a customer that has the following requirements:
The user connects via port 8080 to a VIP on the CSS and the CSS provides them with an Arrowpoint cookie for stickiness. From there If the customer picks CAC authentication, a new session is opened on port 443 to the same VIP on the CSS. The application requires that they be mapped back to the same server they were communicating with on port 8080 to complete the authentication process. The Arrowpoint session cookie is only good for the 8080 session, so the CSS will not use it to map them back to the same server. There are 3 servers mapped to each content.
Is there a way to map a user back to the same server they were mapped to on a different port?
Thanks for the assistance!
Thanks!

Are you terminating SSL at the CSS at all?
The thought that occurs to me is that if not, you could use a single content rule just have no ports specified, and use src-ip (assuming no proxy/nat) do handle sticky.
You may get better help though in the datacentre/applicatio networking forum.
Paul.

Content Switch sending request to both servers

Similar Messages

Maybe you are looking for