Content switch session incorrect.

Hi Guys,
i did a test on a set of Load Balancer, which is currently being setup. VIP address is 192.168.11.77 and web server is 192.168.11.48. Port from web server is 8080.
When I telnet to 192.168.11.77 thru port 8080 and try got get a page thru command "GET /nagiosstat/indexright.html", I didn't get the reply.
Noticed that during the transaction, the backend web server (192.168.11.48) come into picture and try to talk to the client (sms). This has caused the transaction between (sms) and 192.168.11.77 become incomplete.
From one server telnet to Web server www.miw.com.sg thru port 8080
sms -> 192.168.11.77 HTTP (proxy) C port=41015
192.168.11.77 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.77 HTTP (proxy) C port=41015
sms -> 192.168.11.77 HTTP GET /nagiosstat/indexright.html
192.168.11.77 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.77 HTTP (body)
192.168.11.48 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.48 HTTP (proxy) C port=41015
sms -> 192.168.11.77 HTTP (body)
192.168.11.48 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.48 HTTP (proxy) C port=41015
sms -> 192.168.11.77 HTTP (body)
192.168.11.48 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.48 HTTP (proxy) C port=41015
sms -> 192.168.11.77 HTTP (body)
192.168.11.48 -> sms HTTP (proxy) R port=41015
sms -> 192.168.11.48 HTTP (proxy) C port=41015
Any idea how we can solve this ??
Regards,
kelvin

Hi Gilles,
Thanks for the response.
We have another pair of CSS with the same design.
Below is the snoop i got and is working fine.hmmm i'm puzzled.
www.miw.com.sg is support by 1st set of Load Balancer, which is currently in operation. VIP address is 202.79.212.55 and web server is holding another IP address, port from web server is port 80.
When I telnet to www.miw.com.sg (202.79.212.55) thru port 80 and get the page thru command "GET /Home/main.jsp", I get the reply correctly. Noticed that the complete transaction only talk to the vip address - www.miw.com.sg.
From one server telnet to Web server www.miw.com.sg thru port 80
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP R port=54521
mekong1 -> www.miw.com.sg HTTP C port=54521
mekong1 -> www.miw.com.sg HTTP GET /Home/main.jsp
www.miw.com.sg -> mekong1 HTTP R port=54521
mekong1 -> www.miw.com.sg HTTP (body)
www.miw.com.sg -> mekong1 HTTP R port=54521
www.miw.com.sg -> mekong1 HTTP R port=54521
www.miw.com.sg -> mekong1 HTTP (body)
www.miw.com.sg -> mekong1 HTTP inName,features) { //v2.0
www.miw.com.sg -> mekong1 HTTP rc="/Images/blank.gif" width="1" height="5">
mekong1 -> www.miw.com.sg HTTP C port=54521
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP
www.miw.com.sg -> mekong1 HTTP
www.miw.com.sg -> mekong1 HTTP ly:Helvetica; font-size:11px; padding-left:4px;" onfocus="if(value=='Search MIW')
www.miw.com.sg -> mekong1 HTTP obj.style.height = docHeight + 10 + 'px'
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP ft">
www.miw.com.sg -> mekong1 HTTP a.com/go/getflashplayer" type="application/x-shockwave-flash" width="380" height=
www.miw.com.sg -> mekong1 HTTP height="22" border="0">
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP f/NSReg/NSRegister.jsp">
www.miw.com.sg -> mekong1 HTTP ttp://www.miw.com.sg/Mindef/ExitPermit/Internet/epAppln.jsp">Apply
www.miw.com.sg -> mekong1 HTTP (body)
mekong1 -> www.miw.com.sg HTTP C port=54521
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP (body)
www.miw.com.sg -> mekong1 HTTP enhancement.asp" target="_blank">
www.miw.com.sg -> mekong1 HTTP
www.miw.com.sg -> mekong1 HTTP idth="100%" border="0" cellspacing="0" cellpadding="7">
www.miw.com.sg -> mekong1 HTTP
Lawww.miw.com.sg -> mekong1 HTTP ght="25">
mekong1 -> www.miw.com.sg HTTP C port=54521
www.miw.com.sg -> mekong1 HTTP 80" border="0">
www.miw.com.sg -> mekong1 HTTP >Peace of Mind. We've got you covered.
mekong1 -> www.miw.com.sg HTTP C port=54521
mekong1 -> www.miw.com.sg HTTP C port=54521
mekong1 -> www.miw.com.sg HTTP C port=54521
I will take your advise and create a new segment behind the CSS.

Similar Messages

Citrix and Content Switches

I'm curious if anyone is using the Cisco Content switches to load balance traffic/sessions across a citrix server farm. Any luck and what type of load balancing method did you use? Round robin? Response time? And do these methods REALLY work with Citrix applications/servers for appropriate load balancing?

I just load balanced two Citrix servers using Cisco CSS11150 load balancing switches. Because Citrix uses login for each user, load balancing required stickyness. I load balanced using cookies. This works great. You need to configure the cookie string in the service. You need to configure prefix and length in the content rule. There are several ways to load balance using cookies. The server needs to set the cookie in the first reply back to the client.
[email protected]

Content switch "stickiness"

I manage a content switch version: sg0810106. I have a customer that has the following requirements:
The user connects via port 8080 to a VIP on the CSS and the CSS provides them with an Arrowpoint cookie for stickiness. From there If the customer picks CAC authentication, a new session is opened on port 443 to the same VIP on the CSS. The application requires that they be mapped back to the same server they were communicating with on port 8080 to complete the authentication process. The Arrowpoint session cookie is only good for the 8080 session, so the CSS will not use it to map them back to the same server. There are 3 servers mapped to each content.
Is there a way to map a user back to the same server they were mapped to on a different port?
Thanks for the assistance!
Thanks!

Are you terminating SSL at the CSS at all?
The thought that occurs to me is that if not, you could use a single content rule just have no ports specified, and use src-ip (assuming no proxy/nat) do handle sticky.
You may get better help though in the datacentre/applicatio networking forum.
Paul.

Cisco Content Switch 11503

Directed towards any users of this product line out there.
I have a client who is on the older hardware platform (11100);. and is
looking to invest in a pair of new switches/balancers. I have the follwoing
outsntanding questions that i'm needing to confirm on the 11503
- Source NAT - is this required to always be on? for marketing, reporting and debugging purposes, we're wanting to ensure we can have the client's original ip address preserved once request hits web/app, not rewritten at the content switch.
- sessions - any concerns running up to 30 - 50k of simultaeous sessions on
the 11503? require the the addt'l session accel modeule?
thanks for the input.
> Byron
> www.kennedytechgroup.com

Byron,
source nat is not a requirement of the CSS.
It depends how you design your network and where you place the CSS.
If you do not want source nat, make sure the servers are placed behind the CSS and that the path from server to client always goes through the CSS.
For the amount of connections, each module can handle up to 200k concurrent connections.
So, the CSS with only 1 module should be ok.
Gilles.

Specs for 11500 Content Switches

I am looking for more specs on the 11500 series content switches. Specs such as http connections per second, tcp connections total.

Ted,
The following link:
http://www.cisco.com/en/US/products/hw/contnetw/ps792/prod_bulletin09186a008017dc5d.html
states that "A Cisco CSS 11506 can now achieve more than 45,000 TCP connections per second and, if configured with 4 SSL modules, can attain over 4000 SSL transactions per second."
Is that what you are looking for?
Keep in mind that performance will be slower with layer 5 rules than strictly layet 4 rules.
-Steve

Tabs and content switcher

We're using a lower version of adf (10g) and using uix. Anybody here who has a sample of using tabs with content switcher.
Basically I want to have 2 fixed tabs and when I click a tab, the content is shown in the same page. The content of the
page basically consists of just read-only VO table..
Appreciate any help.
Thanks!

Hi SarahShay,
You could use JavaScript client object model to retrieve blog posts. You could use the getItemById(id) function to return a single item, or use the getItems(query) function to return multiple items.
An official documentation:
https://msdn.microsoft.com/en-us/library/office/hh185007(v=office.14).aspx
A similar post:
http://blogs.msdn.com/b/sharepointdev/archive/2011/07/19/working-with-the-ecmascript-client-object-model-jsom-in-sharepoint-2010-part-3-nikhil-sachdeva.aspx
Best Regards,
Dean Wang
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

SAP talking to another sever that is load balancing (with a content switch)

Hi All,
We are retrieving some files from an external server in SAP from an ABAP report using HTTP. The external server is also load balacing on 3 servers. There is a content server (proxy server) which carries the sap request to one of the three servers.
We are able to retrieve the files when we directly connect to one of the three server, However when SAP calls the content server, we get a HTTP code error -404 Status - Not found. Here is the excerpt of code where this error is coming up-
CALL METHOD w_http_client->response->get_status
IMPORTING
code = lv_http_code
reason = lv_status_text.
The external server (content server) is supposed to be transparent and thus SAP should be able to connect. But this does not happen.
Any ideas?
Thanks in advance! Liz

We are now connecting SAP directly one server since we could not connect to the content switch.
Thanks, Liz

Multiple context on Cisco Content Switching

Hi Everyone
I had new case with Cisco Content Switching design. The current network has two Cisco Content Module (CSM) and each of them response for switching content on one Vlan.
Now i want to reconfigure it, to meet the redundancy requirement. But i don't know Cisco Content Module have same idea of design with ACE on Route Mode.
I want configure CSM with two or more vlan pair in routed mode and it can HA between each other.
Thanks
Phai La Quy

Hi Phai,
Yes you can configure CSM in routed mode with clients in one VLAN and server in another. Pasting the link for your reference. You can find more in routing and switching guide.
http://www.cisco.com/c/en/us/support/docs/interfaces-modules/content-switching-module/26220-csm-config.html
Regards,
Kanwal

Multiple content switches on same subnet

Can anyone confirm if there is an issue having two pairs of content switches (11500s) on the same subnet? The circuit addressing, interface redundancy and VIPs all use the same subnet. Wondering if there would be any issues with the redundancy, arps, etc.. Am stuck with this arrangement during the migration phase of the project.
Appreciate your input.
Rob

Rob,
they can be on the same subnet but they must use different VIP ip addresses.
For the VRRP protocol, you should use different group number on each pair to avoid collision.
Otherwise, that is no problem. I have many pairs like this in the lab sharing the same subnets and this is ok.
Gilles.

CSM-Content Switching Module

Hi All,
How to shutdown Content Switching Module in Cat 6500 switches ? I want to shutdown only CSM-Module without disturbing Chassis.
Can anyone please send me the command on that ?
Highly appreciate your valuable reply.
Thanks,

Hi,
Assuming you are using IOS, you can power-down a module in a 6500 chassis using the command
"no power enable module " in global config mode where is the slot number of the CSM.
If you are using CatOS then the command would be:
"set module power down "
The CSM should be hot-swappable so you should be able to just pull it out of the chassis, but I think that is a bit vicious if you only want to shut it down.
HTH
Cathy

Content Switch sending request to both servers

Hi,
I have following configuration on the content switch and it send the request to both the servers. due to two tcp stream from going via two different server it second request fails and generate false alerts.
It was working fine but since last week it is giving lot of false alerts.
content StatePMVQLMVMS_8PR3
    vip address X.X.X.X
    add service W8PRAKLQLM01_StateVMS_8HTTP3
    add service W8PRAKLQLM02_StateVMS_8HTTP3
    advanced-balance sticky-srcip
    port XXXX
    protocol tcp
    active
Please let me know what should I check to get this fixed. I hardly work with content switch.
Is there a way I can set up to send all the request to primary server and when it dies then and only then it send a request to secondary and when primary comes back online it restore back to primary ????
I am fine if it does not load balance .. but at least it stop sending false alerts..
Thanks.

Hi Nilay,
You have configured sticky based on src-ip which means that as long as src IP remains same the user would be sent to the same server.
Now a situation where CSS starts sending the request to different servers could be due to the fact that sticky table was full. In that situation a new connection from same user will be load balanced according to the LB method. If the sticky table is full and none of the sticky entries has expired, the CSS rejects the new sticky request.
You can use sticky-inact-timeout to ensure that sticky entries flush out after they have been inactive for some amount of time.
Please visit the below link for more details about it.
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/content_lb/guide/cntntgd.pdf
Regards,
Kanwal

Content Switch Design diagrams

Hi
Can anyone help in providing the web links/articles (with diagrams) that helps to visualize/design a network topology with Cisco 11500 Content Switch & NetApp Cache Engines for load balancing.
Thanks in advance.
Regards // Anoop

if you need reverse-proxy caching here is a good link
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_example09186a00800941e8.shtml
For transparent caching, here is another example for a cSS11800 but it is valid for any CSS.
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a0080094352.shtml
Gilles.

DNS request behind content switch: troubleshooting

Hi, sometimes we experience problems resolving a dns name behind a content switch. The problem solves himself after 5 minutes or something like that. We see the dns request on the dns servers subnet. It looks like the is a problem when the packet returns. I'm thinking of a nat problem. How can i best troubleshoot this?

Can i e-mail you the config file? I will also e-mail as soon as possible a network capture in front of the CSS. Where can i e-mail it? For the moment dns is working so i will have to wait for network capture untill it fails again.
Kind regards,
Frederik De Muyter
[email protected]

What is difference between content switching, content routing...

Hi friends,
I want to know differences between content switching, content routing...
I want to know too, if a Content Engine 566 can caching FTP, HTTPS, Video and so on....
Regards and thank you.
Raúl.

A content engine can cache files transfered via ftp but not https [as the content is encrypted].
It can cache whatever file, including video, audio, ...
Content routing, content switching are just names.
They refer to how the traffic will be intercepted and forwarded to the content engine.
You could simply use a proxy solution and have your users setup their browser to use the content engine as a proxy, or you could transparently intercept http/ftp traffic via a router running wccp, or you could use a Layer7 device like a CSS to intercept the traffic and redirect to the content engine.
Regards,
Gilles.

Reg:Switch Sessions

HI Experts,
Am not sure if someone has ever come through this requirement.
1) Am calling a RFC FM starting new task for opening a custom Transaction(cannot call a screen starting at..ending at..due to the tcode being customized for only reference and is locked for editing) in another window.
2) Right after the FM am calling VAO1 tcode using call transaction.
Now the VA01 appears for a second and the new task RFC overlaps it. My end user doesnt want to click alt tab and wants the
VA01 at the top and the new task window behind. I know if i reverse the order of the FM's , untill the call transaction comes back the new window doesnt come up..this is of no use since for creating VA01, the new window is for reference.
Automatically when VA01 closes, the other window closes..i have taken care of this..but
can i switch sessions ( instead of the user doin alt + tab)..
Please throw some light on it or is that the limitation SAP has?
Thanks in advance,
sampath

Hemant K Chitale wrote:
Before talking of switchover, ask how you implement a Standby database in Standard Edition. DataGuard is not available so a Standby Database has to be "scripted". See Oracle Support note "Alternative for standby database in standard edition [ID 333749.1]"
Hemant K ChitaleHemanth,
One question. even if OP created standby database later it wont support Switchover too. Still its manual apply and used for only failover.

Content switch session incorrect.

Similar Messages

Maybe you are looking for