CSM in Bridge mode and STP

How CSM deals with the situation when both modules become active? How can I configure CSM to passthrough STP BPDUs to break loops? I know how can I do it on FWSMs but wondering if there is a way to do it on CSM or there is no way to avoid loops when FT vlan is dead.

There is no way to let BPDU go through and there is no way to avoid loop if the FT vlan goes down.
You have to make sure it never goes down by using etherchannel and any other possible solution.
Gilles.

Similar Messages

CSM in Bridge mode and Server initiated connections

I know one can use Source NAT for server initiated connections back to VIP using CSM in routed mode. How do I achieve the same for bridge mode?
Thanks in advance,
Shahid

Shahid,
that's a well-known problem for all loadbalancer in the world.
With a sniffer trace, or just thinking about TCP/IP rules you can figure out why client nat is required.
If you go from a server to a vip, the CSM will forward the traffic to a random server.
The CSM forwards the traffic with the source ip unchanged by default.
The server receiving the traffic will forward the response back to the source that initiated the request.
If the source is also a server in the same subnet, the response does not need to be sent through a gateway. Since both source and destination are in the same subnet, the traffic is sent based on mac address and it bypasses the CSM which can't perform the nating.
The source receiving the response from the server directly will just ignore it.
Using client nat forces the response to go back to the CSM which can perform the nating before sending it to the client.
This has been discussed tons of times in this forum.
It's a classic question :-)
Gilles.

Adding direct server access to CSM in bridge mode

I have a CSM that I have set up in bridge mode and want to allow direct management access to the real servers.
It looks like this. MSFC 10.1.100.1
CSM 10.1.100.3
Reals 10.1.100.10
10.1.100.20
10.1.100.25
Virtual 10.1.100.130
10.1.100.140
I tried to use the same method that I found for routed mode on CCO.
Serverfarm SERVER-SUBNET
No nat server
Predictor forward
Vserver DIRECT-ACCESS
Virtual 10.1.100.0 255.255.255.0 tcp any
Serverfarm SERVER-SUBNET
Inservice
The next step in the documentation says to add a static route to the CSM
Ip route 10.1.100.0 255.255.255.0 10.1.100.3
But this does not make since since the MSFC 10.1.100.1 address is already the default gateway.
So is there another way to configure bridge mode and enable direct management access?

After I thought about bridge mode again and took out the direct-access and server-subnet commands. I tested again and I can now directly access the servers.

How to Configure Transparent caching on Cat 6500 with CSM in bridge mode?

hi.
I found How to Configure Transparent caching on Cat 6500 with CSM in routed mode.
But,
I need help How to Configure Transparent caching on Cat 6500 with CSM in bridge mode?
Please let me know sample configuration.
thanks.

Hi,
I wrote the document you mentioned and I also wrote the one below.
http://www.cisco.com/en/US/partner/products/hw/modules/ps2706/products_configuration_example09186a00802c1201.shtml
The one with the SSLM is a bridge mode config.
If you replace the SSLM with a cache [or a farm of caches] it would be a similar config.
Replace the SSL21 vserver with an HTTP vserver [most important is to keep the vlan configured on each vserver]
Regards,
Gilles.

Can a single Access Point support both bridge mode and Access Point mode at the same time

Hi Guys
Does anyone know which access point can work in both bridge mode and AP mode ?
Cheers

Well what are you trying to cover. If its really a large outdoor area, then look at the mesh AP. Those require a WLC. Autonomous or stand alone ap can perform bridging on one radio and client access on another. You can also look at AP that support indoor mesh that also controlled by a wlc. If your putting APs outdoors, then look at the outdoor mesh.
Thanks,
Scott Fella
Sent from my iPhone

Using an airport extreme in both bridged mode and guest network with DHCP

I currently use a third-generation airport extreme in bridge mode to connect my various Mac servers To the Internet. I'm using bridge mode on the AirPort Extreme because I have up to five static IP address (only using three now) I am currently not using the wireless network, and none of the servers are serving DHCP. I am looking at the Newer airport extreme with guest network Wi-Fi. My question is, does the new airport extreme base station support bridge- mode for any devices and host DHCP for the guest network connecting wirelessly to the base station?

The AirPort Extreme cannot be in Bridge Mode and support a Guest Network.
The AirPort must be configured to provide DHCP and NAT services if you want to enable the Guest Network function.
If you really do have a 3rd Gen AirPort Extreme, it will support the Guest Network feature if you connect the AirPort directly to a simple modem.....not a modem/router or gateway type of devices.......and configure the AirPort to provide DHCP and NAT services for the network.

ACE in bridged mode and multicast

We have configured an ACE SM in bridge mode and have a requirement to enable multicast on one of the networks where the back-end servers are residing. Will ACE support multicast out of the box, or will we need to do any tweaking on the ACE to enable the multicast support?
Thanks..

Hi Gilles,
Is it also supported in routed mode?
The ace isn't doing multicast routing right?
Actually, the server-side vlan is being routed on the C6500 and has pim sparse-dense mode enabled.
We want to move this server-side vlan behind the ace in routed mode. What about the pim?
Any ideas?
thanks,
Dario

Bridge mode and router mode

hello,
I want to understand the basic operation, difference and advantages of both Bridge Mode and Router mode?
i also want to know in which case i should go for Bridge mode and Router mode?
regards
Devang

It realy depends on your requirements.
Mainly bridge mode is used for multicast support, Multiple DMZs + FWSM, server initiated connections or for seemless migration from previously installed "bridged load balancing environment".
Some of the differences are
In bridge mode you do not need additional config for "Direct server access" / "Server Initiated connections"
Broadcasts are dropped in routed mode whereas they are bridged in bridge mode.
LB functionality is same in both modes.
Syed Iftekhar Ahmed

AirPort Time Capsule. Read everything and tried everything. Can't get a guest network to work. Switched from bridge mode and still doesn't work. Anyone able to set up a guest network?

AirPort Time Capsule. Read everything and tried everything. Can't get a guest network to work. Switched from bridge mode and still doesn't work. Anyone able to set up a guest network?

I had a bright house cable modem that also had built-in wi-fi.
Don't mean to be picky here, but if the "modem" had built in Wi-Fi, it was not a modem. It was a modem/router, also known as a gateway type of device.
A device like this combines the functions of a separate modem and separate router in one package. Turning off the wireless on a device like this does not make a it modem.....it is still a modem/router or gateway with the WiFi turned off.
I think that if I have them replace the current "complicated" modem with a "simple" one I should be able to get the guest network up and running.
That would be correct. Hopefully, they offer this type of option for their customers.

Question about TC setup, bridge mode and security...

Hello All
I need some help...
Have bought a 1 Tb TC to use with my existing ethernet/wireless all-Mac home network but have some specific queries.
The system is set-up as follows:
Cable modem > connected by ethernet cable to > 8-way Ethernet switch
Connected via ethernet cable to the 8-way switch are: one MacBook (in another part of the house) and the TC (via its WAN socket).
Elsewhere in the house, and _all connected wirelessly_ are:
iMac G5
Powerbook G4
hi-fi (connected via an Airport Express)
Airport Extreme basestation to which a HP Laserjet is connected via ethernet.
Question:
Before buying the TC, I used a spare Airport Express basestation in its place to act as the 'main' basestation and the IP addresses of each device on the network were 10.0.0.1, 2, 3, etc. I had the impression that my home network was not "seen" by the outside world as a consequence of this.
Now, the TC seems only to work when in 'bridge' mode and it seems that the IP addresses are 196.xxx.x.100, 101, 102 etc. Does this mean that these devices are now visible to the outside world. Have I compromised my network security? I am worried that the outside world may have access to the contents of my TC, although my TC is password protected and the wireless network is 'closed'. What else should I be doing?
Finally, should I have set up the network so that the cable modem feeds to TC directly, with the 8-way ethernet switch coming off one of the ethernet sockets on the TC?
In all honestly, the instructions in the manual and the help guide are less than clear.
Can anyone help?
Thanks
Daniel

Section 4, here are my thoughts.
1. Since you are currently seeing individual IP addresses like 196.xxx.xxx.100, etc., it sounds like your modem is also acting as a router. This also seems to be the case since the Time Capsule is only working in bridged mode (it wouldn't work in Share a Public IP address if another device is assigning private DHCP addresses). Now, you could still allow the Time Capsule to act as a DHCP server on your private network by enabling Connection Sharing as Distribute a range of IP addresses. This will create a private network within your private network where all the devices that are connected to your Time Capsule can see each other. If you leave it in bridged mode then you allow your cable modem to assign DHCP addresses and all devices that are connected to the Time Capsule or to your ethernet switch are on the same network.
2. Assuming your cable modem is acting as a router you shouldn't have to worry about security, although you will have to access your modem's settings to make sure port forwarding isn't enabled and that the firewall is turned on (although I'm sure it is). I personally would plug the ethernet switch into the LAN port of the Time Capsule and allow the WAN port of the Time Capsule to be plugged into the cable modem. I also would just leave the Time Capsule in bridged mode as well, that's what I do for my own personal network.

Deploying CSM in Bridge Mode into an existing server envronment

We have installed two CSM's in a 6509's in a network that has servers already in an existing subnet and vlan.My question is.Can I use the same vlan that the servers are on at this time for the server slb vlan or do I have to create another server slb vlan in the subnet?

the servers can stay in the same vlan.
But if you want bridge mode, you will need to configure 2 vlans in the CSM using the same subnet.
1 vlan will be the same as the servers.
The 2nd vlan will be a new vlan using the same ip subnet.
The MSFC should be setup with only the 2nd vlan.
So at the end you get
MSFC---VLAN-A----CSM-----VLAN-B----SERVERS
<-------------- one subnet --------------->
The servers can keep the same gateway ip address.
This ip address should be moved from current msfc vlan to the newly created vlan.
[I say MSFC, but it could be any other router being currently the default gateway]
Gilles.

How do I configure my Airport Extreme to work in Bridge Mode and provide specific IP addresses to clients

My Airport Extreme is working with an Airport Express to wirelessly extend my wireless network. Both Airports are configured in Bridge Mode per the instructions I found on Apple's support site. I want to assign a specific DHCP address to a wireless camera that is in range of the Extreme, but I understand that the Extreme needs to be in DHCP Only mode to do this. But if I change the mode to DHCP Only, the Extreme will lose contact with the Express. How can I get both functions to work - wireless network extension and specific DHCP addresses?

Then what device is providing DHCP? Only once device per subnet should be the DHCP server. One should be DHCP and NAT and the other in Bridge mode for most home setups. The unit with DHCP and NAT should be the one connected to your cable or DSL and the other set in Bridge mode only extends your network.
On the wireless config page set whichever you're using to extend your network to "Extend a wireless network" and give it the details of the network to which you're attaching it.

Bridge Mode and Wireless Clients

I have my network up and running fine, but I am now thinking I may need to tweak it a bit. I have an AEBS(n) and an Airport Express both set up with WDS. The Extreme is the base station and the Express is set in WDS Remote and in Bridge mode under the internet tab. The Express is hooked up via a wired ethernet connection to my PS3. Everything works.
I am wondering if in bridge mode, the express accepts wireless clients as well as providing net access to my PS3 over the ethernet cable. Both the extreme and express stations are close enough together that I am not sure which one I am connecting to when I use my laptop wifi.
Thanks in advance for your help.

I am wondering if in bridge mode, the express accepts wireless clients as well as providing net access to my PS3 over the ethernet cable.
Yes if you enable that option.

Trouble with bridge mode and port forwarding

I have a Westell Model 6100F DSL modem in bridge mode into my network and I'm having trouble forwarding ports. Is there any general guidance available to do this. I have set many of my friends networks up to allow port forwarding but all have been on other service providers, mainly cable. (my experience) My network is the only one I have had trouble with.
Basically, my question is, while in bridge mode, does the modem forward all incoming traffic to my NAT router or do I need to apply special port forwarding settings in the modem to allow this?
If bridge mode is the reason I cannot forward the ports, can someone explain how to set the WEstell 6100F back to factory defaults so I can start over.
Any other suggestions?
Thanks in advance.
Paul

If bridge mode is set up correctly, your router should be holding the Public IP address (basically not something that is a 192.168 address) as shown at http://www.whatismyip.com/ and compared against what IP your router has.
If your router has the public IP, all problems lie with either your router or your PC's firewall and configuration. I'd check out portforward.com for some guides on forwarding ports for your router or poarticular application if you need some additional help.
========
The first to bring me 1Gbps Fiber for $30/m wins!

Bridge mode and extended mode together?

I just received my new milk jug Extreme AC today, yay! I bought this in the hope that it might mitigate some of the reception issues I have been battling in my home. I currently have the 4th gen Extreme (the one with the hobbled radios) and the 3rd gen Express, and I would like to use the old Extreme in bridge mode while wirelessly extending to the Express from the old Extreme. (Yes, I would love to hard-wire but that isn't realistic right now.) Anyone have any success doing this, or any suggestions?

It wouldn't be a wireless daisy chain as I have infrastructure
Thanks for clarifying that, since it was not mentioned at all in your first post. We saw things like "wirelessly" and "I would love to hard wire, but....." and assumed (when we should not have) that you were talking about wireless for the network.
hardwire the two Extremes together with the AC doing the DHCP heavy lifting.
That would be best way to connect the two Extremes together. Set up the new "ac" Extreme as the main router, then connect an Ethernet cable from one of the LAN <--> ports on the new Extreme to the WAN "O" port on the older Extreme. The setup utility will practically configure everything for you.
I suppose I could do something similar with the Express but I am okay with the bandwidry tradeoff If it can wirelessly piggyback from one of the Extremes.
As long as the Express is located where it can receive a good quality wireless signal from whichever Extreme, that should work OK. Extending with the Express is a compromise deal no matter how you look at it.......since even if you decide to connect to the Express using Ethernet, the port on the Express will only handle 100 Mbps.
Strange as it seems, it is often better to take the bandwidth hit and extend using wireless with the Express, since the signal will often be faster this way than using Ethernet.

CSM in Bridge mode and STP

Similar Messages

Maybe you are looking for