Css 11500 service configured as "hot standby" ?

Hi,
we need a function to set one of two services in a kind of "hot standby" mode.
The first service connect a webapp running on real hardware and the second service connect a webapp on a vmware session.
Is there a way to configure such a "hot standby" service?
Klaus

Klaus,
by hot standby, you mean a backup service in case the first one is down ?
If yes, the solution is to use the command 'primarysorryserver' to configure the *hot standby* service under the content rule.
Gilles.

Similar Messages

Anyway to have Hot-Standby Root Bridge for Autonomous AP1242

Is there anyway to have or configure a Hot-Standby Root Bridge for Autonomous AP1242?
My purpose of hahving this is to have a more resilience in case the Active Root Bridge is faulty on the backhaul side.
In order to have more resilience backhaul for the backhaul bridging part, my thinking is to configure the Non Root bridges as WGB infrastructure mode and Root Bridges as AP.
Any suggestions are welcome :)

When you set up the standby access point, you must enter the MAC address of the access point that the standby unit will monitor. Record the MAC address of the monitored access point before you configure the standby access point.
The standby access point also must duplicate several key settings on the monitored access point. These settings are:
â¢ Primary SSID (as well as additional SSIDs configured on the monitored access point)
â¢ Default IP Subnet Mask
â¢ Default Gateway
â¢ Data rates
â¢ WEP settings
â¢ Authentication types and authentication servers
Check the monitored access point and record these settings before you set up the standby access point.
I hope it may help you.

Services with different IP address subnets over CSS 11500 series

Hi all folks!
I have two CSS 11500 series...
In just a few months i will have ready a DRS (Disaster Recovery Site), where i will have 2 more servers to add to the environment.
But this servers will be in a different subnet from that today i have for the servers who are configured in the current services of my CSS.
So then the doubt i arises is:
Is correct to add two new services with these servers, but using the IP addressing of the DRS site???, and including on the CSS a static route to this network, (of the DRS) in order to reach them?? is it correct, it will work well?
This would be so....
             ________________LAN to LAN_____________________
             |                                                                                |
             |                                                                                |
|------SITE A------|                                                        |------SITE B------|
     [Firewall] ===============IPSEC============= [Firewall]
           |                                                                                |
           |                                                                                |
[CSS-A]-[CSS-B]                                                            [SWITCH]
       |          |                                                                     |         |
     [SWITCH]                                                                    |         |
[srvA] [srvB] [srvC]                                                          [srvD] [srvE]
So, at [CSS-A] & B, i will put a static route to firewall that know the subnet of site B through the IPSEC tunnel.
So In the CSSs, i will add the new services for the Servers "D" & "E" with the IP address of Site B.
This should be seen as well:
!*************************** GLOBAL ***************************
ip route 0.0.0.0 0.0.0.0 [IP FIREWALL]
ip route SITE B [IP FIREWALL]
!************************** SERVICE **************************
service srvA
ip address A.A.A.x
port 8080
service srvB
ip address A.A.A.x+1
port 8080
service srvC
ip address A.A.A.x+2
port 8080
service srvD
ip address B.B.B.y
port 8080
service srvE
ip address B.B.B.y+1
port 8080
I know that this practice is not the most desirable, in fact should use"Basic Global Server Load Balancing Site Redundancy Using the CSS with DNS", but I don't have much time to change the entire environment today, and in this first stage i have to begin with this poor but quick solution that i thought and i wanted to be validated if there is posibliidades this to work
Within their experiences that they say? Will operate?
Thanks in advance!
Regards!
Esteban =)

Daniel!
Sorry by delay!
Thank you so much for you time for reply.
You have given me a great help to this doubt!
But..using "source group" let me know..
I can´t undertand the really difference between NAT with ACls as you can see at this link: (http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080093dfc.shtml)
and
this other link, using NAT (from the piont 5), (http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_configuration_example09186a0080093dff.shtml)
where the NAT is configured under a method different from the previous one..
So.. for this scenario described above, which would you recommend using? I would think that the second is the most indicated truth? What do you think?
Thanks in advance again!!!
Have nice day!
Regards.
Esteban.

Sorry Server for CSS 11500

Hi,
I have a question regarding sorry server configuration on the CSS 11500 series.
Is there a way for the sorry server to ignore the URL path and always send the user traffic to the "root" page (e.g. index.html) of the sorry server web server?
The problem I have is the redirection of the "root" page (url "/") that is configured for the normal traffic is causing the sorry page not to work since the URL path ("/psp/CUSTOMER1/?cmd=login") does not exist on the sorry page web server:
service Sorry-Server
protocol tcp
port 8000
keepalive type tcp
ip address 192.168.2.254
active
service server1
ip address 192.168.2.101
protocol tcp
keepalive type tcp
port 8080
active
service server2
ip address 192.168.2.102
protocol tcp
keepalive type tcp
port 8080
active
owner Customer1
content Content1
    vip address 192.168.1.101
    port 80
    protocol tcp
    url "/*"
    balance aca
    advanced-balance arrowpoint-cookie
    flow-timeout-multiplier 6
    add service server1
    add service server2
    primarySorryServer Sorry-Server
    active
content Content1-Redirect
    redirect "/psp/CUSTOMER1/?cmd=login"
    vip address 192.168.1.101
    port 80
    protocol tcp
    url "/"
    active
Thanks in advance for your help!
Best regards,
Harry

Hi again,
During a maintenance window I made the following change and that made things a bit better:
service Sorry-Server
type redirect
keepalive type none
redirect-string "192.168.2.254:8000"
active
However, since the redirect string points to a private address, Internet users are not able to access the URL.
As a work-around I sent the redirect to a new content rule with a public address and then configured a second sorry page server:
service Sorry-Server
type redirect
keepalive type none
redirect-string "sorry.example.com:8000"
active
service Sorry-Server-2
ip address 192.168.2.254
protocol tcp
port 8000
keepalive type tcp
active
owner Customer1
content Content2
    vip address x.x.x.x
    add service Sorry-Server-2
    port 8000
    protocol tcp
    active
Is there a better way to do this?
Best regards,
Harry

CSS 11500 url path rewrite and NAT

Hi,
We are evaluating a CSS 11500 and try to configure url path rewrite and NAT, but we have some problems.
What we would like to do is the following:
http://www.example.com/path1 -> http://host1:80
http://www.example.com/path2 -> http://host1:8080
http://www.example.com/path3 -> http://host2:80
The address www.example.com is resolving to a valid internet address, whereas host1 and host2 resolves to private IP addresses.
The client should always see the external url (e.g. http://www.example.com/path1/...) and the CSS should do the necessary translation.
Any help would be very much appreciated!
Regards,
Harald

Hello Experts, I'm new with this cisco stuff too(just got it 3 weeks ago), but here is some of my experience with cisco css 11501.
First : Service ServerName, there is a port setting here, but from my experience, I think it is related with KeepAlive option, so, port is alternate way to know if the server alive or not.
Second : When you send request to cisco css, the port option in content port will be the cisco css port to accept request, so, if you send a request to http://vip:8080/, all service must be in the same port too to balance the request, in this case, port 8080, if one service port 80, i'm sure the css will not hit the server.
Third : To solve your problem...
http://www.example.com/path1 -> http://host1:80 (ipA)
http://www.example.com/path2 -> http://host1:80 (ipB)
http://www.example.com/path3 -> http://host2:80
if you are lazy to buy new nic, just set subinterface/ip alias on the host1, and make the webserver only bind to specific address, not to all interface...
O yea, about your path1/path2/path3 -> /, hmm, i'm still asking in this forum about path changing cause until now, i haven't know how to do this, i know about apache rewrite module, and success do this, if only i know about this in cisco css too :-(
I'm sorry if I make mistake, I'm just telling my experience...

Server 2012 R2 DHCP Failover - Hot Standby clients not renewing with standby server

In my test network I have a pair of Server 2012 R2 DHCP servers setup for Hot Standby and they will successfully service a client request for a new request.
What I am seeing is that when I test failover the clients will not renew with the Standby server. I have to release first and then renew.
When both DHCP servers are up the state is normal and replication of configuration from the Active to Standby is working. As far as I can tell it is configured correctly.
MaxClientLeadTime is 10 minutes.
StateSwitchInterval is 10 minutes.
AutoStateTransition is set to True.
Adding that manual renews fail with a message stating that it was unable to contact the dhcp server. However if I wait for the lease to expire/auto-renew the dhcp server does indeed change to the standby. Once the primary server comes back up and the state
returns to normal I am able to manually renew.
thanks in advance

Hi,
For test, we let the active DHCP down and the standby DHCP server will take place. But when we renew an IP, client send unicast to the former DHCP
server. That’s why the first request failed.
At 7/8 of the scope lease time, the client moves into a REBINDING state and broadcasts a lease renewal request.
For more information please refer to:
DHCP Failover Examples
http://technet.microsoft.com/en-us/library/dn338973.aspx
Hope this helps.

CSS 11500 Series LOGs

Hi everyone,
I need some help about one type of CSS 11500 LOG messages:
OCT 12 07:47:03 1/1 273 WCC-6: Computing slow start parameters for newly activated service index 4
OCT 12 10:25:05 1/1 274 WCC-6: Computing slow start parameters for newly activated service index 3
OCT 12 11:19:49 1/1 275 WCC-6: Computing slow start parameters for newly activated service index 3
OCT 12 11:26:33 1/1 276 WCC-6: Computing slow start parameters for newly activated service index 3
OCT 12 12:20:37 1/1 277 WCC-6: Computing slow start parameters for newly activated service index 3
OCT 12 14:04:32 1/1 278 WCC-6: Computing slow start parameters for newly activated service index 4
OCT 12 14:04:53 1/1 279 WCC-6: Computing slow start parameters for newly activated service index 5
OCT 12 14:05:01 1/1 280 WCC-6: Computing slow start parameters for newly activated service index 4
I was trying to find some explanation about these LOGs, but I didn’t have any success.
My questions are:
1. What does this LOG type mean?
2. Does it signalize some issue on the service?
Thanks a lot for the help!
Regards,
Marko

Hi Marko,
Please go through the below link:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/content_lb/guide/ContRule.html#wpmkr1150644
Just pasting some content. Read the details please.
Slowly Starting Connections on a Service
When you configure a content rule with the least connection (leastconn) load-balancing method, a service on the rule with the fewest connections receives the next request. If you activate a service on this rule, the service may become flooded with requests.
To prevent the flooding of connections on a newly activated or reactivated service, you can enable the slow-start feature on a content rule configured with the leastconn load-balancing method. Through this feature, you can configure:
•The rate that an activated service receives connections. The slow-start rate is applied globally to all leastconn content rules on the CSS. By default, the rate is enabled with a default value of 3. If you disable the rate by setting it to 0, the slow-start feature is disabled on all leastconn content rules configured on the CSS.
Note We recommend that you do not change the slow-start rate default value.
•The maximum time that the service remains in the slow-start process. The slow-start timer sets the number of seconds that the service on a leastconn content rule is in the slow-start process. The timer is applied to a leastconn content rule. By default, the timer is disabled. If the timer is disabled, the slow-start feature is disabled on the rule.
When you enable the slow-start feature on the CSS and a leastconn rule, a service on the rule enters the slow-start process when you:
•Add and activate a service to the rule
•Reactivate a service after suspending it on the rule
•Activate the rule
When you activate a rule, it starts to load balance the connections on its services. The service with the least number of connections is selected to enter the slow-start process.
When a rule has only two services, only one service can enter the slow-start process. When the rule has more than two services, a newly activated service can enter the slow-start process when one of the services is currently in the slow-start process and the other services are out of the slow-start process.
A service in the slow-start process slowly continues to receive connections until either the slow-start timer expires or its connections equal the number of connections on the other active services of the rule. Then, the service exits the slow-start process and starts receiving connections as it normally would.
Regards,
Kanwal

Server 2012 DHCP Server Failover - Hot Standby

Hi There
I'm running two Windows Server 2012 R2 servers, they are configured in a Hot Standby mode for DHCP Failover. ServerA, is the local server at the site and is configured to Failover to ServerB. But I'm having an issue where after the state of ServerA changes
from Normal to Communication_Int and then back from Communication_Int to Normal that it's no longer leasing any IP address to my Windows 7 clients until you restart the DHCP service on ServerA. I've replicated this in my lab environment as well.
1. Disable Network Adapter on ServerA or disconnect Network - State changes from Normal to Communication_Int. ServerA and ServerB loses contact.
2. Enable Network Adapter on ServerA or reconnect Network - State changes from Communication_Int to Normal. ServerA and ServerB re-establishes contact.
3. Connect new computer to LAN, or release IP on client computer, and then try to obtain an IP address\renew.
4. Client computers time out trying to communicate with DHCP server, but as soon as you Restart the DHCP service on ServerA the client machines obtain an IP address.
Has anyone else experienced this? If so is there a fix/workaround for this?
Thanks

Hi
Sorry for only replying now.....
Disabled firewall on ServerA, ServerB and client machine. Issue still occurring.....

Changing Max-Connections in CSS 11500

I have an architecture with two 11500 in active-passive mode and receive 800 connections every 5 minutes.
Could appear secondaries effects if i change the default of max-connections in CSS 11500 for example to 1200?
One of the risks i want to avoid is with this change, the CSS could be crashdown because of the drop of connections..

Good morning,
Could you please let me know what is the exact parameter you are talking about?
From what you described, I believe you may be referring to the "max connections" parameter configured under the services. This command just limits the number of concurrent connections that are allowed on a specific real server to ensure that the server itself doesn't get overloaded. Increasing this limt would not have any negative effect on the CSS itself, but, since you are allowing more simultaneous connections on the server, you may experience resource issues on the server itself.

Apps 11i disaster recovery with hot standby db

Hello,
We are trying to formulate a disaster recovery plan for Apps 11i (single node install) utilizing a hot standby database for the db layer and file synchronization
(rsync, rcp, whatever) of the application stack. We're comfortable with the hot standby db technology, but uncertain that simply keeping the application stack
sync'd on the standby host is sufficient to have a complete failover solution. Is anyone successfully using this type of configuration and , if so, is there a
cookbook methodology for promoting the standby system to a primary? Can you simply rename the host on the standby and turn the key on?
Thanks for any/all suggestions.
Terry Riddle

Hi,
we are planning a similar recovery strategy. Where can I find documentation about your strategy? A consultant has suggested has to install Legato with two products for DBs synchronization.
Thanks Gigi
My email: [email protected]

What is the appropriate product name for CSS 11500 on Bug Toolkit

Today I tried to search DDTs of CSS 11500 on Bug Toolkit (http://www.cisco.com/cgi-bin/Support/Bugtool/home.pl), however I can not find out appropriate product name corresponding to CSS 11500.
Before I had searched DDTs of CSS 11500 on Bug Toolkit many times, at that time, if my memory correct..
I selected "Cisco CSS 11500 Series Content Services Switches" in the list of "Search for bugs in other Cisco software and hardware products" on Bug Toolkit.
But I can not find this product name today.
Do you know what product name appropriate for CSS 11500 on Bug Toolkit ?
Your information would be appreciated.
Best regards,

Hi Gilles,
Thank you for your cooperation.
Today, I can find the CSS at "new Bug Toolkit".
http://tools.cisco.com/Support/BugToolKit/action.do?hdnAction=searchBugs
Select Product Category: Application Networking Services
Select Product: Cisco CSS 11000 Series Content Services
So I understand I should go "new Bug Toolkit" instead of old "Bug Toolkit" to
search any DDTs for CSS 11500.
Many thanks.
Best regards,

Shadow Database for Hot Standby

Hi,
Our company uses embedded Oracle10g Standard and Enterprise Editions. The Oracle database schemas drive real-time applications; such as VoIP, etc. We need to shadow our applications and Oracle database to a failover server.
We identified several methods to make and maintain a hot standby copy of an embedded Oracle database; including Data Guard, Oracle9i Replication, Streams, Recovery Manager, RAC, etc.
Can you recommend a light weight, easy to implement, low cost solutions to making and maintaining a shadowed Oracle10g database? The replication is one way, writing from the active database to the standby, without check points, roll backs or any other features.
Regards,
Bruce
LignUp Corporation

Bruce,
it looks to me that in order to satisfy the recovery time and affordable data loss requirements you could use either of two products - RAC or DataGuard.
1. The RAC - comes with Standard edition for free, comes with Enterprise Edition at extra cost (awkward, isn't it?)
pros -
will allow you automatically recover in matter of seconds from failure of the node with zero data loss. will allow you automatically distribute the workload among the clustered nodes.
cons - there is a single point of failure - the shared storage where cluster keeps the data.
Also you should purchase the additional Oracle database license for the second (third,..) cluster node. Well, not in every configuration. I belive if you use user-based licensing model then clustered configuration will be no different from single node configuration in terms of costs. If you use the CPU based licensing model - you can split your licenses among the clustered nodes - for example if you've purchased 4 CPU licenses you can install 2 node cluster with dual-CPU servers. You have to make sure that dual-CPU server will sustain the load in case of failure of one node. In this case to feel safer you can purchase quad-CPU servers , but allow Oracle to run only on two CPUs on each node - in case of failure just change the affinity mask of the oracle process to let it use the extra 2 CPUs.
2. DataGuard - comes with EntEd. at no extra cost, is not available with standard edition.
you can setup Dataguard for zero loss configuration. the switchover time - probably would be closer to minute than to 5 seconds
pros - doesn't require shared storage thus eliminates the single point of failure. does not require extra licensing costs - the second node is always in mounted state (unless you want to use it for read-only query processing).
cons - near real-time recovery (compared to real-time of RAC). Requires double storage (to keep the standby database). Requires the extra standby server which is not fully used in production until the failure. Also there are limitations if you are using the direct-path inserts.
Oracle vison for high availability is to use RAC where you wnat to be protected against failure within a site and use DataGuard to protect yourself against the site failure.
Other solutions (Replication,Streams) will require you to change your application to incorporate the failure detection and switching logic.
there are several whitepapers on this topic:
http://www.oracle.com/technology/deploy/availability/techlisting.html#DR
Mike

Load balancing PPTP (Windows 2003) behind CSS 11500

I am wondering if you can load balance PPTP service (TCP port 1723 and GRE) behind CSS 11500, please let me know if anyone as experience with this setup.
Irfan
[email protected]

No. I dont think you can load balance PPTP service behind CSS 11500.

Cisco CSS 11500 and RDP

Dear NetPros:
Does anyone know that does Cisco CSS 11500 Series Content Services Switch support 'Session Caching of RDP Clients? session for roaming of disconnected sessions' features?
Thanks
Bernard

The Cisco CSS 11500 is a compact modular platform, specifically designed to provide robust Layer 4-7 traffic management services for e-business applications in Internet and intranet data centers.
This URl should help you:
http://www.cisco.com/en/US/netsol/ns340/ns394/ns50/ns254/networking_solutions_package.html

Failed to add hot standby instances in liveCache Hotstandby setup

Hi All,
I am trying to setup Hot Standby between two HP-UX IA64 hosts and facing few issues. Given below are the setup details.
Hosts: HP-UX IA64 B.11.31
liveCache version: 7.7.06.16
Storage: EMC Symmetrix
maxDB Database Manager: 7.6.06.04
These are the steps I did using maxDB GUI
1. Added primary server (i.e. MASTER).
2. Made it online to validate the setup.
3. Made it offline, so that Hot Standby System can be enabled.
4. Enabled the Hot Standby System, and created a virtual server name entry.
5. Made the primary online, so that standby instances can be added.
6. Tried adding Hot Standby instances and saw a pop-up message with following error.
"-24994 Runtime environment error [hss_addstandby ...]; 20090, Check knldiag! Kernel exited with '0' before reaching ADMIN state"
Found the following error message in KnlMsg file of SECONDARY/STANDBY host.
<MSGL _NO="110" _PROCESS="20561" _THREAD="0x19" _TASK="2" _TIME="2009-10-01 13:04:33.000">
<MSG _NO="1" _TYPE="Error" _ID="20049" _COMP="RTEHSS" TEXT="Call to RTEHSSInit failed since RTEHSS_Api is not usable">
   <MSG_ARGS
     FILE="RTEHSSApiDll.cpp"
     _LINE="736"
     _TIME="2009-10-01 13:04:33.000"
    />
</MSG>
<MSG _NO="2" _TYPE="Error" _ID="20046" _COMP="RTE" _TEXT="Loading DLL /usr/symcli/shlib/apps/SAP/libemcslc.sl failed dlopen failed:Unable to find library &
apos;/usr/symcli/shlib/apps/SAP/libemcslc.sl'.">
   <MSG_ARGS
     FILE="RTESysSharedLib.cpp"
     _LINE="631"
     _TIME="2009-10-01 13:04:32.000"
    />
</MSG>
<MSG _NO="3" _ID="20048" _COMP="Admin" _TEXT="The database parameters are neither correctly configured for 'HotStandby' nor for 'Normal&apos
; operation.">
   <MSG_ARGS
     FILE="KernelAdministration.cpp"
     _LINE="4409"
     _TIME="2009-10-01 13:04:33.000"
    />
</MSG>
</MSGL>
The library is available on the STANDBY host and has correct permissions.
ll /usr/symcli/shlib/apps/SAP/libemcslc.sl
-rwxrwxrwx   1 sdb        sdba        297720 Sep 17 21:51 /usr/symcli/shlib/apps/SAP/libemcslc.sl
Any help/pointer on resolving the issue will be appreciated.
Thanks and Regards,
Mohammed Firdosh Nasim.

What immediately comes to my mind when I see this:
> Hosts: HP-UX IA64 B.11.31
and
>   <MSG _NO="2" _TYPE="Error" _ID="20046" _COMP="RTE" _TEXT="Loading DLL /usr/symcli/shlib/apps/SAP/libemcslc.sl failed dlopen failed:Unable to find library & apos;/usr/symcli/shlib/apps/SAP/libemcslc.sl'.">
You may try to load the symmetrix shared library for PA-RISC platform but you are on IA64. Shared libraries on IA64 have the extension ".so". There is an "emulator" (ARIES) on IA64 to run PA-RISC binaries - but since the database you run is IA64 it can't load a PA-RISC shared library.
What do you get when you run
file /usr/symcli/shlib/apps/SAP/libemcslc.sl
However, this is just a guess.
Markus

Css 11500 service configured as "hot standby" ?

Similar Messages

Maybe you are looking for