CSS 11506 Help
We just bought a 11506. I have a few questions
- One requirement we have is that I need to direct https web requests to the CSS public IP and then have it redirect that web request over tcp 80 to one of our internal web servers.
Do I need to purchase on SSL module for this ?
Can someone direct me to the support link for the 11506. Looking for setup and support docs.
Cheers
Dave
In order to do SSL offloading you need to buy SSL module CSS5-SSL-K9.
You can find lots of CSS config examples
http://www.cisco.com/en/US/products/hw/contnetw/ps792/prod_configuration_examples_list.html
& Supporting documents at
http://www.cisco.com/en/US/products/hw/contnetw/ps792/tsd_products_support_series_home.html
Syed Iftekhar Ahmed
Similar Messages
-
CSS 11506 - Locked up but cannot find why
I have had a CSS 11506 lock up with no access or activity. From the syslog logs I cannot see any error messages reporting a failure, just a hole. During the lockup I had no access to the equipment.
Any suggestions on how to investigate the lock up ?
Thank you in advance.
Roger.Hi Roger,
Based on the symptons I guess CSS did not save any core, can you double check.
I would say that we have no enough evidence to say what caused the outage, actually I would need to see the showtech and look for some evidence but I can tell you for sure that your code needs to be upgraded.
7.50 train is not getting new releases since new tains are 8.10 and 8.20 and also 7.50.103 is a early release on that train and many defects were addressed on newer codes, some of them related to crash and hung issues.
Hope it helps!! -
I configured VIP on my CSS 11506. I created a content rule and a service, which will be used by the content rule. Both have been activated. However, when I do "show service summary", the new service created is not coming up, it's showing down. I removed the service and re-created it and still down. My VIP won't work if the service remains down. Please help if you experience this before. Thanks so much !!
Collin,
You are the man! I removed th keepalive by typing "keepalive type none" initially it was "keepalive type tcp" and now the service is up and I can get to my VIP. Thanks so much! I appreciated. How should I give you a credit ? -
Trying to understand SSL sticky with CSS 11506 / ssl-l4-fallback behavior
Dear experts
I have a CSS 11506 (v7.50) which is used to load balance several SSL-based sites. We use the following textbook content rule:
content mysite-SSL
vip address 10.0.0.1
add service s01
add service s02
add service s03
port 443
protocol tcp
advanced-balance ssl
application ssl
flow-timeout-multiplier 225
active
If I read the manual correctly, SSL L3 session IDs are going to be used till a flow is set up. Then the ssl-l4-fallback (it is enabled) directive kicks in and load balancing is done based on the source IP, destination port.
However, my stats show:
Sticky Statistics - SFM Slot 1, Subslot 1:
Total number of new sticky entries is 4937735
Total number of sticky table hits is 33476045
Total number of sticky rejects (no entry) is 0
Total number of sticky collision is 0
Total number of available sticky entries is 0
Total number of used sticky entries is 131071
Total L3 sticky entries are 131
Total L4 sticky entries are 0
Total SSL sticky entries are 130940
Total WAP sticky entries are 0
Total number of SIPCID sticky entries is 0
So, why don't I see anything in the L4 sticky entries?
Also, I would expect that once the ssl-l4-fallback kicks in, a client will be always directed to the same server (since the CSS uses now source IP, dest port for load balancing). However, if I close and start again my browser I hit a different server.
Your thoughts and suggestions are highly appreciated.
John.Hi Gilles
Thank you for your response. If I may ask the group for a final further clarification, so as to put this matter to rest. Since there are a lot of frames transmitted in either direction, I would expect the following to be happening and overriding the use of SSLv3 session IDs. Following is the section of the manual that seems to contradict what you say (and I see on the stats). Am I reading the manual wrong?
"Cisco Content Services Switch
Content Load-Balancing
Configuration Guide
Software Version 8.20
November 2006
page 11-14
Configuring SSL-Layer 4 Fallback
Insertion of the Layer 4 hash value into the sticky table occurs when more than
three frames are transmitted in either direction (client-to-server, server-to-client)
or if SSL version 2 is in use on the network. If either condition occurs, the CSS
inserts the Layer 4 hash value into the sticky table, overriding the further use of
the SSL version 3 session ID." -
Hi All,
I have two portals which are located behind the load balancer (client side), the configuration is basic.
I have faced a problem on accessing these protal via SSL port (HTTPS) using the virtual Ip address which represents them, knowing that the SSL sessions are terminated on the portals not on the CSS.
any help please.
thank alot.
Mowhat kind of problem ???
Get a sniffer trace on client and server and see what is going on.
We'll also want to see the config even if basic.
Gilles. -
CSS 11506 page requests not directed properly
CSS 11506 sitting in front of mainframe and
two Windows 2003 servers
content rule3056gif
add service web1
add service web2
vip address 10.10.200.252
balance aca
url "/IMAGE_DIRECTORY_NAME/*.gif"
port 3056
active
A small number of page requests, that do not match the above pattern, are passing to the content servers web1 or web2 instead of the mainframe.
Any ideas appreciated.when a connection comes in and matches the rule above, a flow is created to switch all traffic between client and server.
If inside this same flow a new request comes in for a different content rule, the flow needs to be remapped to the new server.
This works fine except when the flow stays idle.
A flow that was idle can't be remapped.
All new requests will be sent to the current/last server even if the request does not match the rule.
The solution is to increase the idle timeout.
You can do this with a 'flow-timeout-multiplier'.
A large value will reduce a lot the chance to see the problem but it also means the amount of resources being used will increase as each flow will remain longer in memory.
It's up to you to find the right balance.
You can do a 'flow stat' from llama mode to see number of free flows and active flows.
I would say you start with a flow-timeout-multiplier of 100 and reduce or increase it if necessary.
Regards,
Gilles.
- please take a moment of your time to rate this answer. -
CSS 11506 / install Disclaimer page
We have a CSS 11506. Our public portal web servers are behind that CSS 11506. How to configure the CSS so that when people click on some external websites URLs on the public portal, there will be a disclaimer / exit page shows up first.
The CSS is only loadbalancing the http traffic to the public portal web servers and does not run an http stack itself. As such the CSS is incapapble of presnting any http content to the client . Any disclamer / exit pages would need to be programmed into the content of the page the public portal server presents to the client. There is not a way to accomplish this on the css.
-
Centering CSS-buttons - Help from CSS Guru wanted
Dear group,
I created a site for a friend in which I wanted to do all the
navigation
with CSS-rollover-buttons. Actually it works fine until I try
to center the
buttons. For the buttons, which are located in the
footer-section, there is
no problem, they center fine?!
So I thought to be clever by creating a container with the
same attributes
than the footer, in which I place the buttons. But to my
surprise it didn't
work. Trying to center the #wrapper didn't bring the wanted
result. The
navigation still stings to the left of the page.
Now I have set the width from the container to 40%. But this
is no solution
and looks messy:-(
Please have a look at:
http://www.stuck-atelier.de/Galerie/kueche3/e_page-0001.html
The CSS:
http://www.stuck-atelier.de/Library/fabryb.css
Any help is very much welcome:-)
Best regards
Inge Grotjahn, frustratedHi Murray,
Am 15.06.2006 schrieb Murray *ACE*:
> Your problem is not in the implementation of Anurak's
correct instructions,
> it's in the basic layout of the page. The div#wrapper is
given a width of
> 40%, which restricts div#navfoto1 from reaching its
desired location.
> Remove that width and see what happens when you change
your code to this -
>
> <div id="wrapper" style="width:100%;">
> <div id="navfoto1" style="width:200px;margin:0
auto;">
> <ul>
> <li><a href="e_index.html" title="internal
link: to the
> index">Index</a></li>
> <li><a href="e_page-0002.html" title="internal
link: to the next
> picture">Next</a></li>
> </ul>
> </div>
> </div>
thank you for your advice. I changed the CSS as follows:
#wrapper {
margin:0 auto;
width: 100%;
text-align:center;
#navfoto1 {
margin: 5px auto;
width: 300px;
and left the html as it was. The result is much better than
my solution,
but doesn't center the buttons:-( With a width of 200px, the
buttons (on
pages with 3 buttons) are no longer displayed inline:-( On
the German page
you can see better, that the buttons will not center (maybe
because the
button texts are longer). And on the photoindex-page you see
it the best.
Here the link to the English pages:
http://www.stuck-atelier.de/Galerie/kueche3/e_page-0003.html
The CSS:
http://www.stuck-atelier.de/Library/e_fabryb.css
http://www.stuck-atelier.de/Galerie/kueche3/e_index.html
The CSS:
http://www.stuck-atelier.de/Library/e_fabry.css
Here the link to the German pages:
http://www.stuck-atelier.de/Galerie/kueche3/page-0003.html
The CSS:
http://www.stuck-atelier.de/Library/fabryb.css
http://www.stuck-atelier.de/Galerie/kueche3/index.html
The CSS:
http://www.stuck-atelier.de/Library/fabry.css
I really don't understand what is going wrong here:-(
Best regards
Inge Grotjahn
CatManiacs World:
http://www.gwsystems.com/inge -
i'm looking at doing a etherchannel/channel group to CSS 11506 for greater bandwidth on the front of the CSS.. clinets>chan-group>vip>CSS >servers.
has anyone else done this?
reason i ask if this can be done is that the backup (ASR) CSS vir-peer shows as master(backup router) state. i didn't see any commands on css for etherchan, pagp or lacpHI,
etherchannel is not supported on the CSS from my knowledge. Furthermore you should avoide any spanningtree issue on the CSS. If you need more throughput than 1 GIG think about splitting the VIPs so that one CSS is active for the first half of the VIPS and the otherone for the 2nd part. Be aware that the Gateway on both VIP-pars need to be active on the correct box.
Kind Regards,
Joerg -
So I lost my profile when FF updated, and had to create a new one. From what I can tell, to do what I want to do I need a Chrome Folder inside the new profile folder. There was none, so I created one. I also created a .css file named exactly how I put it in the title, is this the correct name, or should "user" be my profile name?
Last but not least, here is the exact text I have in the file, nothing more, or less, just this:
<pre><nowiki>@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"); /* only needed once */
#TabsToolbar { height: 15px !important; }
#PersonalToolbar {height: 4px !important;}
#BookmarksToolbar {height: 4px !important;}
#MenuToolbar {height: 4px !important;}
#tabbrowser-tabs { height: 15px !important; }
#TabsToolbar { margin-top:-15px!important; }</nowiki></pre>
Saved the file. Restarted FF, no effect. Changed numbers, still no effect.
TIA for help.
p.s there is likely some redundacy there for sure, please advise. I want all 3 in title of thread smaller (as in less height)I use this code to resize the Tab bar.
I'm on Linux, so you may have to adjust or omit the margin-top and margin-bottom properties.
<pre><nowiki>#TabsToolbar { height:25px!important; margin-top:-1px!important; margin-bottom:1px!important; }
#tabbrowser-tabs { height:25px!important; min-height:25px!important; }
.tab-background-start[selected=true]::after,
.tab-background-start[selected=true]::before,
.tab-background-start,
.tab-background-end,
.tab-background-end[selected=true]::after,
.tab-background-end[selected=true]::before {
min-height:25px!important;
}</nowiki></pre> -
Cannot get a 2nd blockquote working in CSS - please help
hi - hope someone can help. I have a blockquote set up. the css is the following:
blockquote,
q,
quote {
background: #ece5d0 url(../images/quote.png) no-repeat;
font-family: "Times New Roman", Times, serif;
font-size: 18px;
font-style: italic;
width: 804px;
margin: 5px 0;
padding: 10px 10px 10px 47px;
quotes: none;
line-height: 25px;
border-radius: 10px;
box-shadow: 5px 5px 5px #bababa;
Here is a picture to see what it looks like:
So I need to make a block quote elsewhere on the site but in a narrower area because the above will be cut off. So I thought I could just copy the code and make a new one and modify it:
#blockquote2, q, quote {
background: #ece5d0 url(../images/quote.png) no-repeat;
font-family: "Times New Roman", Times, serif;
font-size: 18px;
font-style: italic;
width: 620px;
margin: 5px 0;
padding: 10px 10px 10px 47px;
quotes: none;
line-height: 25px;
border-radius: 10px;
box-shadow: 5px 5px 5px #bababa;
I first tried "blockquote2" without a DIV like "<blockquote2> and that did not work so I then made it a DIV like above and it still does not work. Here's a result of it (no quote styling like above):
As you'll see the width (620) is important to fit into the column. Here is the code i'm putting onto the page to try to create the quote:
<div id="blockquote2"><br /><p align="left">NOAA’s mission touches the lives of every American and we are proud of our role in protecting life and property and conserving and protecting natural resources. I hope you will explore NOAA and how our products and services can enrich your own life.</p>
<p align="right"><strong>Dr. Kathryn Sullivan, NOAA Administrator </strong></p></div>
But anyway, can someone tell me why this isn't working and offer a fix? Any help is appreciated. thanks.What I would do is, rather than creating an id for the second kind of blockquote, use a class that only changes the width and other attributes you want changed from the base blockquote element...
Somewhere after your current blockquote css...
blockquote.classname {
attribute:value;
attribute:value;
Then in the html, you'd still use a standard blockquote element, with a class...
<blockquote class="classname">
content
</blockquote>
You could use an ID too, but id's can only be used once on a given page, so a class is better if there might be multiple uses. -
I have created a css popout menu. works great but the borders
of the other div tags show through it. Well, im not supposed to
borders on those div tags. I dont know why they are showing up,
never had the problem before. they are all set to "0" for border.
so why are they showing through my popout menu? even if I did have
borders they shouldnt be seen through the menu. they arent
transparent
Here is a pic:
http://i247.photobucket.com/albums/gg126/bigmack83/menu.png
Heres the navigation.css:
http://www.4shared.com/file/39790394/8e115385/navigation_css.html
and navigation.js:
http://www.4shared.com/file/39790391/fe7ba70a/navigation_js.html
any help would be appreciated> i forgot DW assumes you mean "1px" if you dont put
anything
Uhh - no, it doesn't. What specifically leads you to this
incorrect
conclusion?
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"bigmack83" <[email protected]> wrote in
message
news:fqk7j1$f9p$[email protected]..
> Cancel, a friend showed me. on one of the settings i had
to put a "0", i
> forgot DW assumes you mean "1px" if you dont put
anything. thanks anyways -
Dear group,
I want to redesign my site and want a design that looks like
this:
http://www.gwsystems.com/inge/Images/design.gif
I made a screenshot of it to show you, that this design was
made using
tables in tables with different backgrounds. This makes the
markup
almost unreadable and I wonder, if I could do this design
without
tables but using CSS. So I made single pics from the
screenshot. 1 for
each corner, 1 for the top and bottom middle, 1 for the left
and right
middle to use as a background. Unfortunately I'm not good
enough to
find out by myself how to put this into CSS.
The content of the site should be within the 'silver frame'
as shown
in this screenshot
http://www.gwsystems.com/inge/Images/design1.gif
The navigation shouldn't be horizontal as shown in this
screenshot,
but a vertical navigation as shown at
http://www.gwsystems.com/inge/catmain.htm
Could you please give me a hint, where to find a solution to
my design
wish?
Thank you for reading me
Inge GrotjahnYou're using DW4? Ugh. DW4 was not the sharpest knife in the
drawer with
regard to CSS.
> Could you please give me a hint, where to find a
solution to my design
> wish?
http://www.maxdesign.com has
quite a few example CSS layouts that may help.
You may also find what you are looking for here -
http://dreamweaverresources.com/
http://www.projectseven.com/
(the PagePack extensions)
(some are free - most are commercial. Those are the best in
the business,
in my opinion)
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.dreamweavermx-templates.com
- Template Triage!
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
http://www.macromedia.com/support/search/
- Macromedia (MM) Technotes
==================
"Inge Grotjahn" <[email protected]> wrote in message
news:[email protected]..
> Dear group,
>
> I want to redesign my site and want a design that looks
like this:
>
http://www.gwsystems.com/inge/Images/design.gif
> I made a screenshot of it to show you, that this design
was made using
> tables in tables with different backgrounds. This makes
the markup
> almost unreadable and I wonder, if I could do this
design without
> tables but using CSS. So I made single pics from the
screenshot. 1 for
> each corner, 1 for the top and bottom middle, 1 for the
left and right
> middle to use as a background. Unfortunately I'm not
good enough to
> find out by myself how to put this into CSS.
>
> The content of the site should be within the 'silver
frame' as shown
> in this screenshot
http://www.gwsystems.com/inge/Images/design1.gif
> The navigation shouldn't be horizontal as shown in this
screenshot,
> but a vertical navigation as shown at
>
http://www.gwsystems.com/inge/catmain.htm
>
> Could you please give me a hint, where to find a
solution to my design
> wish?
>
> Thank you for reading me
> Inge Grotjahn -
Hello,
I am trying to troubleshoot all traffic related to backend servers (behind CSS) from input and output interfaces of CSS, could anybody help my in capturing this kind of traffic? with support guide or commands?
Thanks,
MoYou can use a CSS port as Span port. Connect a sniffer at that port and you will get the packets.
Command to use
setspan src_port number dest_port number copyBoth|copyTxOnly|copyRxOnly
More details at
http://cco.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.20/configuration/administration/guide/Intface.html#wp1099686
Syed Iftekhar Ahmed -
CSS 11506 Default "Site is down" Page
The Company that I work for needs to bring down our servers for some hardware upgrades for a period of time. Is it possible to configure the CSS so that it will display an HTML page any time that it cannot find one of the servers that it should be looking for? If it is possible, how would I go about doing that,or where would I look for directions on setting that up? Thank you very much for any help provided.
Another question, we've brought down our content servers and the sorry server is sending out the sorry page that we have set up. I added all the settings indicated in the link about you gave me, and based on some of the other articles that I have seen while troubleshooting I have changed some of the persistence settings. Here are my configurations, any ideas?
!*************************** GLOBAL ***************************
no restrict web-mgmt
no restrict xml
dns primary 10.20.1.2
ip route 0.0.0.0 0.0.0.0 10.20.1.1 1
!************************* INTERFACE *************************
interface 1/1
phy 1Gbits-FD-sym
!************************** CIRCUIT **************************
circuit VLAN1
router-discovery lifetime 1000
ip address 10.20.1.4 255.255.255.0
router-discovery
!************************** SERVICE **************************
service Blade01
ip address 10.20.1.60
active
service Blade02
ip address 10.20.1.61
active
service Blade03
ip address 10.20.1.62
active
service Blade04
ip address 10.20.1.63
active
service sorry
ip address 10.20.1.41
active
!*************************** OWNER ***************************
owner OWNER
email-address
content server1
vip address 10.20.1.80
balance aca
add service Blade01
add service Blade02
primarySorryServer sorry
no persistent
active
content server2
vip address 10.20.1.81
add service Blade03
add service Blade04
balance aca
active
!*************************** GROUP ***************************
group server1
vip address 10.20.1.80
add destination service Blade01
add destination service Blade02
add destination service sorry
group server2
add destination service Blade03
add destination service Blade04
vip address 10.20.1.81
Maybe you are looking for
-
Excise invoice should not get created without PGI
Hi, I have a scenario where the billing document is being generated by the customer without PGI after creation of outbound delivery for exports. (This is as per customer's requirement - Copy control maintained in VTFL for the same - copying requireme
-
Hi Running iMac, iPad/iPhone and 2 separate Airport Express, each connected to a different stereo in the house. I would like to run the iMac itunes library remotely using the shared function on the ipad. However when running music from iTunes on the
-
Convert InDesign File to a Word Document
I am trying to convert a file from an InDesign file to a word document and have fallen into a problem. I also have Adobe Acrobat 9 Pro and have tried to save my InDesign file as a PDF, so far so good. It looks perfect, but when I save the PDF as a .d
-
Why won't additional pages work when site is published?
I created a site in iWeb and posted it using FTP to my domain. I created a page before my home page with some pictures and inserted a hyperlink off of a graphic to link to the home page. That link worked great! However, all of the the links in the he
-
No effect after change logic in java soucre file
I had change some logic inside the oracle.apps.inv.transaction.server.LotTrxManager and put it into the correct path. I did restart the Apache server but it seems that the logic I put in (debug message) did not work. Other then the Apache server, wha