CSS VIPs use old MAC address after firewall failover

We have our CSS load balancers behind our firewalls in a DMZ and when the firewall fails over the physical interface changes the MAC address to the new address of the now active firewall but the VIP's do not and all traffic to those VIPs are broken. Has anyone experienced an issue like this before? Any help would be appreciated.
Thanks.

I understand you have CSS load balancers behind firewalls in a DMZ,  could you clarify what interface changes the MAC address  to the new address of the now active firewall after firewall failover? are you expecting VIPS failing over too?
If firewall failed over, depends on types of firewall, for some firewall, mac will change, new Active Firewall sends a 'gratituous' arp which makes the neighboring devices to save the new mac address of the Active firewall with the ip address. It seems to be your case. If for some reason, that is not happening (gratituous arp missing), it could cause issues like VIPS on CSS broken.
The failover of the firewall should be transparent to CSS VIPS. Did you take a capture to see what is happening? did CSS receive requests properly? is CSS load balance to server properly?
If you require CSS failover when firewall failover, then you can define critical service (layer 3) or critical physical interface(layer 2), and if that detect link to firewall down, then it could fail over.

Similar Messages

  • Using old email address after I've switched to BT

    Hi
    Hope someone can help me. I'm in the process of switching Broadband from EE to BT. I currently have a Freeserve email address (supplied by EE) which I use to log in to several online accounts (shopping etc) and also for emailing. I also have a Hotmail account. I access both accounts on my laptop through Windows Live Mail.
    Once I have switched will I still be able to use the Freeserve account or will it be closed. Also, will the emails that I have already received on my Freeserve account still be accessable or will I have to save them before switchover. I have previously moved some emails from the Freeserve to the Hotmail by right clicking/move to folder etc but will they still be there after switchover or will I have to Forward them one by one.
    Finally, will the Freeserve address still be active as a Log in/user name for websites?
    While I'm fairly capable at doing stuff I'm not always sure of the technical jargon so please keep any answers as simple as possible,
    Many thanks in advance

    Welcome to the forum. If the provider keeps your Freeserve account alive, switching broadband ISPs shouldn't make any difference. If not, you may have to make some changes but any messages already downloaded to WLM should be safe. Closure of the account would not prevent you continuing to use the address simply as a username but it might be sensible to update it as you go along.
    EDIT: Posted before seeing Bob's reply.
    You can click the white star next to this message if you think it was helpful.

  • E4200 v2 - Uses multiple MAC addresses for the same device

    This unit seems pretty good at first but on looking at the Web interface I noticed that it was using multiple mac addresses for the same device and showing devices on the lan on the Wireless side and other odd things.
    After a week of running it the home server network started to get erratic, it would seem to all point to dns and dhcp issues in the router.
    Seems the V1 had the same issues that they did not fix on this.
    The Cisco connect software shows 5 devices the Web based utility shows 3??.
    Its pretty bad that they charge nearly $200 and cannot be bothered to finish the unit or address the issues that were in V1.

    I am afraid I didn't get the clear picture of the issue mentioned in the post. Could you please elaborate a little bit? If you connect a device/computer wired and then later you connect it wirelessly. It is obvious that you would get to see two different MAC addresses for the same device, one for the LAN adaptor and other one for WLAN adaptor. If that is what you are referring to?
    Secondly, may I  know, what issues did you face with DNS and DHCP in the router? Is it not able to resolve the DNS or something else or DHCP is not sending IP address to the clients?

  • Old Mac address neede to access Time Machine to restore

    Replaced HD, now don't remember old mac address to access Time machine. Where is the old address located?

    replacing a hard drive does not change the MAC address. if all you did was repalce a drive you can do [full system restore from TM|http://docs.info.apple.com/article.html?path=Mac/10.5/en/15216.html]. this will also allow you to continue using existing TM backups. alternatively, you can use Migration Assistant as already mentioned.

  • Should I use a MAC address to validate users for my program?

    I'm writing a graphical console program and I was planning on using a few methods for security. One being to block a user from logging in again if they don't type the correct username and password within three tries until the root user authenticates it again. I was planning on blocking the IP address but someone suggested blocking the MAC address since no 2 have the same ID and it's burned in, not to mention alot of people have dynamic addresses. However, I was reading that MAC addresses are mainly used in ethernet cards. I thought any device that has network capabilities has to have a MAC address? Is it good to use a MAC address for blocking someone from logging in again or what?

    Its very easy to change your MAC address. If you have a wireless router (which you can buy for like 20 dollars) then you can tell it what MAC address to use. So I agree, don't use a MAC address to block users from your program. Also are you sending the username/password over the network in clear text? If so, these can be intercepted. So doing that may be a bad idea; it depends on how much security you want for your application.

  • I'm using a Mac. After swithcing to ICloud will I be able to use IWeb to upload and publish my sites hosted by other servers like Prohosting ?

    I'm using a Mac. After swithcing to ICloud will I be able to use IWeb to upload and publish my sites hosted by other servers like Prohosting ?

    iWeb has two other ways to publish your site...
    http://www.iwebformusicians.com/iWeb/Publish-Website.html
    ... and the second method allows you a choice of how you upload the files...
    http://www.iwebformusicians.com/iWeb/URLs-Favicons.html
    Here's a publishing workflow checklist...
    http://www.iwebformusicians.com/Search-Engine-Optimization/Website-Publishing-Wo rkflow.html
    The MobileMe only features can be replaced by alternatives...
    http://www.iwebformusicians.com/iWeb/Comments-Password-Protect.html
    If you have folders of assets outside of the main website folder on MobileMe, download them from the Apple server. From the Finder Go menu, follow the path iDisk/My iDisk/ to get there. Your website files are in the Web/Sites folder. Drag any files/folders onto the desktop.
    Use an FTP application to upload these assets to the root folder on your new server...
    http://www.iwebformusicians.com/Search-Engine-Optimization/Upload.html
    ...and change the relevant URLs to...
    http://www.domain-name.com/Folder-Name/file-name.file-extension
    There are lots of options for hosting for about half the cost of MobileMe...
    http://www.iwebformusicians.com/iWeb/Website-Hosting.html
    If you have been using a web.me.com domain name, you need to register a new one. Most hosting services give you at least one free and registering with your hosting company will make forwarding and managing it a lot easier.
    Make sure you add the new name to Google and create, upload and enter a new sitemap.xml...
    http://www.iwebformusicians.com/Search-Engine-Optimization/SEO.html
    If you have inbound links on other sites...
    http://www.iwebformusicians.com/Search-Engine-Optimization/Inbound-Link.html
    ... remember to inform the webmasters of you new URL.
    "I may receive some form of compensation, financial or otherwise, from my recommendation or link."

  • Finding OLD MAC address through Router.

    Sir, 
    I lost my laptop (Dell Inspiron 5521 15r) and only have its box which contains serial number 6CRC9W1 , order number 920181961 and etc but dont have MAC address. I asked dell about that but they are not helping me to get mac. Please tell me if there is any
    way to get old mac addresses through router to which my laptop was connected. Thanks.

    You can't. There is no way to know what the MAC was.
    The MAC is tied to the network adapter, not the Laptop, and hence not the Service Tag.  Since the Laptop probably had a wired adapter and a wireless adapter,...there would have been two different MACs.
    What good would it be even if you knew what it was?

  • Issue trying to use old Mac Time Machine backup on new Mac

    I've just got a new iMac 27" to replace my old 21" and am planning to restore files from the Time Machine backup I have. On the iMac 21" I used an external hard-drive connected to an Airport Extreme Base Station to back up using Time Machine. On the new Mac the external drive is connected directly to the USB port. The old machine is now about 10,000 miles away from me.
    The issue I have is I cannot read the back-up from the old machine on the new.
    During the first startup I tried to read from the Time Machine backup but the system told me I could not use it because it was from a different machine - it read all the back-up dates and let me chose, but did not allow to use it.
    After startup was completed, I run a software update to make sure everything had the same version and tried Migration Assistant (with the HD still connected to the USB port), but the wheel keeps spinning not finding any disk.
    I can read the .sparsebundle file on the external drive and I see it is intact. Disk Utility recognizes it and Status is Not mounted. When I try to open it with Disk Utility it says it is not mountable.
    Any of you know how I can resolve this? I am thinking of a way of opening the file and reading it.
    I really just need my music, my movies and my pictures, but I have 1.2T of that so it is not something I can download from the old Mac.
    Thanks a lot in advance.

    I've just got a new iMac 27" to replace my old 21" and am planning to restore files from the Time Machine backup I have. On the iMac 21" I used an external hard-drive connected to an Airport Extreme Base Station to back up using Time Machine. On the new Mac the external drive is connected directly to the USB port. The old machine is now about 10,000 miles away from me.
    The issue I have is I cannot read the back-up from the old machine on the new.
    During the first startup I tried to read from the Time Machine backup but the system told me I could not use it because it was from a different machine - it read all the back-up dates and let me chose, but did not allow to use it.
    After startup was completed, I run a software update to make sure everything had the same version and tried Migration Assistant (with the HD still connected to the USB port), but the wheel keeps spinning not finding any disk.
    I can read the .sparsebundle file on the external drive and I see it is intact. Disk Utility recognizes it and Status is Not mounted. When I try to open it with Disk Utility it says it is not mountable.
    Any of you know how I can resolve this? I am thinking of a way of opening the file and reading it.
    I really just need my music, my movies and my pictures, but I have 1.2T of that so it is not something I can download from the old Mac.
    Thanks a lot in advance.

  • WRT54GS - MAC Address Filter & Firewall SPI

    Hi,
    I just purchased a WRT54GS V 6 wireless router.  I updated the firmware to the latest (May 30) and the set up seems to be OK.  Using the security recommendations in the manual as a guide, I implemented them - the turn off SSID, and the others. 
    IF I try to filter the MAC addresses (accept only those on the list) for my wife's Sony VAIO VGN - S260 laptop, it can see the network but will not connect. When I turn off the MAC filtering, it is fine.  I used the WPA2 personal encryption, and input the passphrase into both router and computer. 
    My other issue is the firewall Statefull Packet Inspection (SPI).  On the Security set up screen, firewall tab - I have the four radio button settings that I am supposed to (Block WAN request, filter Multicast, Filter NAT, & Filter IDENT), however, I do NOT have the option to turn on the firewall (SPI) above the 4 radio buttons - that setting is totally missing from the set up screen.  Reference Page 28 of the manual.
    I would appreciate any help or suggestions, as I could not find any ideas searching the forum.  Thanks for your help
    Message Edited by donh127 on 08-07-2006 07:00 PM

    Hi. Is your Mac mini loaded with the OSX server edition or OSX consumer edition? I am not 100% sure but I think you need a server edition to do that.

  • ITunes using old email address

    A few days back I received several warnings onscreen that my me.com security had been compromised. Rather than click on any links, I waited and later accessed my account. I changed the password but I keep getting warnings that my account has been disabled and my account has been locked and to visit iForgot to reset my password. I've done that THREE times now and my iPad STILL uses an old email address to sign in instead of the me.com address and I can't update anything. Same with my iPhone. Anyone else having these problems?
    I DID check the statement for the credit card I use for the account and there were indeed 3 transactions I didn't recognize.
    How do I at least change the old email address iTunes is using? Throughout my time with this iPad, and sometimes on the Mac, iTunes used my regular email addie to get into iTunes. Now it still uses it but doesn't recognize it. *FacePalm*
    Anybody??

    Sign off her browswer session and click on "Forgot password click for assistance" link. Because you remember the emaiil address you used to register you can now just reset your password. When you say "don't want to loose the music I had" where are those tunes?

  • WebLogic 6.0 looking for old IP address after DHCP assigned new IP

    Hi All,
    I installed WebLogic 6.0 on my desktop and it worked just fine
    till the DHCP server assigned a new IP address to my desktop.
    Now when I start the Example Server, I get the following.
    "####<Mar 23, 2001 5:57:29 PM CST> <Notice> <WebLogicServer> <johnt1>
    <examplesServer> <SSLListenThread> <system> <> <000202> <SSLListenThread
    listening on port 7002>
    ####<Mar 23, 2001 5:59:56 PM CST> <Error> <ConnectionManager> <johnt1>
    <examplesServer> <ExecuteThread-13> <> <> <000000> <Could not connect
    to: '0S:10.97.20.69:[7001,-1,-1,-1,-1,-1,-1]'>
    java.net.NoRouteToHostException: Operation timed out: no further
    information
    at java.net.PlainSocketImpl.socketConnect(Native Method)..."
    Please note that 10.97.20.69 is my old IP address. I have a strong
    feeling that this has something to do with cloudscape as the Default
    Server starts up just fine. The server continues to run after
    this exception is thrown and I can start the admin console.
    Any thoughts ??
    regards,
    Tony.

    I don't think it's about cloudscape. The same thing happens to me, and I
    don't use cloudscape, or have any references to it in my config file.
    I usually find that shutting down and restarting Weblogic once or twice
    clears it up.
    Tony wrote:
    Hi All,
    I installed WebLogic 6.0 on my desktop and it worked just fine
    till the DHCP server assigned a new IP address to my desktop.
    Now when I start the Example Server, I get the following.
    "####<Mar 23, 2001 5:57:29 PM CST> <Notice> <WebLogicServer> <johnt1>
    <examplesServer> <SSLListenThread> <system> <> <000202> <SSLListenThread
    listening on port 7002>
    ####<Mar 23, 2001 5:59:56 PM CST> <Error> <ConnectionManager> <johnt1>
    <examplesServer> <ExecuteThread-13> <> <> <000000> <Could not connect
    to: '0S:10.97.20.69:[7001,-1,-1,-1,-1,-1,-1]'>
    java.net.NoRouteToHostException: Operation timed out: no further
    information
    at java.net.PlainSocketImpl.socketConnect(Native Method)..."
    Please note that 10.97.20.69 is my old IP address. I have a strong
    feeling that this has something to do with cloudscape as the Default
    Server starts up just fine. The server continues to run after
    this exception is thrown and I can start the admin console.
    Any thoughts ??
    regards,
    Tony.

  • How do I delete my iCloud account that is storing an old email address after I changed by Apple ID?

    I changed my Apple ID online to a new email address, but now my iCloud account on my iPhone still has the old email address when it prompts me for a login.  I can't change the email address, so I want to delete it, but I can't delete it without a password and the password for my new Apple ID doesn't work.  I am forwarding my emails from the old email address to the new, but when I request a reset on my password, nothing shows up.

    If the old ID is yours, and if your current ID was created by editing the details of this old ID (rather than being an entirely new ID), go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID.  Click edit next to the primary email account, change it back to your old email address and save the change.  Then edit the name of the account to change it back to your old email address.  You can now use your current password to turn off Find My iPhone, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll.  When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iPhone when prompted (your iCloud data will still be in iCloud).  Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was.  Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.

  • Is there any way to track a stolen laptop using the mac address, or by triangulating the wifi, or even by checking to see if the macbooks serial number has been registered online anywhere?

    A little info on my question,
    I had it stoeln on June 22nd 2013. I had recently bought it so had not installed any software on it nor did I have registered with icloud. I had contacted police, registered it stolen with Apple (but then just discovered this week that apple do not have a database for stolen products, which makes no sense at all).
    I have contacted all the major pawn shops and computer stores in town etc etc. I have recently discovered that each laptop has a unique MAC address whcih begs the question, is that traceable somehow? I have been made aware that the router strips the mac address before it connects it to the internet but does the isp log the laptops MAC address? If i contacted all the major isp in my country would they have the ability to search for the mac address of my latop and then link that with an ip address?
    Any help would be great please!

    karlgporter wrote:
    Yeah but I registered it stolen with Apple first thing, then called local police etc. Apple told me on the phone that the serial has been logged as stolen, which I assumed would limit the computers use online.
    Every machine has a unique serial number what I was getting at is there must be some way to track the serial number and for example if the theif logged onto facebook using a stolen machine, if there were a register of stolen equipment then red flags would pop up, you know what I mean?
    Well, I hadn't heard of that before. If it's true, then what you say should also be true but the Mac would have to publish its hardware serial number over the Internet and I haven't heard of that either. The only Apple tech that is supposed to constantly track you is iCloud.
    You said you assumed the database would limit use online but if that's only an assumption, you need to ask Apple what exactly the stolen database does. It is possible that the serial number might only get flagged if it comes into an Apple Store for service, if it ever does. You need to clarify this with Apple.

  • Apple ID using old Email address

    I seem to have acquired two Apple IDs and I know I am unable to merge them.  The trouble is that the one I use regularly now has an old Email address tied to it and I am unable to edit that address.
    How can I change the Email address tied to the ID I use.  If I try to enter my current Email address in the profile it tells me there is another ID with that address, but I don't remember the details, ID or password, with that address.

    If the address you want to use has ever been associated with an Apple ID in any way then you won't be able to use it (even if you identifty the ID and know the password): you will have to use another non-Apple address which has never been associated with an Apple ID.

  • Is it possible to get the exact model of a product manufactured by Apple using its MAC address alone?

    Didn't know where to really put this, but if anyone could help me out I'd much appreciate it. 

    You might want to have a look at MAC address - Wikipedia, the free encyclopedia for a description of how MAC addresses are assigned and what they mean.
    Basically part of the MAC address will identify the manufacturer, the rest of the address can be used as the manufacturer sees fit as long as it is unique.
    So it is possible some manufacturers might encode the device into the MAC address but it is not universal or mandatory.

Maybe you are looking for

  • Macbook Pro running VERY slow- spinning wheel of death

    My 4 year old MacBook Pro has been running very very slow for quite some time and I'm fed up enough to ask for some suggestions. Upon reading some forums, I was advised to download EtreCheck... here are my results. Some things are in red and look bad

  • Changing the default mail sender name in Application server

    Hi, how do I change default mail sender name in application server. It is administrator@application by default.

  • HT201343 MacBook Pro Airplay

    Hi, I have a MacBook Pro (Early 2011) and a 3rd generation Apple TV. Both are updated and runing in the same network. Hoever, I can manage to enable airplay. I don't find the mirroring menu and in the display settings I'm not allowed to change to the

  • Ubuntu Has Created A Boot Problem

    I've been using Ubuntu on my mobile machine for a while, and have been really liking it for "work" stuff, so I decided to bite the bullet and install it on my iMac. Right off the bat, I made a huge mistake. I didn't read the Ubuntu FAQ that explicitl

  • IPhoto with Parental Guidance

    I am using Simple Finder for my families login accounts and found that it works very well. I have also been using parental guidance and disabling all apps apart from the ones i specify. This to has worked well. The problem i now faced is that iPhoto