Deploying 4260 into Architecture Question

Hello,
I have been tasked with updating/evaluating/integrating a Cisco 4260 into an inline state on our current network. Currently it is in promiscuous mode spanning traffic, but no profiles or device management is set to actively block traffic. Inline however are currently two existing ASA 5520's in a redundant active/standby pair. My question is, is it possible to bring 1 IPS into the equation and have it cabled inline to both ASA's. From my understanding there are 6 interfaces on the Cisco 4260, one being the management interface, and for inline mode to work the interfaces have to work as interface pairs. This leads me to believe that either one or the other ASA can be cabled inline, but not both at the same time based on only having 1 IPS. Is this statement correct? If not please provide details on potential cabling of this device in this scenario.
Thank you,
Charles

Hi Charles,
You may connect the IPS 4260 to both ASAs without a problem. As the ASAs are running in an active/standby failover, traffic will only pass through one ASA at a time.
You may configure interfaces pairs o inline vlan pairs in order to save space.
http://tools.cisco.com/squish/f7C75
http://tools.cisco.com/squish/8cC04
I hope it helps.
regards,
Itzcoatl Espinosa

Similar Messages

Architecture question, global VDI deployment

I have an architecture question regarding the use of VDI in a global organization.
We have a pilot VDI Core w/remote mysql setup with 2 hypervisor hosts. We want to bring up 2 more Hypervisor hosts (and VDI Secondaries) in another geographic location, where the local employees would need to connect desktops hosted from their physical location. What we don't want is to need to manage multiple VDI Cores. Ideally we would manage the entire VDI implementation from one pane of glass, having multiple Desktop Provider groups to represent the geographical locations.
Is it possible to just setup VDI Additional Secondaries in the remote locations? What are the pros and cons of that?
Thanks

Yes, simply bind individual interfaces for each domain on your web server,
one for each.
Ensure the appropriate web servers are listening on the appropriate
interfaces and it will work fine.
"Paul S." <[email protected]> wrote in message
news:407c68a1$[email protected]..
>
Hi,
We want to host several applications which will be accessed as:
www.oursite.com/app1 www.oursite.com/app2 (all using port 80 or 443)
Is it possible to have a separate Weblogic domain for each application,all listening
to ports 80 and 443?
Thanks,
Paul

Architectural question

Little architectural question: why is all the stuff that is needed to render a page put into the constructor of a backing bean? Why is there no beforeRender method, analogous to the afterRenderResponse method? That method can then be called if and only if a page has to be rendered. It seems to me that an awful lot of resources are waisted this way.
Reason I bring up this question is that I have to do a query in the constructor in a page backing bean. Every time the backing bean is created the query is executed, including when the page will not be rendered in the browser...

Little architectural question: why is all the stuff
that is needed to render a page put into the
constructor of a backing bean? Why is there no
beforeRender method, analogous to the
afterRenderResponse method? That method
can then be called if and only if a page has to be
rendered. It seems to me that an awful lot of
resources are waisted this way.There actually is such a method ... if you look at the FacesBean base class, there is a beforeRenderResponse() method that is called before the corresponding page is actually rendered.
>
Reason I bring up this question is that I have to do
a query in the constructor in a page backing bean.
Every time the backing bean is created the query is
executed, including when the page will not be
rendered in the browser...This is definitely a valid concern. In Creator releases prior to Update 6 of the Reef release, however, there were use cases when the beforeRenderResponse method would not actually get called (the most important one being when you navigated to a new page, which is a VERY common use case :-).
If you are using Update 6 or later, as a side effect of other bug fixes that were included, the beforeRenderResponse method is reliably called every time, so you can put your pre-rendering logic in this method instead of in the constructor. However, there is still a wrinkle to be aware of -- if you navigate from one page to another, the beforeRenderResponse of both the "from" and "to" pages will be executed. You will need to add some conditional logic to ensure that you only perform your setup work if this is the page that is actually going to be rendered (hint: call FacesContext.getCurrentInstance().getViewRoot().getViewId() to get the context relative path to the page that will actually be displayed).
One might argue, of course, that this is the sort of detail that an application should not need to worry about, and one would be absolutely correct. This usability issue will be dealt with in an upcoming Creator release.
Craig McClanahan

BPEL/ESB - Architecture question

Folks,
I would like to ask a simple architecture question;
We have to invoke a partner web services which are rpc/encoded from SOA suite 10.1.3.3. Here the role of SOA suite is simply to facilitate communication between an internal application and partner services. As a result SOA suite doesn't have any processing logic. The flow is simply:
1) Internal application invokes SOA suite service (wrapper around partner service) and result is processed.
2) SOA suite translates the incoming message and communicates with partner service and returns response to internal application.
Please note that at this point there is no plan to move all processing logic from internal application to SOA suite. Based on the above details I would like get some recommedation on what technology/solution from SOA suite is more efficient to facilate this communication.
Thanks in advance,
Ranjith

You can go through the design pattern called Channel Adapter.
Here is how you should design - Processing logic remains in the application.. however, you have to design and build a channel adapter as a BPEL process. The channel adapter does the transformation of your input into the web services specific format and invoke the endpoint. You need this channel adapter if your internal application doesn't have the capability to make webservice calls.
Hope this helps.

Errors when Automatically Deploying Planning into WebLogic 9.1

Dears,
I have installed Planning 9.3.1 on the Solaris OS.(SPARC 64-bit)
But when I want to deploy Planning into WebLogic 9.1 automatically. It has failed to deploy application "HyperionPlanning".
Please let me know if anyone has some ideas.
Thanks for your help.
Sophia

Hi,
Is planning supported on 64bit SPARC ?
You may have to manually deploy planning into weblogic.
Sorry I can't help further.
Cheers
John
http://john-goodwin.blogspot.com/

Hi! I have a Creative suite Design Standard 9 Adobe program and I am attempting to make a wizzard form that can be made into an entry form for a competition. So I need to 1. Make the form into a question and answer form that Participants may fill out. 2.

Hi! I have a Creative suite Design Standard 9 Adobe program and I am attempting to make a wizzard form that can be made into an entry form for a competition. So I need to 1. Make the form into a question and answer form that Participants may fill out. 2. make it possible for them to download it via a link on our website 3. make it possible for them to save the info they have written into the form and mail it to the mail we have supplied in the entry form and 4. make it possible for them to put in a jpg. as part of the entry for and lastly 5. make it possible for us to copy paste the document and use it on other platforms. How do I do this - is it at all possible with adobe?

Those requirements are go way beyond what PDF forms can do and are meant for, some of them would require involving other programs or are mutually exclusive and contradictory. You are wasting your time even thinking about doing this as an "offline" PDF form. Simply sign up for an online forms/ survey service like FormsCentral or Surveymonkey.
Mylenium

What is best practice to deploy webpart into 1. Solutions Galary, 2. GAC, 3. BIN?

I am trying various ways to deploy webpart. Can you please provide me best practice methods to deploy webpart into:-
Case 1. Solutions Galary: ?
Case 2. GAC: ?
Case 3. BIN: ?

That is going to depend on what is in the web part...
There are "apps", "sandboxed solutions" (becoming deprecated in 2013), "Farm Solutions" if you have dlls that need to be deployed to the gac.
Apps - More for javascript (or if you have server side code that you want to run on a server that is not in sharepoint
sandboxed solutions - run in the context of a site, but cannot add dll to gac (or consume certain dlls such as system.web, etc...) so anything that you want to do outside the context of the current site collection is not allowed
Farm Solution - allows you to deploy .Net code to the GAC. Would package as a wsp and give it to an admin to install (requires app pool resets and/or iis resets).

Oracle VM Server for SPARC - network multipathing architecture question

This is a general architecture question about how to best setup network multipathing
I am reading the "Oracle VM Server for SPARC 2.2 Administration Guide" but I can't find what I am looking for.
From reading the document is appears it is possible to:
(a) Configure IPMP in the Service Domain (pg. 155)
- This protects against link level failure but won't protect against the failure of an entire Service LDOM?
(b) Configure IPMP in the Guest Domain (pg. 154)
- This will protect against Service LDOM failure but moves the complexity to the Guest Domain
- This means the there are two (2) VNICs in the guest though?
In AIX, "Shared Ethernet Adapter (SEA) Failover" it presents a single NIC to the guest but can tolerate failure of a single VIOS (~Service LDOM) as well as link level failure in each VIO Server.
https://www.ibm.com/developerworks/mydeveloperworks/blogs/aixpert/entry/shared_ethernet_adapter_sea_failover_with_load_balancing198?lang=en
Is there not a way to do something similar in Oracle VM Server for SPARC that provides the following:
(1) Two (2) Service Domains
(2) Network Redundancy within the Service Domain
(3) Service Domain Redundancy
(4) Simplify the Guest Domain (ie single virtual NIC) with no IPMP in the Guest
Virtual Disk Multipathing appears to work as one would expect (at least according the the documentation, pg. 120). I don't need to setup mpxio in the guest. So I'm not sure why I would need to setup IPMP in the guest.
Edited by: 905243 on Aug 23, 2012 1:27 PM

Hi,
there's link-based and probe-based IPMP. We use link-based IPMP (in the primary domain and in the guest LDOMs).
For the guest LDOMs you have to set the phys-state linkprop on the vnets if you want to use link-based IPMP:
ldm set-vnet linkprop=phys-state vnetX ldom-name
If you want to use IPMP with vsw interfaces in the primary domain, you have to set the phys-state linkprop in the vswitch:
ldm set-vswitch linkprop=phys-state net-dev=<phys_iface_e.g._igb0> <vswitch-name>
Bye,
Alexander.

Running MII on a Wintel virtual environment + hybrid architecture questions

Hi, I have two MII Technical Architecture questions (MII 12.0.4).
Question1: Does anyone know of MII limitations around running production MII in a Wintel virtualized environment (under VMware)?
Question 2: We're currently running MII centrally on Wintel but considering to move it to Solaris. Our current plan is to run centrally but in the future we may want to install local instances local instances of MII in some of our plants which require more horsepower. While we have a preference for Solaris UNIX based technologies in our main data center where our central MII instance will run, in our plants the preference seems to be for Wintel technologies. Does anybody know of any caveats, watch outs or else around running MII in a hybrid architecture with a Solarix Unix based head of the hybrid architecture and the legs being run on Wintel?
Thanks for your help
Michel

This is a great source for the ins/outs of SAP Virtualization: https://www.sdn.sap.com/irj/sdn/virtualization

How to paste or insert an image into a question?

Hi everyone, do any of you know how to insert a picture/ image into a question being posted on the discussion forum I came across a question at
http://discussions.apple.com/thread.jspa?messageID=6479101&#6479101
and realized that it can be done so I've printed part of the screen saved an image and would like to use it along with my question to help me explain the question in more detail.
Thanks Tumahawk

I discovered how to do it at this link for any of you wondering how to post images in these forums here's the link take care http://discussions.apple.com/thread.jspa?messageID=6477956&#6477956

Architecture Question...brain teasing !

Hi,
I have a architecture question in grid control. So far Oracle Support hasnt been able to figure out.
I have two management servers M1 and M2.
two VIP's(Virtual IP's) V1 and V2
two Agents A1 and A2
the scenerio
M1 ----> M2
| |
V1 V2
| |
A1 A2
Repository at M1 is configured as Primary and sends archive logs to M2. On the failover, I have it setup to make M2 as primary repository and all works well !
Under normal conditions, A1 talks to M1 thru V1 and A2 talks to M2 thru V2. No problem so far !
If M1 dies, and V1 forwards A1 to M2 or
if M2 dies, V2 forwards A2 to M1
How woudl this work.
I think (havent tried it yet) but what if i configure the oms'es with same username and registration passwords and copy all the wallets from M1 to M2
and A1 to A2 and just change V1 to V2. Would this work ????
please advice!!

SLB is not an option for us here !
Can we just repoint all A1 to M2 using DNS CNAME change ??

Inheritance architecture question

Hello,
I've an architecture question.
We have different types of users in our system, normal users, company "users", and some others.
In theory they all extend the normal user. But I've read alot about performance issues using join based inheritance mapping.
How would you suggest to design this?
Expected are around 15k normal users, a few hundred company users, and even a few hundred of each other user type.
Inheritance mapping? Which type?
No inheritance and append all attributes to one class (and leave these not used by the user-type null)?
Other ways?
thanks
Dirk

sorry dude, but there is only one way you are going to answer your question: research it. And that means try it out. Create a simple prototype setup where you have your inheritance structure and generate 15k of user data in it - then see what the performance is like with some simple test cases. Your prototype could be promoted to be the basis of the end product if the results or satisfying. If you know what you are doing this should only be a couple of hours of work - very much worth your time because it is going to potentially save you many refactoring hours later on.
You may also want to experiment with different persistence providers by the way (Hibernate, Toplink, Eclipselink, etc.) - each have their own way to implement the same spec, it may well be that one is more optimal than the other for your specific problem domain.
Remember: you are looking for a solution where the performance is acceptable - don't waste your time trying to find the solution that has the BEST performance.

My "Documents" icon in the dock has turned into a question mark.

On my MacBook Air my documents icon has disappeared and turned into a question mark. The icons have also disappeared within my Documents folder and some of the applications folders. Where did they go and how can I get them back?

Where they went is a good question, and not one we can answer without a lot more information. However, the Dock is pretty resilient at finding things like this if they are accidentally moved into another folder. So, unfortunately, I'd have to guess that it has been deleted. If that is the case, your question about getting them back can only be answered with another question: do you have backups?

Deployment runs into an internal error NI installers

Hi,
When I try to deploy my system in TSv4.1.1, the deployment runs into an internal NI installers problem. Error in deployment status log is "An internal error occurred involving an installer function. This type of error usually involves a problem with one or more National Instruments Installers. For more information open the following log file:
...\Temp\Detailed_Installer.log (path replaced). " I can't find any suspicious in that file. I can even find error line in status log stating "Error Code:-603 Read Registry Value STR.vi".
What I have done is that I have upgraded from TSv3.5 to TSv4.1.1 which is now running in a new computer. I use the same .tsw file as in v3.5. I have verified and I suppose all files in .tsw have correct paths according to changes made from 3.5 to 4.1.1. I use some old DLLs compiled in CVI 8.x included in .tsw.
I have even tried a create a new deployment file without any further success.
I even get the internal error message window above when I access installer options tab and drivers and components window after pressing OK or cancel button.
any help ?
regards,
petri

hi,
Attached a status log from a new workspace with a project and sequence file. Deployment is as well a new.
I can't find *.vis from harddrive.
Installation is FDS from NI developer Suite fourth Quarter 2008 DVD.
regards,
petri
Starting Log.
Error occurred
Error Code:-603
Read Registry Value STR.vi
Starting Analysis
Starting to process workspace file
Workspace Processed
Finished Analysis
+++++++++++++++++++++++++++++++++++++++
Error occurred
Error Code:-30
TestStand - Deployment Utility Splash Screen.vi >> TestStand - Distribution Wizard GUI.vi >> TestStand - Additional Components Dialog.vi >> TestStand - Reselect Meta Installer Products.vi >> TestStand - Get Dependencies of TS Engine.vi >> MDFProdPreview_AddProduct.vi
{95C82647-A6CB-492F-A5A9-66A282CAD7F3}
An internal error occurred involving an installer function. This type of error usually involves a problem with one or more National Instruments Installers. For more information open the following log file:
...\Temp\Detailed_Installer.log

Can JWS do this...? Architecture question

Hi,
I'm designing the architecture for a school board that is moving a COBOL system to a Java App Server system. Within the system there are approx 180 'Modules' - each module being a set of screens that allow a user to accomplish a task. For example, the Teacher Grading module allows a teacher to access their student records and maintain the student's grades.
I'm looking to use JWS for deployment of the front end but am unsure if JWS will support the framework I want to put in place.
From a UI perspective, as there are so many modules in the system I want to design the architecture in a way that allows each module to plug in to the existing framework.
The front end would consist of a container application that would house each module in a sort of tabbed view. As each module is added to the system so the user would see a new tab in the UI that housed the new module (depending on whether the users had permissions to access the module).
So the front end container would display the modules that the user can access, adding new ones as they are defined.
Question:
Is the server's JNLP file for the application static? If it was ammended to include new jars would this cause problems on the Client side post initial installation, or would it take it in it's stride and just upload the new jars as required?
What I want to do:
I was hoping that I could just ammend the JNLP file on the server to include the new Module (jar file), the Container app could then just get a list of class names from the App server that were applicable to the User. The Container app could then instantiate the class objects and the JWS would automatically upload jars any that were missing (using lazy loading), and subsequently add the new Module( jar) to it's list of versioned jars to update when required.
Question:
Is this possible to do using JWS?
Another possiblity:
1) Main application Container gets installed using JWS
2) User starts app and signs on
3) Container talks to App Server and determines which Modules the User has permissions to use
4) Container downloads missing or new Modules - jar files (maybe using javax.jnlp.DownloadService?)
5) Want JWS to subsequently evaluate downloaded Modules (and main app) for any updates - though this would happen at step 2.
Question:
Would an individual Module's jar file/s need to be referenced in the JNLP file to download it using javax.jnlp.DownloadService? I am thinking it would.
Things to note - it is not possible to define the app with all 180 Modules embedded as it may take years to recode all 180 COBOL Modules in Java. and the system it being implemented iteratively. Also few, if any users will have access to all 180 Modules. Users are part of Groups (Teachers, Superintendants, Subtitutes etc) and each Group only has access to a certain set of screens (Modules).
Any advice would be appreciated, as I would like to be aware of any potential problems before I define the architecture.
cheers
Ray

You are completely free to dynamically generate the JNLP file if you wish via a regular Java servlet. In fact Sun has available a simple servlet called JnlpDownloadServlet which you'll find in the jnlp-servlet.jar file in your jdk installation. So you could create the servlet and pass arguments to it giving the user id and it could generate it with the modules that this user has access to. You would then probably also generate arguments passed to the main() function which would tell your app what classes (modules) to load into your app.
The disadvantage of this approach is that your server has to keep track of what modules this user can use, and he would probably have to use the web site and another servlet to configure it. (Assuming the user has any control over what modules he can access).
However there may be a better way for you to proceed. If you create a static JNLP file that contains ALL the modules but with the download="lazy" option, then all modules will be in the JNLP but not downloaded unless necessary.
Then you can download the bits explicitly you want to use. (The DownloadService class) will tell you how to do this.... http://java.sun.com/products/javawebstart/docs/javadoc/index.html
You will need to have all the modules listed in the JNLP file. Whenever a user starts up the app it will refresh their copy of the JNLP file. Pass the list of available modules to the main() function within the JNLP file so that the app knows they are there.
If necessary have some arguments that indicate permissions on the modules within the JNLP file that are passed to main(). (e.g. --module=mymod1.jar,perm=teachers,students )
You may want to create a ClassLoader that accesses that jar file directly (passing in the URL)... (once it is downloaded via DownloadService) and loading information directly from each jar. e.g. have an info.properties file in the "root directory" of every jar file that explains what the entry point or points are for this module. That avoids having to pass even more info in the JNLP file (e.g. --entryPoint=com.foo.MyModule1). or else having some guessable naming scheme for classes. That is a good thing at least for entry points so that the module is completely self-contained describing its own entry points. That is an approach I've used before. But you wouldn't use it for permissions, because then you would have to download it before you could tell if you need it.
Now the application itself can manage its own modules and resources using whatever criteria you desire. (You could even give the user some control). If all your modules have a standard interface for launching them, you can dynamically load those classes on demand. Use DownloadService to download the jar for that module, and then use Class.forName() to access the entry point for the module. Use the java.util.prefs.Preferences class if you need to keep track of anything on the client side about modules.
If it were me, I'd have the code be able to work without webstart as well which is easier for local debugging. That shouldn't be a problem.

Deploying 4260 into Architecture Question

Similar Messages

Maybe you are looking for