F5 migration to Cisco Ace10

Hello
I've been given a F5 script that i need to apply to a Cisco Ace.
The F5 script looks like its doing some http redirects with some certain match criteria and i need to convert this to Cisco command structure.
I don't fully understand what the F5 script is trying to achieve in the first place having very limited F5 experience with irules, which makes it hard for me to migrate.
Do you know if there is a F5 to Ace conversion tool or a way of acheiving this
Thanks

Hi Siva,
Please can you tell me what this tool is called? I've asked my Cisco account manager and they do not know. I too want to migrated a f5 BIG-IP to a Cisco ACE.
Regards,

Similar Messages

Migrating from Cisco Unity Express to Cisco Unity Connection

Hello,
We are going to migrate from Cisco Unity Express 8.6.6 to Cisco Unity Connection 9.1.2. Therefore, we need to migrate all mailboxes without data lost.
So, the questions are next: is it possible? Which tools we should use and what steps we need to pass?
Thanks,

Based on my experience of keeping the data (i.e. voicemails for users) it is really not worth it.
Because all these voicemails will add up the Mailbox Space and user will get unnecessary "mailbox full" warnings even though they may be deleted (it takes around 2 weeks to get rid of the deleted voicemails)
Hence, my recommendation would be to do a stare and compare for the most part and build all the Call Handlers etc, this will give you even better chance to get rid of all the unwanted stuff.
HTH

ASN Traffic Cisco Ace10 Module

Hello Everyone,
I have a problem here.
I trying configure ASN traffic loadbalance, but doesn't works.
Explanation: I have one Cisco Catalyst 6509 and onde Cisco Ace10 module, in my context "PanWEB" i have the interfaces above:
interface vlan 4(rservers interface)
bridge-group 10
no normalization
no icmp-guard
access-group input all-access
   nat-pool 1 172.17.3.254 172.17.3.254 netmask 255.255.255.255 pat(used for others aplications in this context).
service-policy input Access
service-policy input VIP
no shutdown
interface vlan 82(VIP interface)
ip address 10.96.202.4 255.255.255.0
alias 10.96.202.5 255.255.255.0
peer ip address 10.96.202.6 255.255.255.0
no normalization
no icmp-guard
access-group input all-access
   service-policy input Access
service-policy input VIP
no shutdown
interface bvi 10
ip address 172.17.2.199 255.255.0.0
peer ip address 172.17.1.199 255.255.0.0
no shutdown
I trying to configure ASN traffic because my application needs original client IP, NAT is not a option in this scenario, my configuration is:
rserver host PANVCTXP308B
ip address 172.17.2.218
inservice
rserver host PANVCTXP308C
ip address 172.17.2.224
serverfarm host SF-PAN-CITRIX
transparent
rserver PANVCTXP308B 80
    inservice
rserver PANVCTXP308C 80
    inservice
sticky ip-netmask 255.255.255.255 address source sticky_citrix
serverfarm SF-PAN-CITRIX
class-map match-all SLB_CITRIX
2 match virtual-address 10.96.202.10 tcp eq www
policy-map type loadbalance first-match SLB_CITRIX
class class-default
    sticky-serverfarm sticky_citrix
policy-map multi-match VIP
class SLB_CITRIX
    loadbalance vip inservice
    loadbalance policy SLB_CITRIX
    loadbalance vip icmp-reply active primary-inservice
If i try to establish a telnet session(telnet 10.96.202.10 80) i see the SYN packet passing through the ACE and going to the real server, but, the server do not response the SYN packet.
I done a capture in the server using wireshark and could see that the IP address of the destination is the VIP and not the rserver ip address , this is a problem? Why can not I have the SYN + ACK from the server?
Thanks a lot!
Rafael

Hi Kanwaljeet,
BVI interface was already created before this inplementation, i only created interface vlan 82 for add a VIP address in a different subnet, i took the configuration.
The server receive the connection(SYN) with correct ip address from client(10.93.7.25) but, the destination ip adress is 10.96.202.10(VIP Address) and not rserver ip adress, server do not response the packet, to the client, and i see a timeout in the client browser, i do not see SYN ACK.
Topology example:http://3.bp.blogspot.com/_Tdhn-HYCK18/SKGWUzrw0gI/AAAAAAAAAjk/2wR4mjAOn3g/s1600/ASN-simple.gif
http://snippets101.blogspot.in/2008/08/asymmetric-server-normalization-on.html

Migrating a Cisco ACS Database

Hi,
Can there be any potential problems, if we want to migrate an existing Cisco ACS Database to a different physical Server (Keeping the same IP information etc) ?
We were running Cisco ACS evaluation version for Cisco NAC (CTA) and now want to make it production while moving it to a different server.
Regards \\ Naman

Hi,
I'm not an expert for the ACS but when you look into System configuration you will find the feature 'Database Replication'. With an eval version you should be able to test this feature.
Cheers,

[SOLVED]Failure of the ZBF migration from cisco 2811 ios 12.4/K9 to 1941 ios 15/k9

Hello to everyone,
I write because I have decided to pass from a cisco 2811 with ios 12.4/k9 to a cisco 1941 ios 15/k9, migrating configuration I have a problem with the ZBF.
I do not know if it's a problem of policy or differences between ios.
Could someone help me please?
Thank you all in advance
Regards,
Salvatore
Update: Configuration modified and IOS upgrade.

Salvatore,
I don't know what problem exactly you face with your ZBF, but this may help you trbouleshooting your ZBF.
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080a63b94.shtml
Thanks!

Migrating from Cisco Prime Unified Provisioning Manager 9.0 BE to Prime Collaboration 9.0 Provisioning

Hi All,
    Cisco BE 6000 9.X support both Cisco Prime Unified Provisioning Manager 9.0 BE and Prime Collaboration 9.0 Provisioning as its management tool. OVA for both applications are pre-loaded on server from factory starting end of March 2013.
    For some customers that start with Cisco Prime Unified Provisioning Manager 9.0 BE, and want to migrate to Prime Collaboration 9.0 Provisioning for advanced features, they can follow the following guide for migration.
http://www.cisco.com/en/US/partner/docs/net_mgmt/prime/unified_provisioning_manager/9.0BE/migration/guide/migrate_90be_pc90.html
    For more collaterals for Cisco Prime Collaboration, please visit
http://www.cisco.com/en/US/partner/products/ps12363/index.html
Best
Jing

Finally, the solution of the problem was:
1-stop the daemon manager “net stop crmdmgtd”
2- Delete the xml files available under(please take backup from them) :
CSCOpx\objects\sir\work
CSCOpx\objects\topo\work
3-Start the daemon manager net start crmdmgtd (wait for 20 minutes until all process are up )

P2V migration to Cisco Blade servers - USB required

Hi,
I need to migrate a physical server to cisco Blade B230 M2 server.
I will be using VMware converter to P2V the physical machine.
A software installed on the physical sever requires a USB dongle to startup.
Is it possible to convert this machine?
Does Cisco B230 M2 server have any internal USB? (I heard that some other providers have internal USB on their blades)
is there any alternative?
Thanks again for your help

Hello
I have not tested it but did you try using the USB ports in the KVM dongle cable ?
Please refer to page 22 in the server spec sheet for KVM cable
http://www.cisco.com/en/US/prod/collateral/ps10265/ps10280/spec_sheet_c17-665957.pdf
I am not sure about internal USB port for B230 blade.
Padma

Migrating from Cisco 4402 to 5508 - AP Compatibility

We currently run six 4402 Wireless lan controllers - these are managed by a WCS server - soon to be replaced by Cisco Prime.
We run a mixture of LAP1242 and LAP1142 wireless access points.
I need to add more but have been told by my supplier that the both these AP's are now end of sale and cannot be purchased.
The replacement AP's are the 2600 series - but I have been told that these are not compatible with my existing 4402 controllers.
To make matters worse I was then advised that if I purchase the new 5580 controllers the older LAP1242 access points will not work with it and require replacing - this, for me, is a lot of access points.
What I need to know is:
What access points, if any, are currently available that are compatible with my 4402 controllers and a future 5508 installation?
I ssem to be in a situation now where I cannot buy any access points that will work with my 4402's but if I upgrade all my current 1242's will not funtion with the new 5508 controller!
Scott

Please look at the compatibility matrix of WLC release and AP's support (it is base on Controller software release)
Software Support for Access Points
Access Points
First Support
Last Support
1000 Series
AIR-AP1010
3.0.100.0
4.2.209.0
AIR-AP1020
3.0.100.0
4.2.209.0
AIR-AP1030
3.0.100.0
4.2.209.0
Airespace AS1200
4.0
AIR-LAP1041N
7.0.98.0
AIR-LAP1042N
7.0.98.0
1100 Series
AIR-LAP1121
4.0.155.0
7.0.x
1130 Series
AIR-LAP1131
3.1.59.24
1140 Series
AIR-LAP1141N
5.2.157.0
AIR-LAP1142N
5.2.157.0
1220 Series
AIR-AP1220A
3.1.59.24
7.0.x
AIR-AP1220B
3.1.59.24
7.0.x
1230 Series
AIR-AP1230A
3.1.59.24
7.0.x
AIR-AP1230B
3.1.59.24
7.0.x
AIR-LAP1231G
3.1.59.24
7.0.x
AIR-LAP1232AG
3.1.59.24
7.0.x
1240 Series
AIR-LAP1242G
3.1.59.24
AIR-LAP1242AG
3.1.59.24
1250 Series
AIR-LAP1250
4.2.61.0
AIR-LAP1252G
4.2.61.0
AIR-LAP1252AG
4.2.61.0
1260 Series
AIR-LAP1261N
7.0.116.0
AIR-LAP1262N
7.0.98.0
1300 Series
AIR-BR1310G
4.0.155.0
7.0.x
1400 Series
Standalone Only
1600 Series
AIR-CAP1602I-x-K9
7.4.100.0
AIR-CAP1602I-xK910
7.4.100.0
AIR-SAP1602I-x-K9
7.4.100.0
AIR-SAP1602I-xK9-5
7.4.100.0
AIR-CAP1602E-x-K9
7.4.100.0
AIR-SAP1602E-xK9-5
7.4.100.0
AP801
ap801-k9w7-tar
5.1.151.0
2600 Series
AIR-CAP2602I-x-K9
7.2.110.0
AIR-CAP2602I-xK910
7.2.110.0
AIR-SAP2602I-x-K9
7.2.110.0
AIR-SAP2602I-x-K95
7.2.110.0
AIR-CAP2602E-x-K9
7.2.110.0
AIR-CAP2602E-xK910
7.2.110.0
AIR-SAP2602E-x-K9
7.2.110.0
AIR-SAP2602E-x-K95
7.2.110.0
3500 Series
AIR-CAP3501E
7.0.98.0
AIR-CAP3501I
7.0.98.0
AIR-CAP3502E
7.0.98.0
AIR-CAP3502I
7.0.98.0
AIR-CAP3502P
7.0.116.0
3600 Series
AIR-CAP3602I-x-K9
7.1.91.0
AIR-CAP3602I-xK910
7.1.91.0
AIR-CAP3602E-x-K9
7.1.91.0
AIR-CAP3602E-xK910
7.1.91.0
600 Series
AIR-OEAP602I
7.0.116.0
Note The Cisco 3600 Access Point was introduced in 7.1.91.0. If your network deployment uses Cisco 3600 Access Points with release 7.1.91.0, we highly recommend that you upgrade to 7.2.103.0 or a later release.
1500 Mesh Series
AIR-LAP-1505
3.1.59.24
4.2.207.54M
AIR-LAP-1510
3.1.59.24
4.2.207.54M
1520 Mesh Series
AIR-LAP1522AG
-A and N: 4.1.190.1 or 5.2 or later1
All other reg. domains: 4.1.191.24M or 5.2 or later1
AIR-LAP1522HZ
-A and N: 4.1.190.1 or 5.2 or later1
All other reg. domains: 4.1.191.24M or 5.2 or later1
AIR-LAP1522PC
-A and N: 4.1.190.1 or 5.2 or later1
All other reg. domains: 4.1.191.24M or 5.2 or later1
AIR-LAP1522CM
7.0.116.0 or later.
AIR-LAP1524SB
-A, C and N: 6.0 or later
All other reg. domains: 7.0.116.0 or later.
AIR-LAP1524PS
-A: 4.1.192.22M or 5.2 or later1
1550
AIR-CAP1552I-x-K9
7.0.116.0
AIR-CAP1552E-x-K9
7.0.116.0
AIR-CAP1552C-x-K9
7.0.116.0
AIR-CAP1552H-x-K9
7.0.116.0
AIR-CAP1552CU-x-K9
7.3.101.0
AIR-CAP1552EU-x-K9
7.3.101.0
1552S
AIR-CAP1552SA-x-K9
7.0.220.0
AIR-CAP1552SD-x-K9
7.0.220.0

ASA500: migrate from Cisco VPN Client to native Windows VPN connection

We have a need at this time for only one of our computers to allow 2 Windows users to connect to our network thru VPN (it's a work share situation, they will not both be logged on the same day). We happily use the old Cisco VPN client for everyone else. But the old client will not install twice on the same machine, nor is there the option to "install for any user".
Thinking to KISS and not invest at this point, trying to get Windows native VPN to work ?
What combination of settings will work in its properties->security tab to do the same IKE IPsec over UDP(NAT) and with group auth along with the individual's login?
... (so no reconfiguration is needed in the ASA?)
Or are one of the other "type of VPN" will need minimal change on the ASA ?

Thank you.
I found this: http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/l2tp_ips.html#wp1041306
Will this have any effect on the rest of the users?
Step 1 Specify IPSec to use transport mode rather than tunnel mode with the mode keyword of the crypto ipsec transform-set command:
hostname(config)# crypto ipsec transform-set trans_name mode transport

Migrating to Cisco

We have a campus-wide infrstructure with single-mode OFC and Layer-3 and Layer-2 switches from different vendor. We want to repalce Layer-3 first while continuing with the Layer-2 switches. We have finalised Catalyst 3750 as Layer-3. But that comes with SFP uplink ports and our existing Layer 2s have GBIC ports. Will this combination work out ?

Yes.
The physical design of the optical transceiver (whether SFP, GBIC, X2, XENPAK, etc.) is not important to the operation. The more important aspect is matching the optical transceivers at the link's end; matching link protocols/speeds, fiber compatibility and optical reach; as designated by the standards (SX, LX, ZX, etc). Additionally, SFPs use LC-style connectors and GBICs use SC-style connectors, so you may need to purchase hybrid (LC/SC) fiber jumpers when interfacing to your existing network (patch panels, direct connections or other).

Cisco CallManager 5.1.3 Migration to CUCM 8.6

Hello
I am trying to migrate a Cisco Call Manager v5.1.3 to a new CUCM v 8.6 running on a VM.
I made a DSR backup from Call Manager v5.1.3 and try to install it in a VM running the same version (5.1.3) but I am receiving the following error message:
At least one of the servers which was requested to be restored is not connected: CUCMPUB. This may be due to Master or Local Agent being down., Restore Completed...
Any ideas about how to upgrade this server in a VM? I would not like to upgrade the production server...
Thanks in advance
Miguel Neira

Thanks for your response
The services are running...
Backup and Restore Services
Service Name Status
Cisco DRF Master
Running
Cisco DRF Local
Running

How To Migrate Cisco Clean Access to Cisco ISE

We have a Cisco Clean Access 3.6.3 (3140 Appliance) in which we would love to migrate to Cisco ISE 1.1 (3315 Appliance). Does anyone have an idea on how to do this?
I was wondering if I need to upgrade the a later version of Cisco Clean Access and them back it up the CCA. Backup the CCA and then restore/import the backup to the ISE.
Any help will be greatly appreciated?
Thanks.

Hi Mate,
Refer to below instructions for hosting licenses on ISRs:
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html#wp9001047
Rehosting a License
Prerequisites:
• Valid Cisco.com account (username/password)
• Retrieve Product Id and Serial Number with either the IOS "show license udi" command or label tray from both the source and destination devices.
• Retrieve Source Device Credentials by issue the following IOS commands in exec mode:
– license save credential flash0:CredentialFileName
– more flash0:CredentialFileName
• The source device has rehostable licenses.
Rehosting a License with Cisco's Licensing Portal
This process can be used when the source and the destination device cannot communicate directly with Cisco licensing portal
Summary Steps:
1. Obtain UDI and device credentials from the source and destination devices using IOS CLI commands
2. Contact the Product License Registration page on Cisco.com and enter the source Device Credentials and UDI into the license transfer portal tool.
3. The portal will display licenses that can be transferred from the source device.
4. Select the licenses that need to be transferred. A permission ticked is issued. You can use this permission ticket to start the rehost process using Cisco IOS c for any further help.ommands.
5. Apply the permissions ticket to the source device using the license revoke command. The source device will then provide a rehost ticket indicating proof of revocation. A sixty day grace period license is also installed on the device to allow enough time to transfer the licenses to destination device.
6. Enter the rehost ticket into the license transfer portal tool on Cisco.com along with destination device UDI.
7. Receive the license key via E-mail
8. Install the license key on the destination device.
You can also email [email protected]
-Terry
Please rate all helpful posts

Migrating from SIEMENS HIPATH 3000 to a CISCO VOIP Solution

We've got a SIEMENS HIPATH 3000 PBX system with 15 to 20 individual telephone lines coming in from the telecom operator into the FSO card of the PBX
We are planning to migrate to CISCO Call Manager and are also implementing an 3845 Router
I would like to know if there is an interface on the router into which these 20 RJ11 phone lines go or is there another option
How do I go about it ?

Thanks pk, I knew of the FXO Cards. However I do not think there is any FXO card that allows for 20 RJ11 individual phone lines
Because all the cards available at the link you sent me are all 2, 4 or max 8 ports
VIC-2FXO 2 FXO
VIC-2FXO-EU 2 FXO
VIC-2FXO-M1 2 FXO
VIC-2FXO-M2 2 FXO
VIC-2FXO-M3 2 FXO
VIC-4FXO-M1 4 FXO
VIC2-2FXO 2 FXO
VIC2-4FXO 4 FXO
MRP3-8FXOM1 8 FXO
Do you have the product number of any FXO card that has 20 FXO ports for 20 RJ11 phone lines ?

Error when migrating AP 2600 from Autonomous to Lightweight

Hello,
I am trying to migrating AP 2600 series that came with autonomous image 15.2 to lightweight using the Cisco Prime Infrastructure built-in migration template.
The AP successfully downloads the image from an external TFTP server but fails at updating the environment variables.
The logs show that the AP should download a text file from Cisco Prime but fails to do so:
START: Detailed logging started at -> 01.22.2014_14.01.52
INFO: TELNET to device 10.32.148.225 done.
INFO: Privilege level is equal to 15.
INFO: Setting vty line completed.
INFO: Dumped Environmental variables.
INFO: AP is supported for Upgrade process
INFO: IOS version is greater than or equal to 12.3(7)JA.
INFO: AP has MIC installed already.
INFO: Station role is root.
INFO: Station role is root.
INFO: DNS and Domain name configured.
INFO: Mac address of device is 88:5a:92:17:2b:09
INFO: Completed Dot11Radio0 shutting.
INFO: Device set up done and time configured on device.
INFO: Run-config dumped.
INFO: AP is DHCP configured.
INFO: Hostname gbknwa2225sr
INFO: Dumped Environmental variables.
INFO: Starts loading recovery image, takes time based on link speed.
INFO: Image Loading done.
INFO: Copying updated Env. variable file to WCS local tftp server 10.70.165.165
INFO: Copying the Env. variable file from tftp server to device.
Copying the Env vars to device failed.
ERROR: Device Response ::
copy tftp://10.70.165.165/Env_vars_10.32.148.225_01.22.2014_14.07.55.txt flash:/env_vars
Destination filename [env_vars]?
%Warning:There is a file already existing with this name
Do you want to over write? [confirm]
Accessing tftp://10.70.165.165/Env_vars_10.32.148.225_01.22.2014_14.07.55.txt...
%Error opening tftp://10.70.165.165/Env_vars_10.32.148.225_01.22.2014_14.07.55.txt (Timed out)
gbknwa2225sr#
gbknwa2225sr#_tune_
gbknwa2225sr#
INFO: Un-shut radio 1 done.
END: Migration Process Failure: Copying Env_Vars to device failed.
What can I do to solve that ?
Many thanks for your help,
David

Hi David,
I think 2600 AP not supported on Prime Infra for autonomous to Ligtweight migration.
PI 1.2, 1.3, 1.4 , 2.0
Only these APs are supported: Autonomous to Lightweight Migration Support
Cisco Aironet 1130 Access Point
Cisco Aironet 1200 Access Point
Cisco Aironet 1240 Access Point
Cisco Aironet 1310 Bridge
Cisco Aironet 1410 Bridge
Check this link:
http://www.cisco.com/en/US/docs/wireless/prime_infrastructure/1.4/configuration/guide/ctrlcfg.html
Hope it helps.
Regards
Dont forget to rate helpful posts

Roaming from Cisco AP1242 to Intemec AP2100

Hello all,
Currently our warehouse and manufacturing environment consists of Intermec 2100 802.11 b AP's our intensions are to slowly migrate to Cisco 1242 AP for future VOIP applications. Our question is will there by any problems with roaming between the two manufactures and if so how can we resolve these issues. We cannot replace all the AP?s at once because of our 24/7 operation.

Thanks for the extra info; it helps!
The short version first; I believe you'll be OK with the one-for-one swapout (of course, try a pilot in the least-used area first).
The details:
Since you are using WEP and different vendors, your best friend here for roaming will be IAPP (Inter-Access Point Protocol). This is a protocol to hand off traffic from one AP to another during the roam. IAPP should be fast enough for pure data traffic. It *may be* fast enough for voice, but I'm betting it'll be spotty, at best.
It would be good to investigate whether your Intermec APs support it, and that it is enabled. I believe it is a standard function for most resonably recent (~coule years) APs. If you still have contact with the Intermec folks, check with them to see that your current images include IAPP support.
The other possible issues I'd keep an eye out for are:
* The antennas you choose for your Cisco APs. Since you have a good site survey, and it seems to be working for you, try to choose antennas for the Cisco that have the same coverage, gain, and pattern as the Intermec APs. If you have an aea that is a little weak, then check out some of the other antennas with higher gain or a better-suited pattern. If there's a doubt, go with the higher gain or broader pattern ... it's easy enough to drop the power at the AP.
* Once you have a/some pilot unit(s) in place, check the switch that connects the Intermec and the Cisco APs; OCCASIONALLY there are some issues with the switch not recognizing the roam fast enough (or the old AP doesn't drop the association fast enough), and the switch will report "flapping" because it will see the same client/MAC at two ports. We mostly have seen this with Cisco 6500s and another (non-Intermec) AP /client.
* If you're using POE to power the APs, verify the POE config. Before it was a standard, Cisco used a proprietary POE scheme (as did everyone else with a POE-capable AP). I believe the newer APs are POE standards compliant (brain fart, I don't remember). So, depending on your current setup, you may need to also use Cisco power injectors, or a Cisco-compliant injector panel.
Now would be a good time to study-up on Cisco Central Key Management (CCKM), TKIP, and Cisco's flavor of WDS.
CCKM may be something that will help with the seamless roaming for the voice clients.
TKIP will permit dynamic rotating keys to bump your security up a notch.
(Cisco)WDS is a method to get the clients rapidly re-authenticate at the new AP as part of the roam process.
I'm sure Rob and the others will jump in with some additional tips and advice. Many of the other folks posting here are managing large campus systems and can speak from direct, recent experience.
Good Luck
Scott

F5 migration to Cisco Ace10

Similar Messages

Maybe you are looking for