Flow interception on Layer-2

Hi,
I have a CSS11150 with an SSL Accelerator SCA11000 connected on one of the CSS Ethernet Port. The CSS itself is connected with its GE interface on a Catalyst. Only one VLAN is defined, so the CSS, the SCA and a router are on the same subnet. The default gateway configured in the SCA is the router, not the CSS. I thought first it was a mistake because the return flow from the SCA would pass through the CSS at Layer-2 without interception by the CSS! So I decided to NAT the client address when sending encrypted packets to the SCA to solve this issue.
But, I realized that it works also without NATing the client ! So I concluded that the CSS is able to intercept a packet arriving on one of its interface and associate this packet with a established flow, even if this packet is not destined to the CSS.
Can you confirm this behaviour ? What is the recommendation ?
Thank you ,
Yves

Hi Yves -
This behavior is correct. The CSS will check the flow-table first and switch the flow at L2 before any L3 processing takes places.
~Zach

Similar Messages

  • Data Acquisition layer

    Hi All
    Dataflow diagram which i got,
    in that flow is (source layer)datasource>(dataacquisition layer)Staging Area>(data warehouse layer)DSO>infocube>multi provider
    in this what is the difference between "Staging Area" and "DSO".
    for Staging Area and DSO they given ODS symbol(blue band symbol).
    can any body explain the difference between them.
    Thanks & Regards,
    Padma

    Hi Srini
    Thanks for your reply.
    It mean that Data Acquisition (Staging Area) is nothing but DSO with out any Transformations and routinesright?
    But in  BW3.5 this Acquisition layer is not there.
    Can you explain what is the importance of Data acquisition layer.
    Is this two DSOs will maintain in BI7.0?
    CAN I TREATE DATA AUQUISITION LAYER(STAGING AREA) OBJECT AS DSO?
    Because in my DFD they given data acquisition layer(staging area) and data ware house layer(DSO) with same symbol(blue band)
    Thanks & Regards
    Padmavati

  • Domain Object and Service oriented pattern

    We have J2EE based application with following components, we are facing some issues with existing system.
    Current System : We have J2EE based application. The following is the flow.
    Client Layer [including JSP, Struts ] action classes  Delegates  Session fa�ade [Session bean]  DAO EJBDAO  EJB. We use CMP, xDoclets , JBOSS.
    1.     Our Domain objects are heavy. I know they are suppose to be coarse objects but they take more time in loading. Also, we noticed one thing that lot of methods are called during Domain Object creation process and it takes lot of time in loading. Actually, we dont really know what is happening as we are using CMPs.
    Question :
    -     Any input on what can be done to avoid Domain object excessive loading time.
    -     Anyone can share there experiences with Domain objects. Are you facing issues related with performance.
    -     We dont use DTO, we pass domain objects between. Do you see any problem in doing that.
    2.     Currently, our system was used by one single front end or lets say we have only one client but soon we will have more clients using it.
    Question :
    -     What should be our design approach. How can we make our system more like service oriented. If the two clients demand different business logic then how it will be handled. Business logic common to all the clients will be handled by which layer and business logic specific to client will be handles by which layer.
    -     Please suggest based on our existing infrastructure. We don�t want to use SOAP or cannot make drastic changes to our flow.
    We have domain and services in the same package and we are doing the refactoring of code, your inputs will be valuable.
    Thanks
    Sandipan

    What type of logger do you use and what is the loger-level during production?
    If it is log4j set the logger to level INFO or WARN.
    This might sound trivia but can make a difference between 20seconds and 500 ms.

  • MII 12.1.8 not connected to ECC 6

    Hi,
    I have already configured successfully another instance of MII/4.6C (only idoc listener) and now I'm trying to link an instance of MII 12.1.8 (NW SP5) with an ECC 6.
    I cannot even read BAPI list from SAP JCO Interface action inside a MII Transaction
    I have configured the JCO Connector from System Connection Editor of MII and the credential alias usign a SAP_ALL user (to avoid rights issues).
    I tried a ping from MII server to SAP AS and it's ok.
    I already tried to reset JCOProxy and restarted my CE, but nothing...always getting this error
    JCO Proxy Error: Connect to SAP gateway failed
    Connect_PM  TYPE=A ASHOST=XXX.XXX.XXX.XXX SYSNR=00 GWHOST=XXX.XXX.XXX.XXX GWSERV=sapgw00 PCS=1
    LOCATION    CPIC (TCP/IP) on local host with Unicode
    ERROR       partner 'XXX.XXX.XXX.XXX:sapgw00' not reached
    TIME        Thu May 05 14:49:58 201
    RELEASE     711
    COMPONENT   NI (network interface)
    VERSION     39
    RC          -10
    MODULE      nixxi.cpp
    LINE        3151
    DETAIL      NiPConnect2: XXX.XXX.XXX.XXX:3300
    SYSTEM CALL connect
    ERRNO       10060
    ERRNO TEXT  WSAETIMEDOUT: Connection timed out
    COUNTER     8
    Did I skipp soemthing I should do NetWaever side? My understanding ti was I could link MII to ECC (to call BAPI) configuring connector inside MII only (even if, probably, calls are flowing through NetWeaver layer). I feel it can be something related to NW side (maybe the message server) but I really don't know what to touch.
    I didn't yet installed licenses (but three months still didn't pass)...can be this the reason of my issue?
    I also tried to configure IDOC listener inside NetWeaver, trying to register it to SAP Gateway, but also this link attempt failed...
    it is something like the two world aren't connected, even if the server is pinging to SAP AS. No firewalls...
    any idea?
    best regards

    ...mmm...not working, saying...
    JCO Proxy Error: Connect to SAP gateway failed
    Connect_PM  TYPE=A ASHOST=<ECC IP> SYSNR=00 GWHOST=<ECC IP> GWSERV=sapgw00 SAPROUTER_STRING=/H/161.27.205.100/S/sapdp99/H/<ECC IP> PCS=1
    LOCATION    CPIC (TCP/IP) on local host with Unicode
    ERROR       partner '<Router IP>:sapdp99' not reached
    TIME        Mon May 09 11:45:31 201
    RELEASE     711
    COMPONENT   NI (network interface)
    VERSION     39
    RC          -10
    MODULE      nixxi.cpp
    LINE        3151
    DETAIL      NiPConnect2: <Router IP>:3299
    SYSTEM CALL connect
    ERRNO       10060
    ERRNO TEXT  WSAETIMEDOUT: Connection timed out
    COUNTER     39
    but the link you posted is interesting...if I well understood, every time there is H the current "system" is sending to the the first H it has the next Hs (removing the first H and checking a sort of internal firewall to grant connection). Mainly, connection path is built system by system, step by step...
    S and W are optional and to be specified if we need a service different from default and a password
    Doing crazy attempt:
    If I'm running my MII transaction test from my laptop, do I have to set up my first "connection step" to the host which is running MII instance? I mean something like:
    /H/<MII Server IP>/S/50000/H/<SAPROUTER IP>/H/<ECC IP>
    This way I noticed that in the Java AS, under ICM/Connections READ REQUESTS messages are created.
    But log is saying request is too big.
    Regards

  • PSE 12 Blending Modes

    Sometimes blending modes don't work when I apply them to a photo.  Why would this happen.  I tried restarting PSE 12 but that didn't help.

    I have a photo of a flower shop on layer 0.  No other layers.  That layer is selected.  I select various blend modes but the photo never changes.  Previously the difference mode gave a very dramatic effect on another copy of the same photo.  Now none of the blend modes work.
    I'm going to try shutting my Mac down completely and restarting.

  • How to make a special JPEG?

    I have 6 JPEG photos that I would like to create on one JPEG photo. Rather than just a collage, I want to be able to manipulate each individual photo in a desired position, such as any angle that I choose. How can this be done?
    Thanks

    I don't know why this is so difficult for me, but I still haven't been able to accomplish the layer concept.
    I made a blank canvas (call it "Canvas").
    I then opened the Layer screen and it showed the Canvas as the "Background".
    Next, I opened a photo (call it "Flower") and made it a small size to easily fit the canvas and made it the same resolution as the Canvas.
    Now, here is where I cannot understand what is happening. If I click on the "Flower" photo to drag it onto the canvas, the Background layer immediately changes from the canvas and shows the Flower photo. But, it still says "Background". No other layer AUTOMATICALLY happens. The only way I can change it to another layer is by right clicking on the Flower and the Layer option comes up giving me the ability to name it another Layer (say, Layer 1). However, doing this still does not show 2 layers in the Layer palette. All of the options such as "Group" and "Ungroup" are all greyed out.
    Another thing I tried to make a layer is double clicking on the lock on the right side of the Background layer. This opened a new layer which WAS separated from backgound layer and had a new layer number. The problem here was that the Flower image was not here. It was blank.
    I don't know if I am clear in my description, but I seemed to sense from the discussions of Old Toad and yours that new layers should be created simply by dragging and dropping images into the canvas labeled "Background". In other words, I cannot create individual layers with one being background (canvas), two being Flower, etc. Any idea what I am doing wrong? Maybe I am making the canvas incorrectly?
    Thanks
    Herschel

  • Help routing with dual connections to 1 ISP, 2 routers, 2 firewalls

    My company is moving to a new office building and has ordered redundant Internet connections through the same ISP.  I have not had the chance to speak to the ISP vendor, but from what I have been told they expect us to participate in BGP since we will require load-balancing and high availability for inbound web traffic.  My limited experience with BGP has been in a lab environment.  The company has already purchased the two routers and two ASAs.  We have a block of public IP addresses. 
    My objectives are to
    1.  Allow internal users to get out to the Internet
    2.  Allow outside users to browse our public web site.
    3.  Configure the routers and ASAs in such a way that if any one device fails or one of the Internet connections goes down, business will continue as usual.
    Below are just some of my questions to help me ensure I am heading down the correct path:
    --Will the IP addresses on the point-to-point links between our routers and the ISP come from our block of IP addresses, or will they be separate /30 links that the ISP provides?  (Again, I have not had a chance to speak to the vendor) 
    --Will the iBGP link "A" require the use of public IP addresses or can private IPs be used?  Besides configuring iBGP on these routers, is a First Hop Redundancy Protocol configured here as well?
    --Should there be routed links between R1 and FW2, and R2 and FW1?  Does that overly complicate the design without any real value added?
    --Would OSPF or EIGRP typically be configured for links B, C & D to enable the redundancy desired between the firewalls and routers?
    --What is the best practice for determining outbound traffic flow from the layer 3 switches (6509s configured as a VSS) to the two ASAs?
    Any assistance is greatly appreciated.
    Mike

    Hi there
    first of all you need in your design to me sure that traffic flow inbound  and outbound to be aligned end to end
    answeres to your questions are per below:
    --Will the IP addresses on the point-to-point links between our routers and the ISP come from our block of IP addresses, or will they be separate /30 links that the ISP provides?  (Again, I have not had a chance to speak to the vendor)
    No dose not need and ask the ISP to provide you with their own IPs for the p2p links ( to avoid wasting your public IPs )
    --Will the iBGP link "A" require the use of public IP addresses or can private IPs be used?  Besides configuring iBGP on these routers, is a First Hop Redundancy Protocol configured here as well?
    No you can use private IPs
    --Should there be routed links between R1 and FW2, and R2 and FW1?  Does that overly complicate the design without any real value added?
    it is better here to use a L2 shared VLAN ( switch ) for those interfaces to get FHRP of the routers and failover of the FWs working as expected
    --Would OSPF or EIGRP typically be configured for links B, C & D to enable the redundancy desired between the firewalls and routers?
    if you are using HSRP/VRRP between the routers and using failover between the FWs then using a shared L2 vlan as suggested above will be required without IGP such as EIGRP also the link between the firewalls used for FW failover is not like the one used between the routers "dose not need routing"
    --What is the best practice for determining outbound traffic flow from the layer 3 switches (6509s configured as a VSS) to the two ASAs?
    if you put the ASA FWs in failover mode then the IP address of th eprimary/active ASA FW will be used for your static routes in the L3 switches to point to and this IP will be used by the secondary FW in the case of failover situation "transparent and automatic "
    hope this help
    if helpful rate

  • Interactive Image - Text Gets Cut Off

    Please see image - When second line (unbolded text) is not as lengthy as first line (bolded text) it cuts off. Is this a glitch or can I fix this somehow?

    The first thought is did you save evenything.  I have tried to reproduce your actions - but with a nor text box.. I have no shift in colour.
    Are you  using a standard text box?
    The next thing I see is you  appear to have chosen Apples free template "Editorial" and use it in its standard form.
    Although text box's are not controlled by teh default  template settings,, its advisable to first decide your colour scheme and basic layout in the template - Apple Changes to everything you changed - even of it does request you to.
    The thumb shows the text  box seems to  overlay a photo galleryor some other widget.
    Are you aware that even the basic template sits in layers stacked front to back if any object  on your screen is not  full size, then its possible another layer is cut off ie the content is forced  to flow under a layer which sits on a higher lever.
    In iBA select a layer that is "cut off" and select ARRANGE in the top menu bar and click on Move to front. Check if your  lost content appears. It may be one or more layers are active at levels which block your content.
    Using a basic free template and  then changing content in any way  just on  your work page - can often result  in the default setting overriding your choice in preview.

  • Overhead of OSB in case of Service Virtualization

    Hi All,
    I am trying to do some performance testing and trying to add logging interceptors in OSB. I can calculate the time taken by the message flow in OSB, but how do i calculate time taken by the Transport Layer and binding layer. Any Idea on this?. Will the service level time be equal to the formula as mentioned below.
    Service Level Avg Response Time=(Inbound Transport Layer Inbound Binding Layer Message Flow+ Outbound Transport Layer+ Outbound Transport Layer)
    Regards,
    KC

    Hi All,
    I am trying to do some performance testing and trying to add logging interceptors in OSB. I can calculate the time taken by the message flow in OSB, but how do i calculate time taken by the Transport Layer and binding layer. Any Idea on this?. Will the service level time be equal to the formula as mentioned below.
    Service Level Avg Response Time=(Inbound Transport Layer Inbound Binding Layer Message Flow+ Outbound Transport Layer+ Outbound Transport Layer)
    Regards,
    KC

  • How to make animated blood in Photoshop CS6?

    I am wondering how I can make animated blood using Photoshop CS6. I have looked for tutorials and can't find anything. I want to make a render look like it's crying blood, so the blood would be running down the cheeks and dripping off the chin. Please help!

    There isn't going to be really an automated way of doing this. Animation in Photoshop is very simple. You can basically animate just position and scale (also Layer Effects, but that generally isn't as helpful). You could, of course, hand animate this by drawing each individual frame like traditional animation. Each frame of animation would be a separate layer and you could animate the layer visibility. Or you could draw the last frame of blood flow on one layer and animate a mask that slowly reveals the blood trail.

  • Disappearing and Reappearing text Indesign

    Having problems with text disappearing and the reappearing.  This is not a text over flow or a layer problem.  It looks more the a preview/refresh bug.
    If I move the text box slightly even nudge it, the text will reappear.  It will happen will different text boxes on the page and has been happening continuously with
    several of my documents.  This is very annoying, can anyone help.
    I am using Indesign 9.2 on Mac 10.9.1. 
    This problem is isolated to Indesign.
    Thanks.
    C

    The first thing to try is to restore your InDesign preferences. Here's how:
    Trash, Replace, Reset, or Restore the application Preferences
    If you use the method to remove InDesign Defaults and InDesign Saved Data files in Mavericks (10.9), you need to make the [Home] > Library file visible. To do so, in the Finder, hold down the Option key, then select Go > Library.

  • I have a photo of an ice surface and another of a flower. Now I want to create a merged photo with the flower lying under the ice. I understand that I shall use the function "Layer" and have even read in the manual and looked on a video, but that informat

    I have a photo of an ice surface and another of a flower. Now I want to create a merged photo with the flower lying under the ice. I understand that I shall use the function "Layer" and have even read in the manual and looked on a video, but that information is not sufficiently detailed for me. I have tried several options, but I come now way. Generally it seems that your information is only for the ones who can, not for the people who can´t although it is we who really need to learn. Please give me a step by step (click by click) information on how I can get the ice above the flower and then make the ice partly transparent so the flower is seen underneath. Please send me an e-mail Erik Solbu [email protected]

    Open a new document big enough for your image. Then additional open your ice and flower image as well. Copy each and paste it into your blank document. They will be placed on their own separate layers.
    Make sure in your layers panel. (Bottom right) the ice is above the flower, by dragging it in place. In that same layers panel click the ice layer to select in and find the opacity meter above. Drag to the left until you get the effect you desire.

  • How to adjust layer over-flow scroll bar?

    I'm using a layer with the overflow set to 'auto'. Is it also
    possible to set the vertical scroll bar (for the layer) to appear
    on the left rather than the right?

    Alan:
    You have this -
    </style>
    <!--
    function MM_reloadPage(init) { //reloads the window if Nav4
    resized
    if (init==true) with (navigator) {if
    ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
    document.MM_pgW=innerWidth; document.MM_pgH=innerHeight;
    onresize=MM_reloadPage; }}
    else if (innerWidth!=document.MM_pgW ||
    innerHeight!=document.MM_pgH)
    location.reload();
    MM_reloadPage(true);
    //-->
    </script>
    Note - no opening <script> tag. Also, why are you still
    using this NN4 fix?
    Murray --- ICQ 71997575
    Adobe Community Expert
    (If you *MUST* email me, don't LAUGH when you do so!)
    ==================
    http://www.dreamweavermx-templates.com
    - Template Triage!
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    http://www.macromedia.com/support/search/
    - Macromedia (MM) Technotes
    ==================
    "Alan Smithee Jr." <[email protected]> wrote in message
    news:ei6cdf$n8v$[email protected]..
    >
    http://www.buddhapada.com/tests/scroll-bar-left.htm
    >

  • Dual Layer work flow. (nearing deadline of doom!!!)

    Hello.
    I am at the end of my teather. I have tried to find answers to my questions and trauled the internet for help but i cannot find anything anywhere.
    I have 21 assets. A main movie and 20 extras. Everything is compressed as i want and all audio is compressed using a pack.
    I am making a dvd-9 disc.
    My questions are this:
    1. Do i use 1 track?
    2. Can i use a new track for each extra? (eg 21 tracks)
    3. Where do i set the break point?
    4. Can i just let DVDSP do it automatically?
    (The main movie is 47 mins.)
    Thanks in advance, as with most people on this forum i am self taught, and really appreciate the time people take to help people like me out!
    Cheers.
    Timothy.

    There are no hard and fast rules about using one track or multiple tracks. The general way is to combine logically linked sections into a single track, but ultimately it is entirely your choice as to what best fits your project.
    Personally, I'd use one track where possible, and as Eric said, use stories to divide it up for each clip. Stories behave much like tracks but are better thought of as play lists for your chapters.
    You can let DVDSP set the break automatically if you wish - one thing I'd consider is will the entire set of clips ever get played through one after the other (a 'play all' situation)? If the answer is 'no' then you can set this up as a PTP project (instead of OTP) and in which case the break point will be better off being auto set (it will most likely end up in amongst the menus when the disc is built and formatted).
    If you are going to use a play all then you might want to set the break manually - choose a marker between the clips in the track and make it a break point marker as well as a chapter marker. The one you choose must be placed so as the first layer on your DVD is larger than the second layer of the disc, and your disc needs to be set to OTP.
    You can roughly estimate the layer size by looking in your disc outline view - the disc is built in order from the top - menus and scripts first, tracks second. Do some rough calculations to find a location about 4.5GB down the list... if it is not right, DVDSP will tell you when you go to build the project.

  • Is defaulttrace.X.log the only way see what's going on at interaction layer

    Greetings!
    I'm reading the "Development and extension Guide - SAP E-Commerce 5.0" where I found the excerpt:
    The data entered in the added text field has to be retrieved by an Action when the Update button is pressed. In
    this step you will find out what happens in the interaction layer when the Update button is pressed.
    (page 34)
    This excerpt belongs to chapter "Changing the Process Flow", where it is said that one must investigate the flow of events to be able to intercept the process flow.
    Is it the only way to look at such flow of events?
    Thanks in advance,
    Ogata.

    Is this a space issue or is it you retention error. Can you check if there is any advice in the alert log to increase the retention policy.
    otherwise the best idea is to increase/add additional storage to the disk group. You may also want to implement RMAN back, with archive purge enabled
    May I ask what kind of disks /storage are you using? Also have you implemented External redundancy or Normal redundancy. The storage requirements are different in both these situations. And the statistics reported should be read differently depending on the implementation.
    Yes you can look at space either from EM, from Sql Plus or from the asmcmd.
    For example.
    SELECT NAME,STATE,TOTAL_MB,FREE_MB FROM V$ASM_DISKGROUP will give you a highlevel space status.

Maybe you are looking for

  • Getting 10.4 onto a G3 iMac w/o DVD drive

    So I'm having some Tiger taming trouble. I've been quite happy with my G4 iBook since I bought it; Tiger came with it, and I haven't made the Leopard leap, so it's running 10.4.11 with all current updates. I still have my old G3 iMac (Summer 2001 "Ki

  • One player for multiple songs on webpage. How do I do it?

    I have multiple songs listed on a webpage and I'm looking for a way to listen to them without opening a new page eveytime you click on a song. It doesn't have to be a fancy player interface. Something that allows the viewer to continue reading the co

  • Drop zone video playing too fast

    I am building a Motion title sequence with a drop zone for video. I placed it into FCPx as a connected clip (purple timeline box), and associated the video under it to the drop zone. It all works except the video dropped in plays super fast, far out

  • Lightroom 3 Undo Levels and Undo "Locality"

    How many "undo" levels are tracked in a Lightroom 3 session? I know that all edits can be "undone" in the develop module using the history.  But when I hit "Ctrl-z" a bunch of times, it does undo a bunch of actions, but it does seem to stop before un

  • Foxtab still shows a blank window

    I downgraded flash to 10.3, also tried the add-exception in flash for user/name/appdata/roaming/mozilla/profiles. Still I am unable to see my open tabs in foxtab. Nothing seem to work. One update and everything got messed up. Two computers now have t