HTTPS Keepalive with the CSM & SSL Module
Has anyone had any success getting a secured web page for a keepalive using the CSM with and SSL module. If so can post an example?
Thank you,
Dave
Hi David,
Here find some full config example for your perusal for CSM and SSL Services Module Initial Configuration Example
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080216c16.shtml
2nd config example to Configuring CSM to Load Balance SSL to a Farm of SCAs for One-Armed Proxy Mode
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00801aca55.shtml
Sachin garg
Similar Messages
-
Load Balancing with a CSM & SSL Module
I'm trying to understand the best way to balance traffic to two servers when decrypting and re-encrypting with the CSM and an SSL module. I take the SSL traffic hitting the first CSM VIP and forward to the SSL module for decryption. Send the decrypted traffic back to another VIP on the CSM. Send the traffic to the client proxy VIP on the SSL which encrypts the traffic and forwards to the CSM VIP. That final VIP passes the traffic to the serverfarm containing the actual servers. How do I make sure the traffic is balanced between the final VIP and my servers. It seems that sticking on SSL session ID is the only way to go at that point which made decryption pointless. I feel like I'm missing something basic here.
Thanks..Hi David,
Here find some full config example for your perusal for CSM and SSL Services Module Initial Configuration Example
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a0080216c16.shtml
2nd config example to Configuring CSM to Load Balance SSL to a Farm of SCAs for One-Armed Proxy Mode
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00801aca55.shtml
Sachin garg -
After Mavericks OS upgrade, can no longer make any HTTP requests with the OPTIONS verb
My machine can no longer make any HTTP requests with the OPTIONS verb. This happens whether I try it curl, postman, or ajax.
curl -i -X OPTIONS http://www.google.com returns curl: (52) Empty reply from server
It should return a long string containing a 405 error code.
I suspect that this is related to the Mavericks upgrade I did earlier this week. I only have one mac (my dev machine) with Mavericks. Other macs are Mountain Lion and they don't have this problem.
Can anyone else with Mavericks confirm whether or not they have this problem too?
If this is Mavericks related, anyone know of a fix or workaround?Turns out that it wasn't Mavericks related at all. Cisco AnyConnect has a security module running behind the scenes even when you're not VPNed into anything. It was blocking my OPTIONS verb requests. I was able to make these calls after uninstalling.
Re-installing with Web Security turned off should prevent it from happening. While I was uninstalling I did notice that there was a web security uninstall script in /opt/cisco/vpn/bin but I already committed to taking the whole app off my machine. Simply running that script could have done it too.
I must give credit to Ben Nadel. It was his blog post that helped me fix this issue.
http://www.bennadel.com/blog/2559-Cisco-AnyConnect-VPN-Client-May-Block-CORS-AJA X-OPTIONS-Requests.htm?&_=0.10495476494543254#comments_44093 -
Can i use Handle C with the LABVIEW FPGA module?
Hi,
Can i use Handle C with the LABVIEW FPGA module? I am working with CompactRIO right now so, i want to know weather i can use Handle C with CompactRIO.Can i access FPGA in compactRIO independant of LABVIEW means can i program it without using LABVIEW?
regards,
Vishnu.Hi Vishnu,
Although we don't support Handel-C directly, it is possible to design your algorithms using 3rd party tools or system integrators and consume them from a top-level LabVIEW VI. The webcast at http://zone.ni.com/wv/app/doc/p/id/wv-268 shows an example of how you can use IP from C-based tools provided by Celoxica in the LabVIEW FPGA environment. -
I am adding more memory, should I replace the top two slots with the 4g memory modules, then place 2g memory modules on bottom slots. Does it even matter?
I am adding more memory, should I replace the top two slots with the 4g memory modules, then place 2g memory modules on bottom slots. Does it even matter?
-
Hi,
I am trying to get Adam 5000 TCP/IP with the 5018, 5056SO modules to talk throu TCP protocol. Please, is any body that has functional example or advice?
Thank you
IrikHi Irik,
I do not have any experience with these devices. Would it be possible to post their datasheets this will give me a better idea of their functionality. Thanks!
Steven C -
HTTPS ans SSL with CSS (No SSL Module)
Hi,
My customers have two server and need to load balance.
These servers initiate SSL.
and VIP address is :
https://erpappl.erp.mis.blabla.tgc:8005
My CSS has no ssl module. An dconfiguration is:
service venice
ip address 10.200.104.32
protocol tcp
port 8005
keepalive type tcp
keepalive port 8005
redundant-index 120
active
service calgary
ip address 10.200.104.33
protocol tcp
port 8005
keepalive type tcp
keepalive port 8005
redundant-index 121
active
owner ERPAPPL
content erpapp_test
add service venice
add service calgary
redundant-index 60
vip address 10.200.104.28
protocol tcp
port 8005
url "/*"
arrowpoint-cookie expiration 00:00:03:00
advanced-balance arrowpoint-cookie
application ssl
active
After this configuration I cannot reach the URL shown above.
Can you help me?if this is encrypted traffic [HTTPS] the CSS can't see the content of the packet.
So the CSS can't see the url [-> so the command url "/*" is incorrtect and should be removed] and the CSS can't see cookies [so the arrowpoint-cookie command is wrong and should be removed].
If we sell an SSL module, there is a reason :-)
The only sticky option you can use are :
- sticky based on srcip
- sticky on sslid
The first option [srcip] has a problem with mega proxy [many users being nated with the same ip] and the 2nd option has the problem that it only works with SSLV2 and that some browsers do not use the sslid.
Gilles. -
How to use debug on CSM SSL module?
I'm installing a new CSM with SSL module (WS-X6066-SLB-S-K9) and can't get the debugs to work. Acutally, I enabled debugging (to troubleshoot SSL Handshake problems) but nothing shows up on the screen or in the log. Any ideas?
mcbconmrk105d1z2-ssl#show debugging
STE Mgr:
STE SSL Pkt debugging is on
STE SSL Handshake events debugging is on
STE SSL Alert events debugging is on
STE SSL detailed debugging is on
STE SSL error events debugging is on
SSL Subsystem:
SSL Handshake Message debugging is on
SSL Traffic debugging is on
SSL Error debugging is on
SSL Event debugging is on
mcbconmrk105d1z2-ssl#show log
Syslog logging: enabled (0 messages dropped, 31 messages rate-limited, 0 flushes, 0 overruns, xml disabled)
Console logging: level debugging, 254 messages logged, xml disabled
Monitor logging: level debugging, 241 messages logged, xml disabled
Logging to: vty4(0)
Buffer logging: level debugging, 284 messages logged, xml disabled
Logging Exception size (8192 bytes)
Count and timestamp logging messages: disabled
Trap logging: level informational, 324 message lines logged
mcbconmrk105d1z2-ssl#
Thanks in advance,
Danielthe debug messages are displayed on a different console. The console is different depending on the type of debug.
telnet 2001 ? FDU cpu
telnet 2002 ? TCP cpu
telnet 2003 ? SSL cpu
Gilles. -
How to Filter Initial Client HTTP Headers on a CSS11506 SSL module
Is there any way to filter the initial client headers on a css11506 ssl module ?? (software version 8.1)
This is one of the default options on the "old" SCA11000 appliances.Douglas, with an SSL module, the CSS can decrypt HTTPS traffic and see the cleartext HTTP traffic.
We can then apply any rules to the header.
I think in this case, the question refered to some data injected in the http header by the CSS and filter what data from the client certificate should be dropped or inserted.
We currently do not have this option on the CSS.
Gilles. -
How do you configure multiple PXIe chassis to share Tclk synch with the 6672 timing module?
Hi,
I have two PXIe chassis, each with a number of digitizers (configured through NI-SCOPE). Each chassis has a PXIe 6672 timing module. I have downloaded the sample VI from:
http://zone.ni.com/devzone/cda/epd/p/id/5254
which deals with PXI chassis. My question is this: in the VIs at the above link (and in fact all VIs I've seen for using the 6672 for sharing triggers), the VI needs access to the resource identifiers for both Master and Slave timing modules, how do I access the (remote) slave resource identifier from the master chassis? I feel like I'm missing something obvious, but can I do this using just an ethernet connection, or do I need another module to enable the master chassis to view the devices on the slave chassis in MAX?
Thanks for any help you can provide,
CillianThose example VIs are written to be used when a single host PC is controlling multiple chassis so there is just one computer running the program. Since both of your chassis have their own controllers it will be necessary to run a program on each (one as master, the other as slave). You can modify the code from that example to create and Master and Slave VIs. For the Master you will call the VIs as specified in case 0 of the example; for the Slave you will call the VIs as specified in the default, 1 case of the example.
You will also want to send a signal from the Master to the Slave to let the Slave know that the clock is being generated. You could use TCP/IP or a PFI line to do this. The basic order of events should be as follows:
1. VI runs on Slave to configure it to accept a clock.
2. VI runs on Master to begin outputing the clock.
3. Master sends a signal to Slave to let it know that the clock is being generated.
4. Continue with the rest of your program.
Let me know if you have any questions about this.
Barron
Applications Engineering
National Instruments -
I would like to write data from a large number of channel (up to 128) in a same file. Using the write data module, I have up to 16 channels only ! The only solution I found is to save data in 8 different files... Is there any solution to solve this problem ? I use DASYLAB V.12.00.00. Thank you
Solved!
Go to Solution.Please see this knowledge base article describing how to do it.
http://kb.mccdaq.com/KnowledgebaseArticle50372.aspx?Keywords=multiplex
- cj
Measurement Computing (MCC) has free technical support. Visit www.mccdaq.com and click on the "Support" tab for all support options, including DASYLab. -
Issue with the RFC function module - parameters
Hi,
When i am creating RFC enabled function module, it was throwing an error like <b>'Reference parameters are not allowed with RFC'.</b>. I am implementing the test scenario to create BAPI, for that i have created table with 2 fields. My main intension is through RFC enabled function module planning to update the ztable.
When i was creating RFC enabled function module, it was giving error. I remembered that i need to use new structure when i create RFC enabled function module, so even i created structure also with the same fields of table fields.
can you please let me know the solution for this.
Thanks
jayaHi Ferry,
Your solution is perfect. can you please explain the below information...
Call by value
You pass the parameter with values. This means that the parameter
contents are copied both when the parameter is passed and when it is
transferred back to the calling parameter. For structures that contain
tables, performance may be reduced considerably. Therefore, you should
not do this.
I created the parameters with reference to table-fields, what do you mean by 'Call by value'check box usage there.
Is it mean ...if i change the contents of the field in FM will it pass back to the structure which i refered to this parameter, in this case its table-field.
Thanks
jaya -
Plz help me with the compaitble ram module
hey
i have a problem getting the RIGHT ram module. i got a MacBook Pro 15.4-inch 2.16GHz Core 2
Duo (MA609LL/A)
i wanna 2g ram. the one i bought (2GB SODIMM LOW DDR2 PC5300 667MHZ)worked for 40 days and then died. so i dunno what it is id need to buy.
here's what the vendor had to say in reponse,
+At first glance , I thought that memory was just bad and regular exchange+
+would work . But after reading one post online, I contacted manufacturer+
support.
+This is unique scenario for you. You do need LOW density memory module for+
+Apple MacBook Pro 2.16GHz Intel Core 2 Duo (15.4-inch) Laptop, but your System+
+manufacturer is picky. What they need is not same spec as we have advertised.+
+Their requirement is slightly different and there is cost difference.+
+These are two Options for you+
+Option 1 : Refund
+Option 2 : Upgrade+
+Option 2A : Memory upgrade from OEM manufacture. We have purchased from them+
+and they are reliable. Price difference is low and it is what you need without+
+spending bunch with major manufacturer. Cost difference is $ 17.50+
+Option 2B : Memory upgrade from Major manufacturer as specifically recommended+
+by Manufacturer.. Price difference is high but then you know it is what you+
+have been asked by manufacturer to have . Cost difference is $ 18.50+
+Thank you+Crucial is 1000x better and more reliable than some random seller on Ebay. I wouldn't buy RAM from Ebay, especially when you can get the same thing for $1.00 more from a much more reputable seller.
If you have 1GB of RAM now, an upgrade to 2GB will make a big difference. I've enclosed links below to single 2GB chips that will be compatible with your MBP from both Crucial and OWC.
CRUCIAL
OWC
You can decide which you like better, they are both $48.99 I believe.
same thing to me, except for the brand name, i guess.
The brand name is relatively important with RAM. Macs are selective about good quality RAM; dodgy RAM from just any random seller on Ebay may not work, as you found out. With either of these resellers, you also get a lifetime warranty. Anyone on these forums will tell you that they will stand firmly behind their product if it ever fails. Ever. You can't get any better than that.
doesn't apple make one one of these? an apple brand?
No. Apple uses third-party RAM in all of its machines. Apple does not make its own brand of RAM.
--Travis -
Just as the title states.
I did a search here on compatibility, but I am coming up short with not much to show for it.
I have Labview 2010 student edition, 32bit and 64 bit. I am trying to do a Senior Design project for my undergrad, and I am having some issues.
I was able to download the Support for the Xilinx Spartan 3E and Labview FPGA.
I install it, it runs through the unzipping process, installs, and then mysteriously I cannot find it. I have looked through my programs list and it is not listed. I open both editions of LabView and I find ABSOLUTELY NOTHING indicating that either one has ANYTHING to do with FPGA.
Did I install it wrong? Or is it just not supported in the studend version of Labview???
Can someone help me, please?M Boat wrote:
What about the trial version? Any chance of it being on there?
I think everything is available for download, and without activation it will be in trial mode and you have about a month (?) before the trial expires.
A trial version of the FPGA module is available for download here. I have no idea if it would work with the student version.
I would recommend to talk to your local NI sales representative for advice. Good luck.
LabVIEW Champion . Do more with less code and in less time . -
Trouble with the Blurb Book Module in Lightroom
I have successfully created & finished one book in the Lightroom Book Module using Blurb without any issues. I started a second one but now I'm having problems. I have a saved book started that I'm about 10 pages in on. But now I can't figure out what's going wrong.
I have organized all the photos I want to use in the book into subdivided Collections. But now all the sudden - every time I click on one of the collections it goes off my Saved Book and just resets to a blank Unsaved Book. How can I add photos from my Collections to my Saved Book?
Thanks!OK yes thank you. But that puts my 1200 photos that I've painstakingly organized into 25 different folders into one big jumble of a "folder."
Is there any way to keep my photos organized and still put them in this one book? I started the book out this way but something changed and it's no longer working to work that way.
Maybe you are looking for
-
Since updating to iOS5, iPad1 is no longer recognized by iTunes!
Hey there! I know there have been many variations on this question in the forums, but I have not come across anything that could help so far. I updated the iPad1 to iOS5 this Saturday. Afterwards, none of the music had transferred over, but as far as
-
So the Cinema HD's DVI goes in fine, I don't remember what video card is in the computer, all I know is it's Nvideo, it's old, only like 256MB, but does have two DVI ports. Anyway, then the display's firewire and USB can go in. But there's this weird
-
Import command on PSE-13 on Mac greyed out - why?
I recently installed an upgrade from PSE-11 to PSE-13 on my Mac running OS10.9.5 and the Import command under the File pull down menu is greyed out preventing me from inputting images from my scanner.
-
Having Refresh problems with one machine
Does anyone know what this would be. When I observe computers, one machine on the local network does not refresh, like all the others. You can really see the differenc in refresh between the other machines and this one. This one seems to stand still.
-
HT1229 Can I reinstall iPhoto without losing my photos?
With Yosemite ,when I opened iPhoto it says it has to be upgraded,then when I do that it says it has to Rebuild the Thumbnail caches I let it go all day but nothing happens . I've tried hitting the command + option key when starting iPhoto same probl