IPS High Availability Solution

Hi all,
requirement to have redundancy for IPS appliance placed on data center design, I have digged on Cisco docs but found the Resiliency and HA (High Availability) from the IPS point of view could occur in the switches side (HSRP/Eth channel load-balance).
is there any visible way to implement the High Availability in dynamic way !!
Regards,
Belal

Belal
You are correct, only one sensor at a time will pass traffic.
Spanning Tree Protocol uses layer 2 frames called BPDUs to determine if a path to the root bridge (in this case VLAN) exists. If the primary sensor stops passing layer 2 frames (a good indication that the rest of your traffic is not going to get through the sensor) then BPDUs will not pass thru the primary sensor and Spanning Tree will unblock the secondary path through the standby sensor. You may want to watch for an SNMP trap from the switch to know when that happens.
The failover cable is just an ordinary roll over cable between two ports (in the two VLANS) on the switch. I called it a failover cable because it only carries traffic when the sensor has failed to pass layer two (and above) frames.

Similar Messages

  • I'm looking for Failover/High available solutions for IPS 4200 Series

    Hi all,
    I tried to find out Failover/High available solutions for IPS 4200 series,I didn't saw failover solutions in IPS guide document. Anybody can be help me!

    I do not know if this is documented anywhere, but I can tell you what I do. As long as the IPS 4200 has power, with the right software settings, the unit can fail such that it will pass traffic. Should the unit loose power, it does stop all traffic. I run a patch cable in parallel with the in line IPS unit, in the same VLAN, with a higher STP cost. Thus all traffic will traverse the IPS unit when possible, but should something happen to it, a $10 patch cable takes over.
    Mike

  • SQL Server Analysis Services (SSAS) 2012 High Availability Solution in Azure VM

    I have been testing an AlwaysOn high availability failover solution in SQL Server Enterprise on an Azure VM, and this works pretty well as a failover for SQL Server Databases, but I also need a high availability solution for SQL Server
    Analysis Server, and so far I haven't found a way to do this.  I can load balance it between two machines, but this isn't working as a failover and because of the restriction of not being able to use shared storage in a Failover Cluster in Azure
    VM's, I can't set it up as a cluster which is required for AlwaysOn in Analysis Services. 
    Anyone else found a solution to use an AlwaysOn High Availability for SQL Analysis Services in Azure VM?  As my databases are read-only, I would be satisfied with even just a solution that would sync the OLAP databases and switch
    the data connection to the same server as the SQL databases.
    Thanks!
    Bill

    Bill,
    So, what you need is a model like SQL Server failover cluster instances. (before sql server 2012)
    In SQL Server 2012, AlwaysOn replaces SQL Server failover cluster, and it has been seperated to
    AlwaysOn Failover Cluster Instances (SQL Server) and
    AlwaysOn Availability Groups (SQL Server).
    Since your requirement is not in database level, I think the best option is to use AlwaysOn Failover Cluster Instances (SQL Server).
    As part of the SQL Server AlwaysOn offering, AlwaysOn Failover Cluster Instances leverages Windows Server Failover Clustering (WSFC) functionality to provide local high availability through redundancy at the server-instance level—a
    failover cluster instance (FCI). An FCI is a single instance of SQL Server that is installed across Windows Server Failover Clustering (WSFC) nodes and, possibly, across multiple subnets. On the network, an FCI appears to be an instance of SQL
    Server running on a single computer, but the FCI provides failover from one WSFC node to another if the current node becomes unavailable.
    It is similar to SQL Server failover cluster in SQL 2008 R2 and before.
    Please refer to these references:
    Failover Clustering in Analysis Services
    Installing a SQL Server 2008 R2 Failover Cluster
    Iric Wen
    TechNet Community Support

  • High Availability Solution (TAF)

    Hi
    There is a requirement to setup an environment that provides high availability. 2 nodes are provided for the same purpose. System downtime is not acceptable. Following are the details.
    OS :Windows Server 2003 Enterprise Edition
    DB : Oracle 10g Rel. 2
    Storage : NAS
    App : Oracle Forms 6i (Client Server) & ASPs
    Solutions were to implement RAC or Oracle FailSafe but I don't think they are supported on NAS. Also with Oracle FailSafe there will be downtime for the time failover happens. SAN cannot be arranged and the requirement is immediate.
    Any help will be appreciated.
    Best Regards
    Abbas

    Thanks forbrich
    Do you know any specific doc that describes the installation and configuration steps of 10g RAC on NAS? If possible, can you provide some link that I could use to perform this task?
    I have done RAC installations on SAN without any problems and its something I'm fairly experienced with. With NAS I am not really comfortable since I can't seem to find any documentation that describes step by step installation procedure or guidelines for that matter.
    Thank you for your input
    Best Regards
    Abbas

  • How can I achieve high available solution for directory server

     

    You can start with deploying multi master replication which will give you 2 servers available for writes (and as many read-only consumers as you want).
    You can also install Directory Server in a Cluster (using Sun Cluster) which will provide more failover capabilities.
    If you combine both, you should be able to have almost no downtime.
    You can also use the Directory Proxy Server (aka iDAR) to provide transparent failover for client applications.
    I hope this help.
    Regards,
    Ludovic.

  • For a true load balancing and high-availability OHS, OPMN, and mod_oc4j

    i have read this link of Enabling Clustering on oc4j9.0.4 standalone app server
    http://www.oracle.com/technology/docs/tech/java/oc4j/htdocs/getstart.htm#1015479
    To test the clustering, start up the load balancer by executing "java -jar loadbalancer.jar".
    C:\OC4J_EXTENDED\j2ee\home>java -jar loadbalancer.jar
    In a future release of Oracle Application Server, loadbalancer.jar will be
    desupported. Because of this, we strongly suggest that you discontinue your use
    of loadbalancer.jar in this release. Under high loads, loadbalancer.jar may not
    function properly. For a true load balancing and high-availability solution,
    please move to use OHS, OPMN, and mod_OC4J. For more information, please see
    http://otn.oracle.com/products/ias/ohs/content.html
    Balancer initialized...
    what load balancer should i use for web clustering
    <frontend host="balancer-host" port="balancer-port" />
    balancer-host=localhost
    balancer-port=80
    for all nodes i mentioned same host and port in http-web-site.xml.Is it correct?
    i completed all the steps and run http://localhost:6666/session/SessionServlet
    i hit 3 times
    in the different browser http://localhost:7777/session/SessionServlet
    instead of coming 4 it starting from 1 only.

    can i use this loadbalancer.jar or not?
    how to mod_oc4j in standalone app server

  • High Availability Options Without Enterprise Edition

    I think I've found the answer to this already but I just wanted to confirm that I'm getting this right. In SQL Server 2012, is there no way to implement a high-availability solution which doesn't require shared storage or use of a deprecated feature without
    having Enterprise Edition?
    At the moment we have databases hosted on a primary server running Windows Server 2012 Standard and SQL Server 2012 Standard.  We have a second, identical server, and the databases are mirrored between the two servers using Database Mirroring. 
    This works perfectly and meets all of our requirements.  The only possible problem is that we're looking at storing documents using FILESTREAM, which isn't available in Mirrored databases.
    From what I've read, Database Mirroring is deprecated in SQL Server 2012.  High Availability Groups, which sound great, are only available in the Enterprise Edition.  This feels like a real kick in the teeth from Microsoft.  We're stuck
    with either using a deprecated feature (Mirroring), which is only postponing the problem until the end of 2012's life cycle, or laying out significant amounts of money (in the tens of thousands of pounds GBP) to upgrade to Enterprise Edition, which we just
    don't have the budget for.
    Why couldn't Microsoft continue to offer a high availability option for businesses without deep pockets?  Do I have any options I'm not thinking of?  Shared storage is not an option (too costly, single point of failure, geographically separated
    datacentres).

    Thanks for all the feedback.
    I was forgetting that even data stored as FILESTREAM would need to be backed up using SQL backups, so I guess that's an issue either way, thank for reminding me, Sebastian.
    Geoff, I agree that replication isn't a viable HA solution.  FCI has lots going for it, but from what I can make out (and I am just reading up on this now so I could be wrong) requires either shared storage or a third-party tool to move the data from
    the Primary server's local storage to the local storage of the Secondaries.  It all seems overly complicated when Mirroring does exactly what I need it to do, merrily writing transactions to the mirrors at the same time as the primary databases. 
    Additionally, whilst you might be right about making the case for Enterprise Edition, it's difficult to make a clear case to non-technical people when we already have a working HA solution and document management.  Trying to explain the nuanced advantages
    of SQL Server full-text indexing (at present we use a third-party indexing product which stores the index discretely) and simplified querying when the documents are in the same database as their associated data as justification for spending tens of thousands
    of pounds is a challenge!
    David, that's useful to know, about the disadvantages of using FILESTREAM and how just storing the documents in a VARBINARY(MAX) column might actually give better performance, thank you.

  • High availability for AS forms & Reports

    Hi,
    i like to know the best solution for high availability of Oracle Application Server(10g) Forms & Reports Services ...as load balancing is not done for forms & reports with the oracle high availability solution( i guess i am rite).any suggestions
    thanks
    mish

    Well, install Oracle AS Forms and Reports on two different nodes and configure your Forms and Reports services on both of them. Use a virtual host configuration to load balance (by hardware load balancer) to both hosts which are the resources. Use the webcache (standalone or the one that came with the install) to map the virtual host to the resources on the two hosts. Use REPORTS_SERVERMAP to map the name of the 'cluster' reports server to the local reports server, ie REPORTS_SERVERMAP=app:app1 on node 1 and REPORTS_SERVERMAP=app:app2 on node 2. Use REPORTS_SERVERMAP=app:app1;appl:appl1 to add more applications/reportservers. Set REPORTS_SERVERMAP in O_H/forms/servers/default.env and the application env files and under O_H/reports/conf/rwservlet.properties.

  • Access Services 2013 high available on SQL 2012?

    Hi,
    Does anyone know how we get the randomly created databases from access services 2013 services high available on our SQL 2012 cluster?
    For the SharePoint content databases, we use the ‘always on’ functionality of SQL 2012. This functionality is not supported for Access services 2013.
    Thanks in advance,
    Johan

    Hi Edwin,
    Thanks again for your answer.
    Failover clustering is a perfect solution for high availability.
    A last additional question:
    Now we using ‘Always On groups’. The 2 instances are located one a different physical location.With that configuration, we have a High available solution and disaster recovery solution.
    If we going for a Failover Cluster we have a High Available solution, but we don’t have a disaster recovery solution anymore because everything is located on the same physical location.
    We can configure SQL mirroring, but then we have the same behavior like the ‘always On Groups’.-> Not possible to delete db’s from SharePoint and not automatically mirrored when created a new access services 2013 db.
    Is there any solution/configuration to accomplish this?
    Thanks,
    Johan

  • R12 High Availability

    Hi
    We have R12 Instance and we are using As Contol also to deploy custom applications like mapviewer. We want to have high availability solution.
    I checked The documents and one solution which Iam looking is Standby database. We don't want to use RAC.
    But with Stanby database we need to do autoconfig duing the swithover/failover.But normally it takes 3-4 hrs for us to get the application setup and bring the system up after teh autoconfig.
    Iam looking at any other solution whihc provides the minimum downtime. Any suggestions.
    Thanks In Advance.

    Iam looking at any other solution whihc provides the minimum downtime. Any suggestions.There are no more options available apart from Data Guard and RAC.
    Business Continuity for Oracle E-Business Release 12 Using Oracle 11g Physical Standby Database [ID 1070033.1]
    Using Oracle 11g Release 2 Real Application Clusters with Oracle E-Business Suite Release 12 [ID 823587.1]
    Oracle E-Business Suite Release 12 High Availability Documentation Roadmap [ID 1072636.1]
    Thanks,
    Hussein

  • Highly Available WAS 6.40

    Hi,
    I am looking at building EP6 SP4 when it arrives, on WAS 6.40 to provide a highly available solution for portals.
    I'm sure I have seen somewhere on SMP that the tricky single point of failure in WAS are the message server and enque server in central services. I assume this to mean that in order to protect a stateful J2EE app (EP6) I dont need to be that concerned about failure of a central instance - other than the ENQ and MS services.
    The EP6/NW04 dox talk a lot about protecting the ENQ and MS, but I have yet to (re)discover relevant configuration dox on how to actually implement a highly available ENQ and MS.
    Could anyone point me in the right (Service Market Place?) direction?
    Thanks.

    Hi Stuart,
    yes, you are right - the message and enqueue servers are SPOF in a Web AS cluster. Add the DB to that. So, the real HA cluster can be achieved using Switchover software (protects your cluster also against host machine failure, network adapter failure, etc.)
    The docs you are looking for are located here: http://service.sap.com/ha -> Media Library -> Documentation -> HA Documentation and Switchover. In BC SAP High Availability 6.40 document under HA DOcumentation you can find general considerations about using switchover (how it works in general, how it protects your cluster, etc.)
    Under Switchover you can find the SAP Web AS in Switchover Environments (6.30) document that discuss in more detail what you need to do to setup the HA cluster.
    However, protecting the central services and the DB means that your cluster will stay operational and in sync. This does not provide state preservation of stateful applications. If you need to preserve any state for your J2EE applications, consider using failover. For more info, see those pages in the documentation:
    http://help.sap.com/saphelp_nw04/helpdata/en/8f/d6e45953a494499ea1b79ab16321d2/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/90/044cc585eaba42b649f161818b0fdf/frameset.htm
    Hope that helps.

  • Oracle High Availability Training

    I am seeking training on High-Availability Oracle solutions - Not just Parallel server, but Standby, and HA configuration in Sun Clustered environments. The training should focus on the RDBMS (8i/9i).
    Any recommendations for Oracle or Third-Party training classes would be appreciated.
    I understand that Oracle alone will provide high reliability but to get to .9995 reliability (not 5 9s) we'll need some sort of high-availability solution.
    Thank You for your time.
    null

    Hi
    Check with Oracle University for High Availability classes. I
    had an opportunity to look at their new features papers and they
    were very good
    sarath

  • App-V 5.0 Streaming over SCCM 2012 SP1 - High Availability / Load Balancig

    Hello Anybody,
    the default App-V 5.0 Streaming (SharedContentStoreMode = on) Deployment over SCCM belongs to a HTTP-Streaming over http:\\SCCM-Server\... . The whole content flows from SCCM to the App-V-Client. Is it possible to create there a high availability solution?
    Yes, we can set a second distribution point. But in th App-V-Client are always only one Distribution Source.
    Is it possible to set there an clustered adress of an other IIS? Is it possible to change the publishing Distribution Source with an SMB-Path to File-Cluster? Is there a trick with Source-Root-Parameter in App-V-Client? Or are ther anything else to create
    a high availibility App-V-Streaming-Solution?
    Yes, with App-V-Management-Server there is a high availability solution. - But we have only SCCM-Infrastruktur for App-V-Distribution.
    Thank you, best regards
    Daniel

    Daniel, do you found solution?

  • High Availability with two 5508 WLAN controllers?

    Dear all,
    we are considerung to implement a new wireless solution based on Cisco WLC 5508 and 1262N Access Points. We are planning to purchase about 30 access points and have two options: Either purchase one WLC 5508-50 or, for redundacy, two 5508-25 controllers.
    Is it possible to configure two WLC 5508 as a high availability solution so all Access Pointes are distributed over both WLCs and in the case one WLC breaks the other one manages all APs?
    If we have 30 access points and one of two WLC 5508-25 breaks of course not all 30 but only 25 access points can be managed by the remaining one. Is there some sort of control to choose which access points shall be managed and which not?
    How does such a configuration look like in general, is the implementation of a two controller setup rather complex or straight forward?
    Thanks!
    Michael

    Dear Nicloas,
    thanks for your reply. We have an offer where two 5508-25 are only a little more expensive than one 5508-50. So I think it's better so spend a little more money and have a backup WLC. Otherwise, if the one and only WLC breaks, all APs are unusable which would not be acceptable for us.
    Regarding roaming - not all access points will distribute the same WLAN. Actually we will have one wireless network with 18 access points for our warehouse and 12 access points for the internal and guests network.Therefore no roaming will happen between those APs. In this case I could use one WLC for the 18 warehouse access points and 12 for the internal network. In the case one controller breaks, I could use the remaining one for the important warehouse systems (i.e. by using the priority system).
    Regarding the configuration: If I understand correctly I configure both controllers exactly the same (except for the name and IP address of course) and put both controllers in the same mobility group - and that's really it? Sounds great!
    I have one general question regarding the new WLC controllers: Is it true that communication between the WLC and the APs is now done on Layer 3 only so all APs need an IP address? I'm asking because currently we are still using an Cisco 4112 WLC which operates in Layer 2 mode. So I guess with the new WLC, I have to configure DHCP option 43 with the management IP address of the WLC, right? I also guess I can manually move APs from one to another WLC once they have joined a controller for the first time?
    I'm ordering the book "Deploying and Troubleshooting Cisco Wireless LAN Controllers" now and guess this will answer most of my upcoming questions. Can I come back to you here in case I run into trouble with the configuration?
    Thanks a lot for your help
    Michael
    Nachricht geändert durch michaelbs

  • CSA MC 6.0 high Availability

    Hello,
    i heard about CSA MC 6.0 high Availability solution, but we can't realize it.
    Is it possible to make a reserve CSA server, we are planning to use it in branch office?
    Thank you

    Thank, but this is not acceptable, its too rich.
    Will it work:
    I will make a backup of a main server, and then restore this backup on a reserve csa server.
    So on the reserve server i will have all information from main server, server names are the same, ip addresses are the same.
    I thought that agents wil connect without any problems, but they dont.
    ailed transaction, url=https://csa-mc:5401/csamc60/agent, curlerr=60 (SSL certificate problem, verify that the CA cert is OK). Check if agent and CSAMC system times are totally unsynchronized. Or you can use a browser to open the certificate file (sslca.crt) and see if the 'Valid From' date-time of the certificate is later than this host system date-time. Adjust the system time to fix it.
    237: testarm1: Mar 31 2010 16:33:23.781 +0400: %CSA-4-MC_NOT_REACHABLE: %[Component=Csamanager][PID=1136]: conn_check: Failed to reach mgmtserver csa-mc:5401 via HTTPS. Will try again in 9 secs
    238: testarm1: Mar 31 2010 16:33:32.812 +0400: %CSA-4-AGENT_CURL_ERROR: %[Component=Csamanager][PID=1136]: Failed transaction, url=https://csa-mc:443/csamc60/agent, curlerr=60 (SSL certificate problem, verify that the CA cert is OK). Check if agent and CSAMC system times are totally unsynchronized. Or you can use a browser to open the certificate file (sslca.crt) and see if the 'Valid From' date-time of the certificate is later than this host system date-time. Adjust the system time to fix it.
    239: testarm1: Mar 31 2010 16:33:32.812 +0400: %CSA-4-MC_NOT_REACHABLE: %[Component=Csamanager][PID=1136]: conn_check: Failed to reach mgmtserver csa-mc:443 via HTTPS. Will try again in 12 secs
    240: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-IP_CHECK_OK: %[Component=Csamanager][PID=1136]: conn_check: ip config: ok. one local address is 10.11.0.41
    4: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-FAILED_SEND_FASTPOLL: %[Component=AgentUI][PID=3808]: Failed to send event with code 648
    241: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-6-MC_DNS_LOOKUP: %[Component=Csamanager][PID=1136]: conn_check: dns      : resolved mgmtserver name csa-mc to 10.11.0.2
    242: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-MC_REACHABLE_CHECK: %[Component=Csamanager][PID=1136]: conn_check: https    : mgmtserver is not reachable via https
    243: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-CONNCHECK_CMPLT: %[Component=Csamanager][PID=1136]: conn_check: finished
    can anyone help, please.?
    as i understood, there is a problem with ssl certificate, agents have a root certificate (old server), but old server is unreachable and there is a new server with another root certificate.

Maybe you are looking for

  • How can I fix a nav bar that wraps to a second line?

    I have a single line of text on the navigation bar while I'm working in iweb but when published it wraps to a second line. I tried extending the page width which seemed to help on my home page but the other pages still have 2 lines.

  • How can I lock a clip to storyline, timeline or song in Final Cut Pro?

    My friends and I made our own version of Pharrell Williams happy video and I'm trying to edit it. The thing is that there are places where we sing and we want the song to match our lips so how can I lock the clip in place? I'm very new to editing and

  • After Effects PNG Sequence Error Help Please

    When I try to render a png sequence I got the following errors After effects warning: Could not create file <file path> Access was denie Another message box saying AEGP plugin PNGIO Support: Unable to create PNGIO (5027::12) Another message box sayin

  • Suppliers payments report

    Hi Experts, I want to know if I pay to my suppliers on time, Is there any SAP report for this? For example, I want to evaluate all my last year payments. We pay using F110. Thanks Ofer

  • Change Smart View default colours for all clients

    I need to change Smart View default colours. But it must be done in a centralized way, so I can not set it up at the client level. I'm not sure if Smart View takes defaults from planning.css styles, or if they're defined somehow at the provider, or m