ISP Redundancy no work

Hello, I have TMG Array(NLB) with 4 servers, I try configure ISP Redundancy(load balancing): add second network adapter for my vitrual servers, configure using article
http://www.isaserver.org/tutorials/Exploring-ISP-Redundancy-Forefront-Threat-Management-Gateway-TMG-2010.html but my balance is not an array or a general or throwing packets at random. Perhaps the problem in the routing table Windows 2008 R2. On all
servers in the table are two routes
0.0.0.0 0.0.0.0 IP_ISP1 metric 2
0.0.0.0 0.0.0.0 IP_ISP2 metric 3
Help please, why does not work balancing?

Hi,
Thank you for the update.
“Your answer only applies to published applications? I have not balanced outbound.” - ISP Redundancy is used to balance outbound traffic between two links. NLB is used to load balance inbound traffic across the TMG array. And
for configure ISP-R, you may read the following articles:
http://blogs.technet.com/b/isablog/archive/2009/02/16/keeping-high-availability-with-forefront-tmg-s-isp-redundancy-feature.aspx
http://blogs.technet.com/b/isablog/archive/2009/10/14/the-isp-redundancy-feature-of-forefront-tmg.aspx
Regards,
Nick Gu - MSFT

Similar Messages

ISP redundancy and reverse proxy

Greetings, community!
We have two EDGE TMG servers and two INTERNAL TMG servers.
We have two providers with two dedicated external IP addresses each.
I configure ISP Redundancy for each EDGE TMG servers with parameters:
Each EDGE TMG server has two External NIC and one Internal NIC.
EDGE 1: Provider1_IP1 and Provider2_IP1
EDGE 2: Provider1_IP2 and Provider2_IP2
ISP Connections:
Provider1 and Provider2
So, the trouble:
We have some published Web-Services, like OWA, ActiveSync, TerminalGatewayServers and others.
Also we made 4 external DNS records for each Web-Service.
For example:
mail.domain.com Provider1_IP1
mail.domain.com Provider1_IP2
mail.domain.com Provider2_IP1
mail.domain.com Provider2_IP2
If we try to connect from external to any published Web-Services, we have big delay (~ 30 sec), and then it connected.
After some tests we find that ONLY ONE EDGE TMG server is used for reverce proxy. IP Addresses from EDGE 1 is unavailable from external access. But it still works as Web-Proxy from Internal connections. Reverse-Proxy works only for EDGE 2 IP Addresses.
If we shutdown EDGE 2 TMG server, then Reverse-Proxy for EDGE 1 IP addresses are works correctly.
Why all 4 my external IP addresses are not works for reverse-proxy? Only 2 from one of my EDGE servers.

So, I still try to solve my problem...
When I try to connect from External to one of my EDGE1 IP addresses, I got these logs:
LOGS on DMZ server (EDGE1):
Failed Connection Attempt DMZ-TMG-01 21.07.2014 11:27:40
Log type: Firewall service
Status: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Rule: Publish TMGBE HTTP
Source: External (77.73.111.194:3427)
Destination: Internal (172.16.0.100:80)
Protocol: HTTP Server
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 21000ms Original Client IP: 77.73.111.194
LOGS on INTERNAL server:
Initiated Connection BLK-TMG-02 21.07.2014 11:27:20
Log type: Firewall service
Status: The operation completed successfully.
Source: External (77.73.111.194:3427)
Destination: Local Host (172.16.0.100:80)
Protocol: HTTP
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 0ms Original Client IP: 77.73.111.194
Closed Connection BLK-TMG-02 21.07.2014 11:27:40
Log type: Firewall service
Status: A connection was abortively closed after one of the peers sent an RST packet.
Source: External (77.73.111.194:3427)
Destination: Local Host (172.16.0.100:80)
Protocol: HTTP
Additional information
Number of bytes sent: 304 Number of bytes received: 192
Processing time: 20281ms Original Client IP: 77.73.111.194
When I try to connect my EDGE2 server external IP addresses, then:
LOGS on DMZ server (EDGE2):
Initiated Connection DMZ-TMG-02 21.07.2014 11:57:17
Log type: Firewall service
Status: The operation completed successfully.
Rule: Publish TMGBE HTTP
Source: External (77.73.111.194:3429)
Destination: Internal (172.16.0.100:80)
Protocol: HTTP Server
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 0ms Original Client IP: 77.73.111.194
Closed Connection DMZ-TMG-02 21.07.2014 11:57:17
Log type: Firewall service
Status: A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.
Rule: Publish TMGBE HTTP
Source: External (77.73.111.194:3429)
Destination: Internal (172.16.0.100:80)
Protocol: HTTP Server
Additional information
Number of bytes sent: 534 Number of bytes received: 146
Processing time: 203ms Original Client IP: 77.73.111.194
Then traffic was redirected to HTTPS:
Initiated Connection DMZ-TMG-02 21.07.2014 11:57:17
Log type: Firewall service
Status: The operation completed successfully.
Rule: Publish TMGBE HTTPS
Source: External (77.73.111.194:3430)
Destination: Internal (172.16.0.100:443)
Protocol: HTTPS Server
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 0ms Original Client IP: 77.73.111.194
LOGS on INTERNAL server:
Failed Connection Attempt BLK-TMG-02 21.07.2014 11:57:17
Log type: Web Proxy (Reverse)
Status: 12311 The page must be viewed over a secure channel (Secure Sockets Layer (SSL)). Contact the server administrator.
Rule: Publish OWA
Source: External (77.73.111.194:3429)
Destination: Local Host (172.16.0.100:80)
Request: GET http://mail.domain.com/
Filter information: Req ID: 0a314138; Compression: client=Yes, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 MIME type:
It's OK, because IIS require SSL. Then:
Initiated Connection BLK-TMG-02 21.07.2014 11:57:18
Log type: Firewall service
Status: The operation completed successfully.
Source: External (77.73.111.194:3429)
Destination: Local Host (172.16.0.100:80)
Protocol: HTTP
Additional information
Number of bytes sent: 0 Number of bytes received: 0
Processing time: 0ms Original Client IP: 77.73.111.194
Closed Connection BLK-TMG-02 21.07.2014 11:57:18
Log type: Firewall service
Status: A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.
Source: External (77.73.111.194:3429)
Destination: Local Host (172.16.0.100:80)
Protocol: HTTP
Additional information
Number of bytes sent: 786 Number of bytes received: 318
Processing time: 15ms Original Client IP: 77.73.111.194
And HTTPS:
Allowed Connection BLK-TMG-02 21.07.2014 11:57:17
Log type: Web Proxy (Reverse)
Status: 302 Moved Temporarily
Rule: Publish OWA
Source: External (77.73.111.194:3430)
Destination: Local Host (10.1.200.129:443)
Request: GET http://mail.domain.com/
Filter information: Req ID: 0a31413a; Compression: client=Yes, server=No, compress rate=0% decompress rate=0%
Protocol: https
User: anonymous
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x40000000 (Response should not be cached.)
Processing time: 1 MIME type: text/html; charset=UTF-8
I can't understand the difference between there servers. If I shutdown EDGE2, the Publishing will work fine through EDGE1.

GoDaddy ISP emails quit working 1/5/15 but I made NO changes. What's happened?

I've used Thunderbird for my multiple email accounts for several years with no problem. On 1/5/15, my GoDaddy ISP email account quit working. I got an error message saying the password was incorrect. I hadn't made any changes to it. I tried re-entering the correct password, then checked all my incoming and outgoing server settings. All were correct. Deleted and reinstalled the email account. Same result. To my knowledge all server settings and passwords are correct. Only GoDaddy ISP doesn't work. Gmail accounts work fine. My GoDaddy ISP webmail works fine. I just can't get Thunderbird to work with it. Until 1/5/15, it had worked fine.

multiple machines. single point on all of them would be the router or modem, any new hardware in the mix, or a fix for something from your ISP?
Try '''[http://en.wikipedia.org/wiki/Safe_mode safe mode with Networking]'''. This loads only the very basics needed to start your computer while enabling an Internet connection. Click on your operating system for instructions on how to start in safe mode: [http://windows.microsoft.com/en-us/windows-8/windows-startup-settings-including-safe-mode Windows 8], [http://windows.microsoft.com/en-us/windows/start-computer-safe-mode#start-computer-safe-mode=windows-7 Windows 7], [http://windows.microsoft.com/en-us/windows/start-computer-safe-mode#start-computer-safe-mode=windows-vista Windows Vista], [http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/boot_failsafe.mspx?mfr=true" Windows XP], [http://support.apple.com/kb/ht1564 OSX]
I have recently seen issues caused by bank security software and tokens from the US military. Safe mode basically disable all of that sort of stuff so a clean connection can be attempted.

ForeFront TMG ISP Redundancy - Lost of internet connectivity

I set up ISP redundancy on Forefront TMG that has my exchange 2010 server published through it. If both external NICs are enabled, I lose internet connectivity. If either NICs are enabled, and the other disabled, I get internet connectivity. Any ideas?

Hi,
Based on my knowledge, it may be caused by path mismatch.
Simply to say, dns request goes in through the ISP1 and dns reply goes out through ISP2.
However, we still need you to verify this, you can capture the packets on remote users to see if the destination IP in dns request and the source IP in dns reply are the same.
Please also check the TMG live logging to see if there is any error information.
Best Regards
Quan Gu

EA4500 on Sniper Hill ISP is not working so far, any ideas??

Hello everybody, I am deployed to Afghanistan. The ISP provided on the base is called Sniper Hill. The basic setup is there are CAT5e drops in every room. You plug in, and it is all web based to pay for and sign in to the service. Other people have successfully connected there routers made by other manufacturers, why won't the EA4500 connect? I've tried a lot of different ideas from reading different stuff round the net including the forums here. The Problem starts when after I sign in. When I open explorer I get the normal redirect to the sign in page. Once I sign in it's like the connection dies. I've seen a lot of suggestions that the server is picking up on a router on their network and blocks everything. I've tried mac addy clone, fixed IP, DMZ, NAT off, using the different connection types versus plain old Dynamic IP. Anyone got any ideas? The only thing I can tell you about the other routers people are using is they are a European version, you can tell by the plug that comes on them. I don't want to have to buy another router to use here. I'll keep this one and use it at home for sure but I'd like to use it here. Thanx

Correct me if I'm wrong, you've tried to set up the router using the CD that came w/it right? If that did not work then please try to set the router manually. Click the link below to check on how to install the router manually. http://homekb.cisco.com/Cisco2/ukp.aspx?pid=80&vw=1&articleid=22734

TMG ISP Redundancy and DNS

Hello,
I have installed TMG with 3 NICs such as ISP1, ISP2 and Internal
I configured the ISP1 and ISP2 interfaces with IP addresses and default gateways and
configured internal NIC with IP address, but Default Gateway.
I installed DNS service on TMG and configured the forwarders pointing to ISP DNS servers.
Finally Internal NIC DNS configuration
Primary : 127.0.0.1
Alternative: Internal AD DNS servers
Configured persistent routes
=============================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.0.0.0 255.0.0.0 10.1.2.1 1
( Internal LAN)
1.1.1.1 255.255.255.255 192.168.5.1 2 ( ISP1 DNS Server)
2.2.2.2 255.255.255.255 192.168.4.2 3 ( ISP2 DNS
Server)
0.0.0.0 0.0.0.0 192.168.4.2 Default
0.0.0.0 0.0.0.0 192.168.5.1 Default
Now I am trying to join the TMG server to domain but failed. Error saying that cannot resolve domain name
I would highly appreciate any help.
Thanks

So far now everything is working.
Just a summary
- Installed the DNS service on TMG.
- Configured the forwarders pointing to ISP 1 & 2 DNS servers.
- Configured the conditional forwarder to forward DNS request to internal DNS server for AD authentication.
- Internai NIC DNS
Primary : 127.0.0.1 ( local host TMG )
Alternative: Internal DNS servers.

ISP Redundancy in multihomed BGP scenario

Hi all,
We have setup the WAN network multihomed with dual ISP. The requirement is that if the primary ISP fail then all the traffic should automatically divert to the secondary ISP. How can we achieve it? If you know that we can use keepalive then could you provide me the configuration with the scenario. In normal working setup, all the traffic for the internal network comes through ISP 1 but if ISP 1 failed then without manual attribute manipulation BGP automatically route the traffic to ISP 2.
Thanks

Hi,
what exactly does not work during the switchover to the second ISP?
Your router is not getting prefixes from the second ISP or the second ISP is not getting proper prefixes from you?
I believe the second case is happenning?
As I see in the config
ip access-list extended Range-2
permit ip 7.17.24.0 0.0.0.255 any
ip access-list extended Range-3
permit ip 7.17.24.0 0.0.0.255 any
i.e., both ranges are identical, which is not correct, I guess?
And generally, I don't think using extended ACLs in a BGP route-map is a good idea, see
http://blog.ipspace.net/2008/03/use-extended-access-lists-to-filter-bgp.html
It's much easier to understand the config when ip prefix-lists are used instead, I can't follow your current config idea to be honest.
Best regards,
Milan

How to resolve inability to send Apple Mail to new ISP server from work.

Switched to Insight Broadband over the weekend. Now at work, I can receive email but not send it. The error message is authentication required, yet Insight specifically does not require any authentication on its outgoing server and I set up the account in Mail to require password authentication for incoming. Have read similar topics and neither Insight nor my employer blocks port 25. Insight's lame web support gives instructions in Entourage to override the receiving port to 995, requiring SSL, which Mail seems to have picked up on automatically. However, the same Entourage instructions advise to override the default sending SMTP port to 465 and require SSL. How does one override the default sending SMTP port in Mail (from 25, I presume) to 465 and require SSL? Thanks in advance.
15" 1.67 Ghz Aluminum PowerBook G4, 2Gb RAM, ATI Radeon 9700 128 Mb VRAM Mac OS X (10.4.8) 23" Cinema HD Display, HP/Canon Printers, Gigabit Ethernet and Wireless Network
15" 1.67 Ghz Aluminum PowerBook G4, 2Gb RAM, ATI Radeon 9700 128 Mb VRAM Mac OS X (10.4.8) 23" Cinema HD Display, HP/Canon Printers, Gigabit Ethernet and Wireless Network

Thanks for your kind assistance. It apparently requires more configuration work to use cable broadband than dsl broadband. I had discovered your path (sorry not to have said so), but the error message led me to both override the port AND to port to use password authentication, even though the basic account setup if connected directly to the Insight modem or peripherally to it through routers or switches or using Insight's broadband servers for your workplace specifically advises to use NO authentication on the outbound server. Finally, once the Insight tech and I stumbled on the Proxies setting "Manual" in Network and UNCHECKED "Use Passive FTP Mode (PASV), all has seemed to be settling down, although it seems that I am also having to change the address of the outgoing mail server to reflect password authentication as well. Stay tuned.

Cisco DMVPN Spoke ISP Redundancy

Hi Dears,
I want to configure DMVPN on cisco routers. I want to configure dual ISP at spoke's. ADSL link is primary and 3g is backup and configure dmvpn.
How i configure in HUB and Spoke sites? I want to use Eigrp protocol.

Hi Teymur,
You can configure a single tunnel interface on the spoke, primary hub and the secondary hub for dual hub and dual isp on spoke.
Use EEM script for failover between your ISP connections and can configure both hubs on the same tunnel interface.
Introduce delay on the secondary hub tunnel interface so that it is less preferred.
Spoke Tunnel configuration :
interface Tunnel0
bandwidth 1000
ip address 10.10.0.12 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map 10.10.0.1 172.16.1.1
ip nhrp map 10.10.0.2 172.16.1.2
ip nhrp network-id 100000
ip nhrp holdtime 300
ip nhrp nhs 10.10.0.1 <---- Primary Hub
ip nhrp nhs 10.10.0.2 <---- Secondary Hub
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
Primary Hub
interface Tunnel0
ip address 10.10.0.1 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
Secondary Hub
interface Tunnel0
ip address 10.10.0.2 255.255.255.0
ip mtu 1400
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1500 <--- Increase the delay so that the routes learnt from this is less prefered
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
For Dual ISP failover on Spoke :
Configure tracking with IP SLA monitor. Then use EEM script to change the source and route of the tunnel when the track fails.
If Ethernet0/0 is the primary WAN interface and Ethernet0/1 is the backup then you can use the below template.
track 1 ip sla 1 reachability
ip sla 1
icmp-echo <Primary Next-hop IP> source-interface Ethernet0/0
threshold 3000
timeout 3000
frequency 3
ip sla schedule 1 life forever start-time now
ip sla responder
event manager applet Failto-secondary-tunnel
event track 1 state down
action 1.0 cli command "enable"
action 1.1 cli command "configure terminal"
action 1.2 cli command "interface tunnel0"
action 1.3 cli command "shut"
action 1.4 cli command "tunnel source Ethernet0/1"
action 1.5 cli command "no shut"
action 1.6 cli command "exit"
action 1.7 cli command "ip route 0.0.0.0 0.0.0.0 <backup next-hop ip>"
action 1.8 cli command "ip route 0.0.0.0 0.0.0.0 <Primary next-hop ip> 10"
action 1.9 cli command "end"
event manager applet Comeback-primary-tunnel
event track 1 state up
action 1.0 cli command "enable"
action 1.1 cli command "configure terminal"
action 1.2 cli command "interface tunnel0"
action 1.3 cli command "shut"
action 1.4 cli command "tunnel source Ethernet0/0"
action 1.5 cli command "no shut"
action 1.6 cli command "exit"
action 1.7 cli command "ip route 0.0.0.0 0.0.0.0 <Primary next-hop ip>"
action 1.8 cli command "ip route 0.0.0.0 0.0.0.0 backup next-hop ip> 10"
action 1.9 cli command "end"
Hope that helps

Anyone got the AIR-CT2504-HA-K9 to work on N+1 Redundancy ?

Hi Guys,
Seems like the new Part #AIR-CT2504-HA-K9 needs some kinda licensing...to work... otherwise the redundancy is same as it was ealier with mobility groups.
The documentation seems to be wrong in the case of 2504, i cannot find the redundancy button in the Wireless tab too, When i apply the Evaluation license redundancy is working.... did anyone else face the same Issue ?
Regards,
Vinu

i cannot find the redundancy button in the Wireless tab too
You mean AP SSO?
WLC 2500 will not support this feature.

Please help - I need to find a compatable UK ISP provider

I recently bought a MAc Mini and my ISP doesn't work on it. I was told by my current ISP that I need to buy a wireless connection, so went to John Lewis and bought a Airport (the guy in the shop said this would work on my Mac Mini).
I have not been able to get past switching it on and the light flashed amber and does not go to green as it's suposed to.
I have called the ISP and they say that it should work and they can't help.
All it says in the Airport book is that if the line flashes amber it means there's a problem with the connection or ISP. Could it also be that when I configured the Airport I have done it wrong? Would that also cause it to flash?
I think it might be the ISP is not compatable.. it does say in the AIrport smallprint that not all ISPs are compatable..
Does anybody know of a UK ISP that can offer assistance to set up that I can join - I have phoned a few but nobody seems to be able to help.
Please reply soon if poss - I don't have internet cannot go home to do this forum!

Hi there, I have checked and see that the Mac Mini has Airport built in. I take it therefore that the guy in John Lewis sold you an Airport Extreme Base Station (white dome like thing!)?
If so this is fine but you will need something else to connect to the net. Basically the Airport Extreme Base Station (AEBS from now on!) does not contain an ADSL modem (the bit that connects to the internet). The AEBS is for wireless networking and will send a signal around your house that the Mac Mini can receive. If you want to connect to the net you need a modem (unless you have cable access and if so shout) and a typical device would be like the one below:-
http://www.adslnation.com/products/xmodem-m3.php
Very good supplier too!
Once you have this box the modem plugs in to the phone socket and from the modem you connect to the AEBS with via ethernet connections. A bit of configuring (ask if you need help with this) and the Mac Mini should be able to connect.
As for compatible ISP's then most, if not all, are OK with Macs. You find that some of them don't offer support (AOL, Tiscali) but they will work happily - all you need is username and password and pop this in to the configaration for the AEBS and off you go.
Back to John Lewis - if they sold you a small square device then this is basically used to extend your wireless network when, for instance, you want to share music with your hi-fi or perhaps share a printer. Hopefully you got the dome like device!
I have this setup and it works well. I have set others up with devices from the likes of netgear that contain a wireless box plus modem but for some reason Apple never offered one to the UK market. I think it has something to do with the fact that the US tends to have cable access to the internet and so on.
Let us know how you get on!
Cheers
Michael

External optical drive that works?

Hi, I have had an Imac 27 i5, its 3 weeks old now, I did the free Lion os upgrade before realising that Lion seems to be buggy.
I have had problems some of which I have got over thanks to this forum, some I have not I still cant get my isp set-up working but a work-around is giving me service, the wireless connection drops out regularly but using ethernet works. Mail wont send my emails and Itunes is problematic. The bluetooth trackpad, mouse and keyboard disconnects frequently but thankfully reconnects soon after. Neither of my two existing external hard drives or my external optical drive would work on this Imac, I replaced one hard drive and that works now, but tells me that I have 120gb free on a drive that is only 120gb and has a full Time machine backup on it?). I replaced the optical drive with a very cheap one and that works now.
My old optical drive used Llitescribe and I really want to carry on using it with the Imac, Can any of you guys recommend an optical drive with Litescribe that will work with the Imac and os Lion? I am getting tired of having to spend out money replacing things I expected to work with the Mac and dont!
I brought the Imac because I wanted a hassle free computer, I read and took in all the reasons for using Mac over Microsoft and to be hounest with you the Last 3 weeks have nearly driven me to send the Imac back! I expected it to "just work" and be easier to use but it has not turned out that way for me up to now, I have contacted Apple about the problems and they dont seem to be of very much help - up to now, but thanks to you guys and this forum I am getting things sorted, slowly. Apple need to get thier act together I think! What hurts the most is that my 3 year old £600.00. HP PC with windows 7 worked "out of the box" and has "just worked" to this day! I cannot say that about the £1650.00. Imac!

The external Apple superdrives are compatible only with the Macs that did not come with an internal optical drive. Take it back and get a 3rd party drive, preferably one with drawer loading. I have an 2011 iMac and bought this external drive: 24X OWC Mercury Pro. I do a lot of ripping of audiobooks for my iPhone so wanted one with a faster read throughput than USB 2 which is all my iMac has. So I use the FW port on the drive.
OWC is a very well know Mac supplier and has excellent reputation both for item quality and customer support.

CardDav in Contacs not working correctly

The implementation of groups in the CardDav-protocol is not correct. I have a CardDav-service from my ISP. It works correctly on iOS, but not in OS X. The problem is that the moment I create a group, only the contacts in a group are displayed. That is: of course in the group, but also in 'all contacts'. Removing the group brings the whole list back.
The problem was already present in earlier version. I hoped Yosemite would solve it. But it is still there.

Hello David,
I use an OLE DB connection to a MS SQL Server 2005.
Connection Details say:
Version 2.0.0.29
Build 12.1.0.882
Network Layer OLE DB
DBMS Engine MS SQL Server 2205
Database used is MS AdventureWorksDW sample database (data warehouse sample)
I noticed that only with this database, ranking is selectable (not with the AdventureWorks non-DW sample database).
Ranking itself seems to work, if I activated ranking (e.g. Top 10 customers) everything is ok.
(Also if I send a direct SQL command with ranking to the DBMS, it seems ok.)
Issue arise if I add year filter. Combination of rank and year filter does not seem to work properly.
Any idea why? Or do you wanted to say that this issue might also be related to DBMS support? I would hope / expect to get a straight "ranking not supoorted" and not incorrect data back ...
Thanks for your answer anyway!
Regards,
Stefan

NAT and Routed Network with Two ISP's on one router

I'm sure this has been done covered many times, but I am not finding it.
I have two ISP connections.
With ISP-A I have a /30 between us and 200.100.100.0/24 is routed to me via the /30 for thsi example we will say the /30 is 1.1.1.1 on isp end and 1.1.1.2 on my end
With ISP-B I have a 100.0.0.0/29 subnet. and the ISP gateway is on that subnet at 100.0.0.1
On the inside of my network I have devices using both 200.100.100.x addresses and devices on 192.168.100.x that need to use NAT.
I would like all of the devices on 200.100.100.x addresses to continue using ISP-A as their gateway.
Everything on 192.168.100.x should use NAT and go out ISP-B
I have tried
ip nat inside source route-map ISP-A interface GigabitEthernet0/1 overload
route-map ISP-B permit 10
match ip address 101
match interface GigabitEthernet0/1
set ip next-hop 100.0.0.1
route-map ISP-A permit 10
match ip address 111
match interface Multilink1
set ip next-hop 1.1.1.1
The problem comes when I have default routes to ISP-A in the router than none of the ISP-B traffic works, and vice versa.

I think for this to work correctly and be able to split traffic between the 2 ISPs, you would need to use BGP, because default is going to use one ISP or the other.
If you can use BGP, this link will help you in load shearing between multiple ISPs when you have one router.
http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13762-40.html#conf4
HTH

IDSM-2 "redundancy" in a single chassis

I understand how IDSM-2 redundancy could work having two 6500's...but what do you do when you are doing inline vlan pairs and the IDSM-2 fails and is no longer there to bridge the vlans together? How can the switch be setup to bridge the vlans in the event that the IDSM-2 fails?
Also, instead of pairing all the vlans that have SVI's on the FWSM, could I just pair the FWSM's VLAN/SVI on the MSFC with another vlan and get the same effect as pairing all the vlans that are on the FWSM? Thanks.

I havn't tried this inside a 6500 chassis, but this works externally:
Set up your in-line sensors as multiple alternate paths connecting the two VLANs together and use spanning tree to assign one sensor path a higher STP cost. Once the primary sensor fails the traffic should re-route to the standby sensor. If you play with the STP settings you can get the switchover time down under a second.

ISP Redundancy no work

Similar Messages

Maybe you are looking for