Migration from F5 to Cisco ACE

Hi All,
I am preparing for a migration from F5 to ACE. Can someone help me with a technical approach that I should take to make this migration successful.
Rishi

Hi,
What I would do:
Is it a kind of copy/paste migration?
Is it layer2/layer3 design?
- list all IP addresses for the ACE (physical for the vlan interfaces + aliases (VRRP like address))
- list all VIP addresses + services (fe. http, dns, ftp...)
- list all real servers that will be used, ordened per VIP (serverfarm)
- list all probes per real server
- list all specific exceptions (fe. stickiness, cookie insertion, NAT...)
- list all network parameters (fe. static routes, default routes, ACLs for management...)
I think this should help you already. The rest depends on the design and complexity that is in your setup.
Hope this helps.
Regards,
Dario

Similar Messages

Migrating from Brocade 2800/ 3900 to Cisco MDS 9509

What is the best procedure from migrating from Brocade 2800/3900/12000 to Cisco MDS 9509 especially connected to HP-UX and AIX server.
Without any Downtime I should be able to migrate these servers.
I thought about these options:
1. Use vgexport and vgimport or exportvg and importvg (AIX) after connecting to Cisco MDS. But this requires complete downtime on the application.
2. Take one path down or HBA down and switch the cable and vgextend the devices.
Please let me know if somebody has procedure.
I was successful in HP-UX server using the second options but I cant see all the LUNs. That might be array specific problem also.
If anybody has detailed procedure on migrating this scenario. please let me know.
We are using Persistent FCIDs on our MDS switches.
Thanks in Advance

After connecting 1 cable from server HBA to Cisco S/w, why you are not able to see all LUNs, did you cross-check that...I mean HBA Configuration (max 256 LUNs) or Disk Array library driver to be installed on host side.if that can be sorted out, you can mirror the volumes across the disk arrays.are you using HDS Arrays? I don't know but what is vgextend command you are mentioning...
also did you take a reboot of server or is it online addition on new LUNs...
Also any how if you are not able to see all LUNs that is going to be an issue later as well for migration...pls cross-check that...

Migration from CSM to ACE

What points need to be kept in mind while migrating from CSM to ACE? Configuration/hardware??? CSM at 2 sites with ft, what would be the best stratgy to minimize the downtime? illustrated steps would help alot and be appreciated...

Hi Ahmed,
You should test ACE in pre-production environment before putting them in production. There will be connection break since you are moving from one device to another.Not sure of any way we will not have an outage. But you should have a roll back plan and ensure that you have a MW while you are migrating. I don't see any documented procedure to migrate other than that tool which helps you in converting the CSM config to ACE.
Regards,
Kanwal

Installing cisco prime on vmware & migrating from wcs

Hi,
We have been tasked to install prime on a vmware box then migrate from wcs, i have never done this before & was wondering if anyone has any experience in doing this way, how easy is it & if you have any docs etc?
Cheers
Sean
Sent from Cisco Technical Support Android App

Hi,
A direct upgrade from a WCS release to Prime Infrastructure 1.2 is not supported. You must first upgrade to an NCS 1.1 release, and then upgrade to Prime Infrastructure 1.2.
Please check the links below:
Cisco Prime Infrastructure Configuration Guide, Release 1.2
http://www.cisco.com/en/US/docs/wireless/prime_infrastructure/1.2/configuration/guide/tasks.html#wp1215225
Release Notes for Cisco Prime Infrastructure, Release 1.2
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/1.2/release/notes/cpi_rn.html#wp73605
WCS to NCS or Prime Infrastructure?
https://supportforums.cisco.com/thread/2176121

Migrating from Cisco Unity Express to Cisco Unity Connection

Hello,
We are going to migrate from Cisco Unity Express 8.6.6 to Cisco Unity Connection 9.1.2. Therefore, we need to migrate all mailboxes without data lost.
So, the questions are next: is it possible? Which tools we should use and what steps we need to pass?
Thanks,

Based on my experience of keeping the data (i.e. voicemails for users) it is really not worth it.
Because all these voicemails will add up the Mailbox Space and user will get unnecessary "mailbox full" warnings even though they may be deleted (it takes around 2 weeks to get rid of the deleted voicemails)
Hence, my recommendation would be to do a stare and compare for the most part and build all the Call Handlers etc, this will give you even better chance to get rid of all the unwanted stuff.
HTH

Cisco ACE - Exempt HTTP URL from SSL Offloading

Hi,
I have a cisco ACE module A2 (3.6). I am offloading url www.abc.com on cisco ACE. HTTP redirection to https is working & over https I am able to browse website perfectly. real servers are redirecting some pages over http. Due to page redirection from webserver I have to exempt one URL (http://www.abc.com/modules/docs/abc.aspx) from ssl offloading. It is possible or as a work around i have to rewrite complete url www.abc.com as ssl port.
Your inputs highly appreciated.
Regards,

Hi Masif,
In case you have not gotten assistance with this one, you just need to specify the specific URL and match it on top of the loadbalance policy that is already doing the redirection.
class-map type http loadbalance match-any No-Redirect
2 match http url /docs/abc.aspx
policy-map type loadbalance first-match ABC
class No-Redirect
serverfarm HTTP-Servers
class class-default
serverfarm Redirect
Hope this helps.
Pablo

Resources for migration from legacy Cisco VPN client to AnyConnect?

As the legacy client is now officially EOL'd, and it is having issues with Windows 7 - the need has presented itself to migrate to AnyConnect.
The complicating issue here is that many of the machines that need to be migrated connect remotely and never touch a corporate LAN - as such - I need to devise a means to remotely and seamlessly (as much as possible) migrate from old to new. Sounds a bit like changing the wings on a flying plane, but I'm guessing others have had to face the same issue. By procrastinating this migration - my hope is that your blood spilled will be mine saved? (Just kidding. Sorta).
Any tips, input, suggestion, procedures, FAQs, good luck wishes, etc. greatly appreciated.
Cheers,
JP

Hi Andy
Anyconnect licensing is a little complicated, but 99% of the time you only need the "Essentials" AnyConnect license for your ASAs. This gives you everything that you have using the old Cisco VPN Client.
Essentials is licensed per ASA, and not per user like the other ASA AnyConnect licenses.
AnyConnect Premium gives you all that Essentials give you plus "clientless" VPN (Web portal type stuff).
Configuration wize - it's pretty simple and similar to how you configure the old VPN support. There's a wizard to assist you in configuring it if you like that kind of thing.
HTH
Barry Hesk
Intrinsic Network Solutions

How to buy Cisco (ACE-UPG2-LIC=) 8Gbit to 16Gbit?

The Cisco (ACE-UPG2-LIC=) product is an upgrade from 8Gbit to 16Gbit throughput. How does a customer get this license? It is for the Cisco ACE 20 or ACE 30 Modules, which I believe are End of Sale, but still supported.
Any help would be appreciated..
Thanks,
RO

You cannot buy the license. Neither Cisco nor any authorized reseller will sell it as the product is no longer for sale (as of 24 January 2014). Reference.
You need to either make do with the ACE you have or migrate to a different ADC platform (like the Citrix Netscaler, F5 BigIP, A10 Networks appliances, etc.).

Need help to Configure Cisco ACE 4710 Cluster Deployment

Dear Experts,
I'm newbie for Cisco ACE 4710, and still I'm in learning stage. Meanwhile I got chance at my work place to deploy a Cisco ACE 4710 cluster which should load balance the traffic between two Application Servers based on HTTP and HTTPS traffic. So I was looking for good deployment guide in Cisco SBA knowledge base then finall found this guide.
http://www.cisco.com/en/US/docs/solutions/SBA/February2013/Cisco_SBA_DC_AdvancedServer-LoadBalancingDeploymentGuide-Feb2013.pdf
This guide totally fine with my required deployment model. I have same deployment environment as this guide contains with ACE cluster that connects to two Cisco 3750X (Stack) switches. But I have some confusion places in this guide
This guide follow the "One-armed mode" as a deployment method. But when I go through it further I have noticed that they have configured server VLAN as a 10.4.49.0/24 (all servers reside in it) and Client side VIP also in same VLAN which is 10.4.49.100/24 (even NAT pool also).
My confusion is, as I have learned about Cisco ACE 4710 one-armed mode deployment method, it should has two VLAN segments, one for Client side which client request come and hit the VIP and then second one for Server side. which means besically two VLANs. So please be kind enough to go through above document then tell me where is wrong, what shoud I need to do for the best. Please this is an urgent, so need your help quickly.
Thanks....!
-Amal-

Dear Kanwal,
I need quick help for you. Following are the Application LB requirements which I received from my clinet side.
Following detail required for configuring Oracle EBS Apps tier on HA:
LBR IP and Name required to configure EBS APPS Tier (i.e, ap1ebs & ap2ebs nodes)
Suggested IP and Name for LBR:
IP : 172.25.45.x [should be on same 172.25.45 subnet of ap1ebs & ap2ebs nodes]
ebiz.xxxx.lk [on port 80 for http protocol accessibility]
This LBR IP & name must be resolve and respond on DNS network
Server Farm detail for LBR Setup
Following detail will be use for configuring the LBR:
LBR IP and Name :
IP : 172.25.45.x [should be on same 172.25.45 subnet of ap1ebs & ap2ebs nodes]
ebiz.xxxx.lk [on port 80 for http protocol accessibility]
This LBR IP & name must be resolve and respond on DNS network
Server Farm Detail for LBR setup:
Server 1 (EBS App1 Node, ap1ebs):
IP : 172.25.45.19
Server Name: ap1ebs.xxxx.lk [ap1ebs hostname is an example, actual hostname will be use]
Protocol: http
Port: 8000
Server 2 (EBS App2 Node, ap2ebs):
IP : 172.25.45.20
Server Name: ap2ebs.xxxx.lk [ap2ebs hostname is an example, actual hostname will be use]
Protocol: http
Port: 8000
Since my client needs to access URL ebiz.xxxx.lk which should be resolved by IP 172.25.45.21 (virtual IP) via http (80) before they deploy the app on the two servers I just ran web service on both servers (Linux) and was trying to access http://172.25.45.21 it was working fine and gave me index.html page. Now after my client has deployed the application then when he tries to access the page http://172.25.45.21 he cannot see his main login page. But still my testing web servers are there on both servers when I type http://172.25.45.21 it will get index.html page, but not my client web login page. What can I do for this ?
Following are my latest config :
probe http Get-Method
description Check to url access /OA_HTML/OAInfo.jsp
interval 10
faildetect 2
passdetect interval 30
request method get url /OA_HTML/OAInfo.jsp
expect status 200 200
probe udp http-8000-iRDMI
description IRDMI (HTTP - 8000)
port 8000
probe http http-probe
description HTTP Probes
interval 10
faildetect 2
passdetect interval 30
passdetect count 2
request method get url /index.html
expect status 200 200
probe https https-probe
description HTTPS traffic
interval 10
faildetect 2
passdetect interval 30
passdetect count 2
ssl version all
request method get url /index.html
probe icmp icmp-probe
description ICMP PROBE FOR TO CHECK ICMP SERVICE
rserver host ebsapp1
description ebsapp1.xxxx.lk
ip address 172.25.45.19
conn-limit max 4000000 min 4000000
probe icmp-probe
probe http-probe
inservice
rserver host ebsapp2
description ebsapp2.xxxx.lk
ip address 172.25.45.20
conn-limit max 4000000 min 4000000
probe icmp-probe
probe http-probe
inservice
serverfarm host ebsppsvrfarm
description ebsapp server farm
failaction purge
predictor response app-req-to-resp samples 4
probe http-probe
probe icmp-probe
inband-health check log 5 reset 500
retcode 404 404 check log 1 reset 3
rserver ebsapp1 80
    conn-limit max 4000000 min 4000000
    probe icmp-probe
    inservice
rserver ebsapp2 80
    conn-limit max 4000000 min 4000000
    probe icmp-probe
    inservice
sticky http-cookie jsessionid HTTP-COOKIE
cookie insert browser-expire
replicate sticky
serverfarm ebsppsvrfarm
class-map type http loadbalance match-any default-compression-exclusion-mime-type
description DM generated classmap for default LB compression exclusion mime types.
2 match http url .*gif
3 match http url .*css
4 match http url .*js
5 match http url .*class
6 match http url .*jar
7 match http url .*cab
8 match http url .*txt
9 match http url .*ps
10 match http url .*vbs
11 match http url .*xsl
12 match http url .*xml
13 match http url .*pdf
14 match http url .*swf
15 match http url .*jpg
16 match http url .*jpeg
17 match http url .*jpe
18 match http url .*png
class-map match-all ebsapp-vip
2 match virtual-address 172.25.45.21 tcp eq www
class-map type management match-any remote_access
2 match protocol xml-https any
3 match protocol icmp any
4 match protocol telnet any
5 match protocol ssh any
6 match protocol http any
7 match protocol https any
8 match protocol snmp any
policy-map type management first-match remote_mgmt_allow_policy
class remote_access
    permit
policy-map type loadbalance first-match ebsapp-vip-l7slb
class default-compression-exclusion-mime-type
    serverfarm ebsppsvrfarm
class class-default
    compress default-method deflate
    sticky-serverfarm HTTP-COOKIE
policy-map multi-match int455
class ebsapp-vip
    loadbalance vip inservice
    loadbalance policy ebsapp-vip-l7slb
    loadbalance vip icmp-reply active
    nat dynamic 1 vlan 455
interface vlan 455
ip address 172.25.45.36 255.255.255.0
peer ip address 172.25.45.35 255.255.255.0
access-group input ALL
nat-pool 1 172.25.45.22 172.25.45.22 netmask 255.255.255.0 pat
service-policy input remote_mgmt_allow_policy
service-policy input int455
no shutdown
ft interface vlan 999
ip address 10.1.1.1 255.255.255.0
peer ip address 10.1.1.2 255.255.255.0
no shutdown
ft peer 1
heartbeat interval 300
heartbeat count 10
ft-interface vlan 999
ft group 1
peer 1
no preempt
priority 110
associate-context Admin
inservice
ip route 0.0.0.0 0.0.0.0 172.25.45.1
Hope you will reply me soon
Thanks....!
-Amal-

ACS migration from 4.1.1.23 to 5.6

Dear Team.
We need to upgrade an ACS 4.1.1.23 to a new ACS 5.6. This means a data migration from ACS 4.1.1.24 to 5.6
The migration guide says that the migration utility must be run on a 4.1.1.24 to check the DB integrity and make some modifications.
Our client has an ACS 4.1.1.23.
In the Cisco Download page for ACS 4.1.1.24 there isn't any acumulative patch to 4.1.1.24. Anyone has any idea how we can upgrade the ACS 4.1.1.23 to .24?
After this patch will be applied, we will backup data from 4.1.1.24 to migration server 4.1.1.24 with demo license (this file exist on Download Center)
Thanks.

You can upgrade to 4.2 and then to 5.6
ACS 4.2 with the recovery DVD, no need to upgrade to ACS 4.1.1.24 and then to 4.2.
Remember to make a backup before the upgrade.
There is a feature that allows you to restore any ACS 4.1 backup into ACS 4.2.
"Before you begin any upgrade procedure, we recommend that you back up your existing data and configuration. When, upgrading do a re-image of ACS 4.2 and then restore the ACS 4.1 configuration."
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/upgap.html#wp1120037
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/user/guide/acsuserguide/migrate.html#pgfId-1057975

Migrating from CUCM 8.6 to CUCM 10.0 - Do I have to upgrade presence as well?

Hello Raees,
I've got a question regarding the Migration from CUCM 8.6 to 1.0, I went through the below "Ask the Expert" article.
https://supportforums.cisco.com/discussion/12103966/ask-expert-cisco-unified-communications-manager-cucm-version-100
My question is, the CUCM 10.0 upgrade mentions the following on page 22
"Refresh upgrade of Unified Communications Manager nodes only
Complete the high-level tasks listed in this section when you want to perform a refresh upgrade of only the
Unified Communications Manager nodes in your network. When you upgrade Unified Communications
Manager nodes without upgrading IM and Presence nodes, ensure that the installed version of the IM and
Presence Service is compatible with the new version of the Unified Communications Manager software."
I would only like to Upgrade the CUCM nodes but the client is using Presence 8.6 as well, would I have to upgrade Presence 8.6 to something else as well or can I just upgrade to CUCM 10.0 and the presence 8.6 would work with it, if I have to upgrade Presence as well then what version of Presence would I have to upgrade to and for the "Refresh Upgrade for Presence" can you mention the SKU that I got to get off the Product Upgrade Tool.
Since it's going to be a Refresh Upgrade for CUCM from 8.6 to 10.0 can you as well provide me with the SKU for the upgrade that I got to purchase, I can see two of them as follows:
UCM-10.X-SW-K9-XU=
CUCM Software Version 10.X for PUT Only, Export Unrestricted
UCM-10.X-SW-K9=
CUCM Software Version 10.X for PUT Only
Thanks
Aamer

Thank you for the reply Chris,
I have a few more questions with regards to what you mentioned in your reply, I'd be glad if you could clarify:
I have not dealt with IMP before...
1) is it like a plugin that runs on CUCM instead of a full fledged server or is it a stand alone server like CUPS (just renamed/rebranded).... I have till date been dealing with CUPS as a stand alone server that integrates with CUCM via the CUCM -> System-> Application Server Option.
2) If it's a plug-in then how would the upgrade be done from the CUPS Stand Alone to this IMP that runs within the CUCM Server or would it be a fresh installation or some activation of services within CUCM... and if it's a stand alone server then what Upgrade Image do I need to upgrade CUPS 8.6.4 to IMP 10.0 or 10.5.
I'm sorry but the upgrade path for CUPS 8.6.4 to IMP 10.0/10.5 is not clear for me, could you help me understand the migration for CUPS 8.6.4 to IMP 10.0/10.5..... could you as well advise any documentation that shows detailed steps for the upgrade from CUPS 8.6.4 to IMP 10.0/10.5... the CUCM upgrade is clear to me from the Upgrade Guide.
Thank you
Aamer

Migrating from ICM scripts to CVP-VXML Apps

Good day all.
Currently we are running on:
ICM 7.2
CVP 4.1
CUCM 6.
Call flow: using ICM-Script Editor
Applications: Using apps deployed on CVP-VXML server. they are called in ICM scripts.
Well my dilemma is this. We have planned to move all call flows from ICM-Scripts to Call Studio based apps/Scripts.
Now I have studied Call studio and VXML flows, and know that CallStudio/VXML scripts can be run directly from Gateway->ICM->CVP/VXML or in the traditional way called in ICM script.
If we deploy a full Standalone model with ICM lookup (no ICM scripts involved) then how is call queing for SkillGroups/agent transfers handled? do call studio based scripts have the capability, or will we have to include ICM scripts for this?
Secondly, when migrating from ICM scripts to Standalone+ICm lookup model, the current gateway configurations (ie apps, Dial plan and Dial plan to script matching for EACH dialed number) will have to be reconfigured? So as the Dialled number will directly translate to the IVR menu on VXML script?
Need expert inputs on this.
Regards,
AAK.

Hi Asif,
When you use the CVP as Standalone model, its purely for SelfService, Queuing is not possible even if you use Standalone with ICM Lookup. There is no concept of SkillGroups using CVP as Standalone
After the self service treatment is done, you can either transfer the call to CUCM or TDMACD
If you need queuing, you have to go for Comprehensive model.
If you want to go for a StandAlone Model, You will need to configure the Application Name, VxmlServer everything in the Gateway. Have a look at the config guide for CVP Standalone section
http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/customer_voice_portal/cvp4_1/configuration/guide/cvp41cfg.pdf
Regards,
Senthil

Urgent!!! Cisco ACE and asymetric routing assistance needed

I am wondering if someone can give me pointers on the cisco ACE
and asymetric routes. I've attached the diagram:
-Cisco IOS IP address is 192.168.15.4/24 and 4.1.1.4/24
-Firewall External interface is 192.168.15.1/24,
-Firewall Internal interface is 192.168.192.1/24,
-F5_BigIP External interface is 192.168.192.4/24,
-F5_BigIP Internal interface is 192.168.196.1/24 and 192.168.197.1/24,
-host_y has IP addresses of 192.168.196.10/24 and 192.168.197.10/24,
-Checkpoint has static route for 192.168.196.0/24 and 192.168.197.0/24
pointing to the F5_BigIP,
-host_y is dual-home to both VLAN_A and VLAN_B with the default
gateway on host_y pointing to VLAN_A which is 192.168.196.1,
-host_x CAN ssh/telnet/http/https to both of host_y IP addresses
of 192.168.196.10 and 192.168.197.10.
In other words, from host_x, when I try to connect to host_y
via IP address of 192.168.197.10, the traffics will go through VLAN_B
but the return traffics will go through VLAN_A. Everything
is working perfectly for me so far.
Now customer just replaces the F5_BigIP with Cisco ACE. Now,
I could not get it to work with Asymetric route with Cisco ACE. In
other words, from host_x, I can no longer ssh or telnet to host_y
via IP address of 192.168.197.10.
Anyone knows how to get asymetric route to work on Cisco ACE?
Thanks in advance.

That won't work because ACE uses the vlan id to distinguish between flows.
So when the response comes back on a different vlan, ACE can't find the flow it belongs to and it drops it.
Even if we could force it to accept the packet, ACE would then try to create a new flow for this packet and it will collide with the flow already existing on the frontend.
You would need to force your host to respond on the same vlan the traffic came in.
This could be done with client nat on ACE using different nat pool.
Gilles.

Can I migrate from WCS 7.0 to PI 1.2. If so, what are the guidelines for migration?

Can I migrate from WCS 7.0 to PI 1.2. If so, what are the guidelines for migration? Do we have any Instructions/steps?

Migration from WCS 7.0 to PI 1.2 can be performed. If the customer wants to migrate data you need to first upgrade to NCS 1.1.1 You can download NCS 1.1.1 from Cisco.com if you have a valid service contract.
For the migration step involving NCS an evaluation license is sufficient. You can obtain an NCS evaluation license from http://www.cisco.com/go/license > Get Demo > Network Mgmt Products > Cisco Prime NCS Evaluation License.
Instructions for migrating data from WCS 7.0 to NCS 1.1.1 are available in NCS 1.1.1 Release Notes. Do not upgrade to NCS 1.1.2 as this release is not upgradeable to Prime Infrastructure 1.2. If you are ordering a Cisco Prime physical appliance (PRIME-NCS-APL-K9) be sure to select the NCS 1.1 image which you can later upgrade to Prime Infrastructure 1.2 after you have migrated your WCS data.
There is a post in the support forum which can be refered.
https://supportforums.cisco.com/docs/DOC-26972

Migration from WLSM to WiSM

does anyone have a link or any reading material for migration from WLSM to WiSM. Also quick questions for all the expert or any body thats done this before.
1. Is it safe to install both the WiSM and also the WLSM in the save chasis during migration?
2. Will there be an issue running the same ssid on different vlans.
thanks for all the help before hand....

thx for the reply and the link. I have that link it is the only link i can find on cisco site for this migration, but it still didnt answer most of my questions. I will take this up with TAC. This migration is a big process and there is only a 10 page white paper on it. It doesnt seem right.

Migration from F5 to Cisco ACE

Similar Messages

Maybe you are looking for