Question about Load Balancing Wireless connections using WLC- F5- ISE

Hi all,
Can anyone give me some orientation how the radius auth process/handshake between the WLC and ISE changes once the F5 is installed in the middle in order to perform load balancing?
We can do some kind of load balancing by configuring different radius servers on each WLC for which, I must configure the same shared secret in the WLC and ISE so the radius request/accept could be processed.
Now that we have the F5 in the middle, do I need to create/configure the same shared secret in the F5 so radius transactions can be processed by this device?. Based on the following link, I must configure the F5 in the ISE like another NAD device (similar to the WLC) but I do not know if this additional configuration in the ISE includes the Auth parameter to be added in the ISE NAD (F5) configuration.
How to properly use a load balancer in Cisco's Identity Services Engine
http://www.networkworld.com/community/blog/load-balancing-cisco-identity-services-engine
Our sheme is shown next,

When you covert the pair into SSO, all the APs will go to the ACTIVE unit. No unit will "live" in the standby unit because this unit will "share" the AP-support license between the two.
This is the first step you need to get sorted. Send an email to [email protected] and give them the exact details of what you want to do (i. e. AP SSO) and then provide the serial number of your nominated active WLC and the serial number of your nominated standby WLC.

Similar Messages

Question about Load balancing with IISPROXY

          Hi,
          We are running WLS 5.1.0 SP5 on NT 4.0 SP6. We are not using clustering.
          We are able to round robin between multiple instances of the WLS successfully.
          Question: If one of the instances of WLS goes down, is there any way to configure
          the plugin to take it out of the loop automatically (without using clustering)?
          Thanks,
          Anil.


This is not the syntax. Syntax is just this:
          MaxSkips=something.
          eg: MaxSkips=25
          The doc says:
          5:10:1000 for min:default:max
          By which we mean that default value is 10, max is 1000 and min is 5. I guess the
          docs are confusing about the syntax here. We will correct them.
          --Vinod.
          Anil Kommareddi wrote:
          > Vinod,
          > I could not find any documentation on the MaxSkips parameter except in the Service Pack
          > docs. The syntax is MaxSkips=min:default:max.
          >
          > how do the min and max parameters work?
          >
          > Vinod Mehra wrote:
          >
          > > Even if the servers in the WebLogicCluster list are non clustered you WILL be
          > > able to do load balancing. But the problem is if the servers go down the plugin
          > > will not remove them. But it not that bad. If an connection attempt fails the
          > > server is marked as bad and will be skipped for the next MaxSkips (default=10)
          > > cycles of load balancing. MaxSkips parameter is configurable for IISProxy
          > > (SP4 onwards, I think).
          > >
          > > -Vinod.
          > >
          > > Prasad Peddada wrote:
          > >
          > > > I believe there won't be any load balancing unless you use servers in a cluster. As
          > > > an alternative you can use hardware load balancers directly in a situation like this.
          > > >
          > > > Anil Kommareddi wrote:
          > > >
          > > > > Hi,
          > > > >
          > > > > We are running WLS 5.1.0 SP5 on NT 4.0 SP6. We are not using clustering.
          > > > > We are able to round robin between multiple instances of the WLS successfully.
          > > > >
          > > > > Question: If one of the instances of WLS goes down, is there any way to configure
          > > > > the plugin to take it out of the loop automatically (without using clustering)?
          > > > >
          > > > > Thanks,
          > > > > Anil.
          > > >
          > > > --
          > > > Cheers
          > > >
          > > > - Prasad

Question about Load Balance SFTP service by using CSS1150X

Does anyone come across of load balancing SFTP service by using CSS1150X? Typically by configuring CSS1150X to load balance FTP service, the configuration will as follow:
content ftp_rule
vip address 192.168.3.6
protocol tcp
port 21
application ftp-control
add service serv1
add service serv2
add service serv3
active
group ftp_group
vip address 192.168.3.6
add service serv1
add service serv2
add service serv3
active
However, for my personal understanding and knowledge, I will configure my CSS1150X as follow to load balance SFTP service:
content sftp_rule
vip address 192.168.3.6
protocol tcp
port 22 //Change 21 to 22
application ftp-control
add service serv1
add service serv2
add service serv3
active
group sftp_group
vip address 192.168.3.6
add service serv1
add service serv2
add service serv3
active
My question is, "application ftp-control" in content "ftp_rule" is still applicable to SFTP or not?

I believe application ftp-control would not be used for sftp.
This might cause the session to get dropped when there is no data channel created and cause issues with long connections.
Hope it helps!!

Question about load balancing between Portal and ABAP

Hi,
I have the problem whit load balancing between Portal and ECC (ERC) ABAP
Exist two system:
1) ECC (ERP) ABAP = Backend Module = HR
2) EP (JAVA) = Frontend
The users (9000 users) logon in the EP and run query (data personal) in the ECC. The problem to all user connect in Central Instance and not in the Dialog Instance.
How can balancing the conecction HTTP (EP) to ECC (ABAP)??
I need balancing in the ECC to Dialog Instance

Jco -> right. Another possibility is that you use iviews that point to the backend in this case you will need to use a load balanced entry for the backend system in the [system landscape|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/47/8c1e438d7017fce10000000a42189c/frameset.htm] -> SAP_R3_LoadBalancing
If you have ESS deployed on your portal, you will most probably need to do both.
Cheers Michael

Question about the CSS behavior when using layer 3 sticky and sticky table

Hi everyone,
I have a question about the CSS behavior when using layer 3 sticky and sticky table is full.
If I configure layer 3 sticky and specify the inactivity timeout as below, how does the CSS
handle subsequent needed sticky requests ?
advanced-balance sticky-srcip
sticky-inact-timeout 30
CSS document says that
Note:
If you use the sticky-inact-timeout command to specify the inactivity timeout
period on a sticky connection, when the sticky table becomes full and none of
the entries have expired from the sticky table, the CSS rejects subsequent
needed sticky requests.
My question is what is the next reaction by doing the CSS if the CSS is in the
following condition:
when the sticky table becomes full and none of the entries have expired from
the sticky table, the CSS rejects subsequent needed sticky requests
Does CSS just rejects/drops subsequent needed sticky requests ?
or
Does CSS does not stick subsequence requests to particular service but CSS forward
subsequence requests with round-robin basis ? which means if the sticky table is full,
the CSS just works round-robin load balancing fashion for subsequence requests ?
Your information would be appreciated.
Best regards,

Hello,
There is a good document explaining this on Cisco web site
http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a0080094b4b.shtml
It depends if the sticky-inact-timeout is used or not. If not, it's FIFO (the oldest entry in the sticky table is removed). If yes, the CSS will reject the next sticky request.
Rgds,
Gaetan
Rgds
Gaetan

I would like a Question About Flexconnect HA N+1 After WLC 1 Down and AP go to Joint WLC 2

Hi everyone
I would like a Question About Flexconnect HA N+1 After WLC 1 Down and AP go to Joint WLC 2
-Cisco WLC 8500 = 2 unit version 7.6.130.10
-Mode Flexconnect HA N+1
-AP Joint WLC 1 and 2 mode HA N+1
I would like After WLC 1 Down is AP Go to joint WLC 2 Client associate in AP can use DATA Traffic between AP Failover ??
I think Mode Flexconnect client can use data traffic if WLC 1 , 2 Down becasuse Mode flex data traffic not go to WLC ??
I think true ??
thank you

Hello
You should try a flexconnect deployment
combined with locally switched SSIDs, which
should comply with your requirements.
fp

Newbie question about loading servlets on tomcat

I have what is probably a very basic question about loading simple servlets on to tomcat to test its installation. I have followed instructions from numerous tutorials to the letter but still I can't get it to work.
I have installed tomcat on win2k in c:\tomcat. I set up the jdk, environment vars (JAVA_HOME, CATALINA_HOME, TOMCAT_HOME) which all point at the correct dirs. I can compile a servlet without errors. I can also place a test jsp and html file into the root directory and they both work fine.
However, now I am trying a test servlet and no matter what I do it gives me a 404. I have a servlet class file called "HelloServlet.class" which I placed into the %install_dir%\webapps\ROOT\WEB-INF\classes directory. I try to reference it using this url:
http://localhost/servlet/HelloServlet
Tomcat is configured to use port 80 and has been restarted after adding the servlet class file. Does anyone have a clue why this is not working for me?
Many thanks
Marc

You have to add in the web.xml file that it is in the WEB-INF dir, the information about your servlet. An example:
<web-app>
<servlet>
<servlet-name>HelloServlet</servlet-name>
<servlet-class>HelloServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>HelloServlet</servlet-name>
<url-pattern>/HelloServlet</url-pattern>
</servlet-mapping>
</web-app>

About load balancing in rac

Dear Gurus
I want to ask about load balancing in RAC.
we have two nodes rac1 rac2 with physical ip as virtual ip as
rac1 rac2
physical 10.22.1.50 10.22.1.51
virtual 10.22.1.54 10.22.1.55
and two appliction servers app1 app2.Actually in tns file of app1 there is entry of virtual ip of rac1 (10.22.1.54)and in app2 virtual ip of rac2 (10.22.1.55). so we want to test whether load balancing is happening or not .like if app2 is down so whether the connection of app1 moving to rac2 also or not
so we down app2 and check.Guys tell me how could i check in that duration that whether connnection going to rac2.
i am unable to find the parameter of sessions connected in awr .Please tell how could i identify

i have stopped the IM's of one of my application server and checked the connections to my database with below query and according to it its connecting to both instances.Does it means that load balancing is happening fine.
SQL> SELECT inst_id, TO_CHAR(logon_time, 'DD-MON-YYYY HH24:mi:ss') "Hour when connected", count(*) "DB Sessions"
2 FROM gv$session
3 WHERE type = 'USER' and TO_CHAR(logon_time, 'DD-MON-YYYY HH24:mi:ss') like '%05-OCT-2011 17%'
4 GROUP BY inst_id, TO_CHAR(logon_time, 'DD-MON-YYYY HH24:mi:ss')
5 ORDER BY inst_id, TO_CHAR(logon_time, 'DD-MON-YYYY HH24:mi:ss');
INST_ID Hour when connected DB Sessions
1 05-OCT-2011 17:20:06 1
1 05-OCT-2011 17:27:18 1
2 05-OCT-2011 17:11:31 1
2 05-OCT-2011 17:26:28 2
2 05-OCT-2011 17:26:38 1
2 05-OCT-2011 17:27:18 1

Question about loading and using Images.

I know how to load an image and to draw it onto a canvas etc etc. However my question is to do with the efficiency of loading multiple images (possibly the same image!) and using them together. I have multiple objects, all instances of the same class, which all draw themselves onto a screen in different positions. However they all use the same 3 images (depending on an internal state).
So if I create 5 of these objects and each object calls to load the same image using something along the lines of:
url = this.getClass().getResource("MyImage.png");
normalImage = Toolkit.getDefaultToolkit().getImage(url);Does this mean that in the memory there are 5 exactly the same copies of this image? Or does java do something clever and use one image that they would all reference? I suspect I will have 5 in memory but I wanted to ask about this before going and making an imageManager class where I load all the images and just use getMethods in that when drawing. I will not be preforming any transforms or anything on any of the images so they can all literally be the same image but simply drawn in multiple positions on the one canvas.
(note: I am using active rendering to draw these images myself and then blit it to the screen ...).

Use ImageIO rather than Toolkit--with Toolkit you need to use a MediaTracker to ensure you have your image loaded before you try to use it.
If you load an image and then do this:
MyImage1 = MyImage;
MyImage2 = MyImage;
MyImage3 = MyImage;
There are 4 references to the Image in MyImage. If you don't specifically use a method that gives you a new Image, usually, you are getting a refrence to an image already loaded in memory.

ACE load balancing and testing using soapUI

Hey, I am trying to crowd source a solution for this problem.
A client is testing using soapUI to an application that is being load balanced via ACE. There are two webservers behind the VIP servicing the client request. When client tests, requests are timing out per the soapUI log. A packet capture was taken and it clearly shows that ACE is not forwarding the HTTP data back to the client. When client tests by bypassing the ACE load balancer, it works fine. But, there are other clients from other applications that are making successful connection to the load balanced application via the VIP.
Question, is there any thing unique with making HTTP/XML based requests using soapUI? LB configuration is shown below:
class-map match-all EAI_PWS_9083
2 match virtual-address 10.5.68.29 tcp eq 9083
serverfarm host EAI_PWS_9083
description WebSphere Porduction
failaction purge
probe tcp9083
rserver ESSWSPAPP01 9083
    inservice
rserver ESSWSPAPP02 9083
    inservice
policy-map type loadbalance first-match L7_POLICY_EAI_PWS_9083
class class-default
    serverfarm EAI_PWS_9083
policy-map multi-match L4SLBPOLICY
class EAI_PWS_9083
    loadbalance vip inservice
    loadbalance policy L7_POLICY_EAI_PWS_9083
    loadbalance vip icmp-reply active
    appl-parameter http advanced-options CASE_PARAM
parameter-map type http CASE_PARAM
case-insensitive

Hi,
Your configuration looks fine. I am not familiar with soapUI but if it is like a normal TCP connection followed by HTTP requests, i don't see why this shouldn't work.
Do you know if there is a difference while using soapUI and normal request using browser?
Regards,
Kanwal

Question Cluster/Load balancing

Question about iplanet load balancing/Cluster:
Following discussion are based on iAS C++ engine(kcs).
We have four web servers and two iAS servers:
Web1, Web2, Web3, Web4
iAS1, iAS2
All machines run Solaris 8, web server is iWS4.1 SP6,
Application server is iAS6.0 SP2, and both iAS boxes have
same hardware configuration.
1. What's the best load balancing method for this structure?
Per Server Response Time(Web Connector Driven)
Per Component Response Time(Web Connector Driven)
Round Robin(Web Connector Driven)
User Defined Criteria(iAS Driven)
2. What's the criteria for the kxs engine to choose the kcs
engine to sent request if we set Web Connector Driven
load balancing?
3. If we set iAS driven load balancing, what's the criteria
for the web connector used to choose kxs?
4. We got a problem when run load testing for an AppLogic
in this cluster, one iAS CPU average usage got almost
100%, but the other one is just 70%.
We used Per Server Response Time load balancing method.
Thanks.
Heng

see answers inline
hcao wrote:
Question about iplanet load balancing/Cluster:
Following discussion are based on iAS C++ engine(kcs).
We have four web servers and two iAS servers:
Web1, Web2, Web3, Web4
iAS1, iAS2
All machines run Solaris 8, web server is iWS4.1 SP6,
Application server is iAS6.0 SP2, and both iAS boxes have
same hardware configuration.
1. What's the best load balancing method for this structure?
Per Server Response Time(Web Connector Driven)
Per Component Response Time(Web Connector Driven)
Round Robin(Web Connector Driven)
User Defined Criteria(iAS Driven)
it depends on the characteristics and behaviour of your application
>
2. What's the criteria for the kxs engine to choose the kcs
engine to sent request if we set Web Connector Driven
load balancing?
kxs always does round robin to the kjs or kcs engines. The webconnector
selects the kxs to which to send to.
>
3. If we set iAS driven load balancing, what's the criteria
for the web connector used to choose kxs?
as specified by your criteria in the iAS driven section.
The ias instance will send its current list of preferences for ias
intances it got from the criteria to the webconnector. This information
is dynamic and updated constantly.
>
4. We got a problem when run load testing for an AppLogic
in this cluster, one iAS CPU average usage got almost
100%, but the other one is just 70%.
We used Per Server Response Time load balancing method.
again, this can be a valid result depending on the way your applogics
are written. Are they CPU bound, I/O bound or DB bound? Since individual
components execute differently and you specified to use the average of
those results to determine load balancing this can be a valid result
because differences in execution times of your applogics.
>
Thanks.
Hengregards
Han-Dat
Consulting Project Engineer
iPlanet Professional Services - ANZ
iPlanet e-commerce Solutions
- A Sun|Netscape Alliance
Sun Microsystems Australia Pty Ltd

Load Balancing - Wireless

Hi
If I'm reading correctly Load Balancing is not advisable if using voice of wifi.
On a conroler with 70.220 - Wireless - Advanced - Load balancing
Load balancing - client windows is default 5, max denial 3
But on the wlan, the load balancing isn't enabled..
Which one is the master setting?
We're boardcasting several SSIDs, one of them is a guest SSID, which is open, so we get the Apple devices autmaticaly associating to them.
So if we dont set the load balancing on each wlan, this means there is a msximum of 5 devices to 1 AP, doesn't matter which wlan it's on?
Is there a best practice guide for load balancing?
Clarrifaction would be great
Cheers
Craig

Craig,
Do not use load balancing for latency-sensitive WLANs, especially voice WLANs. Rejecting voice clients extends their roaming delay and can drop calls.
The setting on the WLAN Advanced tab determines whether or not clients associating to that WLAN will be denied if the load balancing algorithm determines the AP to which the client wants to associate is too loaded (determined by the global LB settings). If you have the box unchecked, then LB is not in effect for that WLAN and clients on that WLAN will never be rejected.
The load balancing algorithm is run against clients for an AP. The count of clients is cumulative for all WLANs, i.e., the load balancing numbers are not set and comared on a per-WLAN basis. This wouldn't make a lot of sense as the LB algorithm is attempting to keep clients physically spread across infrastructure radio resources, regardless of whether you have 1 WLAN or 5 WLANs active on the radio.
I don't know of a best practices guidefor load balancing other than don't use it on WLANs that have low-latency applications such as voice or live-streaming (unbuffered) video. The controller configuration guide is a good place to start and does a pretty good job of explaining how it works.
One other thing I would recommend is to make the algorithm less aggressive. I think max 3 denials is too high and would drop to 1 or 2. I'd also open up the LB window size to about 8 or 10 instead of the default 5.
I think some folks on the forums here have found some issues with LB, although I haven't run into too many so far. I think the AP sends a message type 17 and some clients have trouble processing it (or something like that). You might want to search the forums here and check the bug toolkit to see if there's anything that comes up.
Justin

Inquiry about Load Balancer 440

Hi
We are planning to buy the Barracuda Load Balancer 440- BBFI440a to be used as H/W load balancer for our applications and Ftp servers. We are using oracle application server 10.1.2.0.2 and Oracle BI and windows 2003 FTP server.
My question is, does the Barracuda load balancer certified with Oracle AS 10.1.2.0.2?
Thanks

Rich,
When multiple remote addresses are defined, Coherence does randomize the address list defined in the configuration file and connect to the next address in the list.
-Luk
Edited by: lsho on Jul 19, 2012 10:56 AM

Questions about Audigy 2 ZS connecti

Hello,
New to these forums, so bear with me. I'm considering purchasing an Audigy 2 ZS gamer card, and have some questions about the card and speaker setup. I've read the FAQ's in the forum, and they have been a big help, but I still have questions related specifically to my setup. Here's the system specs:
AMD Athlon 64 3000+
Asus K8V SE Deluxe
VisionTek Radeon X800 XT PE
Seagate 250 gig SATA HDD
gig Crucial ram
Antec P80 case
Antec TruePower 430 ps
Altec Lansing ADA885 digital speakers (awesome sound)
Altec Lansing headset (cheap but works for voice and gaming)
ADI AD980 onboard sound
Windows XP Home
. I currently am able to run both the speakers and headset at the same time by using the front panel audio outlets on the case (helps with the immersion in IL2 946). I would like to continue doing this(using front panel audio) with the new card. I've found several places that have an adapter cable for sale, http://www.x-tap.com/
http://www.performance-pcs.com/catal...oducts_id=2700
http://ask.americas.creative.com/SRVS/CGI-BIN/WEBCGI.EXE?New,Kb=ww_english_add,U={B8F6030-DA4F-D3-94F4-00500463020E},Company={CEAE26D-879-4C00-AC9F-03BC258F7B70},d=3025443648,VARSET=ws:http://us.creative.com,case=5764
The plug that I have has only 3 separators, not 4. Will this work with the Audigy 2? I don't have a link for this plug, unfortunately.
4. I had been considering purchasing? a set of USB headphones, but I've been told that when you plug them in, the sound is cut off for the speakers. If there was a workaround for this, I might consider getting them. Then I wouldn't have to use the front panel audio or the connections on the card.
5. I've heard of an issue with this particular set of speakers and the Audigy 2 card, particularly that the speakers were originally designed for a Dell system, and the wiring was phased differently than in other systems. Is this something to be concerned with, and if so, is there a workaround?
I like to research a particular product before I buy it, in order to make an informed decision and avoid problems if possible. Sometimes it works, sometimes it don't
Thanks in advance for the help.
Message Edited by mrj_455 on 03-05-2008 05:28 PMMessage Edited by mrj_455 on 03-05-2008 05:32 PM

The inputs are easy to find and select:?
Right-click the Mixer icon on the taskbar and select "Playback Devices".<
There should open a new Window with the options of "Speakers" and "SPDIF"<
With Speakers highlighted click the?"Properties" button on the lower?right corner<
Go to the 4th tab (I believe it is "volume" in english, "Pegel" in german)<
There you have your inputs!<
Unmute Line-In and set its volume according to your desires.<
Also remember that software designed for XP, that should control the Line-IN settings, (ie. Hauppauge WinTV or Dscaler) will be unable to do so in Vista, do to the architecture change. You can however enable "Compatibility Mode for Windows XP SP2" for these applications (right-click on their executable) and restore control of the inputs directly from the program. (You should however unmute it first as explained above). PS:? All Creative Software that came on the CD is incompatible to Vista. Only the included Audio Console should work as expected.Message Edited by alexs3d2 on 05-07-200707:3 PM

Query about Load-Balancer 'proxy'

Hi,
When using load-balancer 'proxy', with multiple remote addresses defined, does the client randomly select the initial connection from the list of remote connections in the config file?
I know the proxy will redirect a client to a less loaded proxy, however I want to distribute the initial connection randomly. In our configuration we will have a lot of extend clients. If they all connect to the first proxy in the list, this will cause that proxy to run hot (and possibly fall over).
Hopefully I've explained that ok? It's quite a tounge-twister of technical terms. Anyhow if someone knows the answer to this I'd be grateful, as I can't find any clarification in the documentation.
Cheers
Rich

Rich,
When multiple remote addresses are defined, Coherence does randomize the address list defined in the configuration file and connect to the next address in the list.
-Luk
Edited by: lsho on Jul 19, 2012 10:56 AM

Question about Load Balancing Wireless connections using WLC- F5- ISE

Similar Messages

Maybe you are looking for