Secondary IP address support on CSS-11503

Hi, I´d like to know whether it is allowed to configure a secondary IP address on a CSS' interface, as it is on Cisco routers. If so, how can it be done?
Thanks,
Enrique

you can have multiple addresses define on a circuit.
ie:
circuit VLAN1
ip address 10.1.1.1 /24
exit
ip address 20.1.1.1 /24
Regards,
Gilles.

Similar Messages

Will Exchange ever support sending mail from a secondary smtp address?

Most here probably know this but a quick recap:
User has PrimarySMTP address of [email protected] and secondary SMTP of
[email protected] In Outlook, if you set the secondary SMTP address in the "From" field, Exchange will throw an "undeliverable" error stating you're not authorized to send mail as
this user. I know there's
3rd party tools that can help you with this, and ways to circumvent this (using extra accounts or distrigroups) but it's actually really annoying. I've been involved with a lot of companies with different brands (and a domain for each brand) and
who want to communicate with the outside world using these different brandnames. One salesmanager could be involved with different brands and right now you'll have to create a new account or group for each and every brand/domainname.
With every new Exchange one of the first things I check if this behaviour has changed.. Will this ever be implemented? Is there anyone here that could shed some light on that? Is there a reason why this does not change?
Kind regards,
Remco Roxs

Nobody who participates in these forums knows what the future holds at Microsoft. If we did, we wouldn't be able to share it with you in any case because we'd be sworn to secrecy.
Just buy this for your sales manager: http://www.ivasoft.biz/choosefrom2007.shtml
Or just tell him to use two mailboxes.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

CSS 11503 load-balancing with MS Print Servers

We are trying to load-balance print server connections between 2 MS print servers. When we try to connect to the print servers name, (\\PS01) or even the VIP address, we get a Path not found error. However, if we direct the path to the actual name or ip address of the print servers (not the VIP), we can view all the queues and connect/print to them. Is this possible to do on the CSS 11503? Thanks.

Pete- Here is our config. See any problems?
configure
!*************************** GLOBAL ***************************
ip route 0.0.0.0 0.0.0.0 1.100.100.100 1
!************************* INTERFACE *************************
interface 1/2
bridge vlan 2
!************************** CIRCUIT **************************
circuit VLAN1
ip address 1.100.101.110 255.0.0.0
circuit VLAN2
ip address 10.100.249.1 255.255.255.0
!************************** SERVICE **************************
service ps01
ip address 10.100.249.5
active
service ps02
ip address 10.100.249.6
active
!*************************** OWNER ***************************
owner printserver
content L3_Basic
add service ps01
add service ps02
vip address 1.100.100.35

Adding secondary IP address

When adding a secondary IP addess to the public side of the BM 3.7
server do we need to specify the mask or can we just do a add secondary
ipaddress 111.111.111.111

Hi Pete,
the secondary Ip address must be in the same subnet as the primary IP
address, therefore you don't need to add a mask.
For instance, if the primary is
192.168.1.1/255.255.255.0
you can
ADD SECONDARY IPADDRESS 192.168.1.56
Note that if you want to bind an IP address that is NOT in the same
subnet as the primary IP address, you've to use inetcfg.
Caterina
Novell Support Connection Volunteer Sysop

CSS 11503 in Active Active mode

Can we configure CSS 11503 in Active/Active mode, means can multiple context would be configured?
Thanks & Regards,
Shahzad.

Here you go
Assumptions:
VIP 10.10.10.100 is Master on the CSS 2 and backup on the CSS1
VIP 10.10.10.101 is Master on the CSS1 and backup on the CSS1
Vlan 10 is the Server Vlan (Redundant Interfaces here)
Vlan 20 is the Client vlan (Redundant Vips here)
Services for VIP 10.10.10.100 (real server) have default gateway pointing to redundant interface 172.20.40.253
Services for VIP 10.10.10.101 (real server) have default gateway pointing to redundant interface 172.20.40.254
CSS #1
circuit VLAN10
ip address 172.20.40.1 255.255.255.0
ip virtual-router 1 priority 101 preempt
ip virtual-router 2
ip-redundant-interface 1 172.20.40.253
ip-redundant-interface 2 172.20.40.254
Circuit VLAN20
ip address 10.10.10.1 255.255.255.0
ip virtual-router 3 priority 101 preempt
ip virtual-router 4
ip redundant-vip 3 10.10.10.101
ip redundant-vip 4 10.10.10.100
CSS #2
circuit VLAN10
ip address 172.20.40.2 255.255.255.0
ip virtual-router 1
ip virtual-router 2 priority 101 preempt
ip-redundant-interface 1 172.20.40.253
ip-redundant-interface 2 172.20.40.254
Circuit VLAN20
ip address 10.10.10.2 255.255.255.0
ip virtual-router 3
ip virtual-router 4 priority 101 preempt
ip redundant-vip 3 10.10.10.101
ip redundant-vip 4 10.10.10.100
More details at
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/VIPRedun.html#wp1112245
Syed Iftekhar Ahmed

Secondary IP address in ASA5510/PIX515e

Hi All,
Just want to know if there is a way to configure secondary IP address on the outside/public interface of ASA/PIX.
One of our clients have used most of their IP on the subnet given by their ISP. They use those IP's for statically
mapping to Servers inside their local LAN. Thus, they requested another block/subnet from their ISP. They will also
use this for static mapping/port forwarding to other servers in their network. The current UTM they are using is allowing this
but they would like to use ASA/PIX as their main Firewall. Is this even possible or is there
a workaround for this kind of scenario?
Many Thanks!

Lloyd
Pix/ASA firewalls do not support using secondary addressing on an interface. However the good news is that they don't need to.
As long as the ISP routes the new block of IP addresses to the outside interface of your firewall then you simply use the new block of IPs as you have the existing block ie. you set up static translations and allow access via the access-list.
The new IP block does not actually have to be allocated to an interface.
Jon

CSS 11503 Users using a proxy

I currently have a CSS 11503 LB that I am using to balance 443 and 80 traffic and I have it working but my question is if a users are coming from a proxy should I continue to use Layer 3 LB technique? Also is it possible to see the real IP address instead of the IP of the proxy server?

the problem with proxy is if you use some form of stickyness like sticky src ip.
Since the src ip is always the proxy, you end up with all your traffic going to a single server.
If you are doing sticky src ip, I would suggest to use arrowpoint-cookie instead.
To see the real-ip you need your proxy to insert in the http header a 'x-forwarded-for' line with the client ip.
Your servers can then extract this value to determine the client ip.
On the CSS you won't be able to see the client-ip.
Gilles.

RADIUS and Secondary IP addresses - TID10060454

I found this TID from 2002 and wondering if the enhancements have been
made to allow radius to be bound to secondary IP addresses? I would like
to be able to Load radius in a clustered environment and cannot. I
realize radius isn't officially supported, but is there any advice with
regard to redundancy given the current restrictions? Can the DAS object
be loaded on more than one server at a time without creating issues?
Seems that would be to simple of an answer.

RADIUS _IS_ officially supported by Novell.
The TID you referenced indicates a problem that RADIUS has on multi-homed
servers. RADIUS will run on multi-homed servers, as you have seen. However,
it will bind to all of the interfaces, but will only send responses on the
primary interface.
You cannot load RADIUS more than one time on a server. For redundancy you'll
have to set up an additional RADIUS server using the same DAS object.
>>> <[email protected]> 1/18/2005 9:48:31 AM >>>
I found this TID from 2002 and wondering if the enhancements have been
made to allow radius to be bound to secondary IP addresses? I would like
to be able to Load radius in a clustered environment and cannot. I
realize radius isn't officially supported, but is there any advice with
regard to redundancy given the current restrictions? Can the DAS object
be loaded on more than one server at a time without creating issues?
Seems that would be to simple of an answer.

Static NAT for Secondary IP addresses

I am running a Novell SBS 6.0 SP4 server w/Border Manager 3.6 Sp2 with two
Netcards. My Two public IP address w/different subnets on the same Net
card will keep running but the secondary IP address fail after a few
hours, but can be pinged from inside the Network. The following is how my
config is setup:
Netcard #1(public):
IP #1 - 66.170.173.100 Subnet 255.255.255.240
Static/Dynamic 66.170.173.17 -> 192.xxx.1.22
66.170.173.18 -> 192.xxx.1.23
66.170.173.20 -> 192.xxx.2.25
IP #2 - 66.170.173.17 Subnet 255.255.255.248
Static/Dynamic - Disabled
Secondary Ip Address bound -> 66.170.173.18
-> 66.170.173.20
Netcard #2 (private)- 192.xxx.1.16
The modem is connected directly to Netcard #1 with not router between
them. Is there something wrong with this setup or is there something else
I have to do? My filters seem to be working fine as far as I know.
Thank you,
[email protected]

> hi Ken,
>
> do you have a way to verify that the secondary IP addresses work
properly if
> they're associated to another device?
> What's the agreement you have with your ISP about the two subnet of
> addresses? Are they aware that they're associated to the same physical
> device? I'm wondring if there is something wrong in the wireless system
that
> prevents ARP from working properly in that configuration.
>
> --
> Caterina Luppi
> Novell Support Connection Volunteer Sysop
> <[email protected]> wrote in message
> news:zj7mc.1918$[email protected]..
> > > Hi Ken,
> > >
> > > > Whos router are we talking about? Is it the modem of the ISP just
> > before
> > > > my server or my internal switches for my workstations?
> > >
> > > sorry, my bad. I was referring to the modem of the ISP. I suspect
this
> is
> > > not a modem only, right? I mean, you have an ethernet connection
between
> > the
> > > modem and the BM server, correct? In this case the device of your
ISP is
> > a
> > > modem/router, not a modem only.
> > > Are you using DSL or cable?
> > > --
> > > Caterina Luppi
> > > Novell Support Connection Volunteer Sysop
> > >
> > >
> > Yes, we are running wireless DSL. They called it a modem, but it might
be
> > a router.
> >
> > [email protected]
>
>
I just received an email back from the ISP and they said they have had
troubles with that modem and ARP tables. They are going to swap out the
modem when they get the new type of modems in. I will post back the
outcome when they swap them out.
Thank you for the help,
[email protected]

CSS 11503 does not ask confirmation

Hi,
Our CSS 11503 does not ask confirmation when I want to delete or add a service, owner or group.
Here is the log of some deletion and addition a service:
11503_Master(config)# sh run ser mtsopa01-9700
service mtsopa01-9700
ip address A.B.C.D
protocol tcp
port 9700
keepalive type http
keepalive port 9700
active
11503_Master(config)# no service mtsopa01-9700
11503_Master(config)# (As you see there is no confirmation)
11503_Master(config)# service mtsopa01-9700
11503_Master(config-service[mtsopa01-9700])# (As you see there is no confirmation)
11503_Master(config-service[mtsopa01-9700])# ip address A.B.C.D
11503_Master(config-service[mtsopa01-9700])# protocol tcp
11503_Master(config-service[mtsopa01-9700])# port 9700
11503_Master(config-service[mtsopa01-9700])# keepalive type http
11503_Master(config-service[mtsopa01-9700])# keepalive port 9700
11503_Master(config-service[mtsopa01-9700])# active
Have you any idea?
PS:
Version: sg0750103 (07.50.1.03)
Product Name: CSS11503-AC J0

do a 'show profile'
You are probably in expert mode.
CSS11503-2# sho prof
@no terminal more
@prompt CSS11503-2
@expert <=====
do 'no expert' to revert to normal mode and don't forget to do a save profile.
Gilles.

Routing issue with CSS 11503

The senerio contains a PIX 515 E firewall,4507R Chassis switch and a CSS 11503. The servers in inside zone of the PIX is load balanced using a vip with default route specified in the CSS is the inside zone interface IP of the PIX
Now I would like to load balance the servers in the DMZ zone of the PIX with a separate vip(from DMZ zone) in the same CSS. Since the default route in CSS is towards the inside zone of the PIX, I am unable to see the load blanced pages from dmz. Is there any solution to load balance the servers of the 2 zones with 2 different vip's using a single css ?

The default behavior is to use the calling device's CSS for the redirected calls. In your case it sounds like you want to use the redirecting device's CSS. I haven't tried this myself but I believe you will need to change the following registry entry on your PGs. You will want to use option 2 (ROUTEADDRESS_SEARCH_SPACE).
HKEY_LOCAL_MACHINE\SOFTWARE\Cisco
Systems,Inc.\ICM\IPCCL\PG1B\PG\CurrentVersion\JGWS\jgw1\JGWData\Dynamic
"UseRouteAddressSearchSpace"=dword:00000000
- Used to control behavior on CTI Route Points for Route Selects.
UseRouteAddressSearchSpace can be to set 0, 1, or 2 where :
DEFAULT_SEARCH_SPACE = 0
CALLINGADDRESS_SEARCH_SPACE = 1
ROUTEADDRESS_SEARCH_SPACE = 2

Any limit to number of secondary ip addresses?

Hi,
Is there any limit to the number of secondary ip addresses on an interface of a router?
I just took over an existing live system.
The previous engineer configured secondary ip addresses on a single physical interface.
Currently, there are 1 main ip address and 2 secondary ip addresses.
I am not allowed to change the existing configuration nor disrupt the existing live system, so I cannot use sub-interface.
When I tried to add 1 more secondary ip addresses, to make it 1 main ip and 3 secondary ip address,
but no matter how I tried, I cannot ping to the end device of this NEW secondary ip address subnet
So I removed one of the existing secondary ip address, I discovered I can ping to the end device of the NEW seconday address!!!
But when I put back the one I removed, I can no longer ping to the end device of the NEW secondary address AGAIN!
I suspect that there is a limit to the number of secondary addresses that can be configured on the physical address.
But, I check the link http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012d8f7.shtml#q21, it says
Q. What are the maximum number of secondary IP addesses that can be configured on a router interface?
A. There are no limits on configuring secondary IP addresses on a router interface. For more information, refer to Configuring IP Addressing.
I think Cisco could be wrong when saying "There are no limits".
Can someone kindly help me confirm whether there are any limits to the number of secondary ip addresses on an interface of a router?
thank you

Hi,
The main ip and secondary ip addresses are all subnetted into 255.255.255.240.
Main IP 172.16.21.155
Secondary IP#1 = 172.16.21.141
Secondary IP#2 = 172.16.21.93
New Secondary IP#3 = 172.16.21.226
As a test, I simply remove any of the existing secondary ip addresses, and it works!
But when I put back any of the addresses I removed, the new one does not work again.
If it is ture there is no limit, can it be due to other factors like the router hardware?
Pls kindly advice.
Thank you.
Rgds,
Rachel

Message Tracking logs for secondary smtp address

Hi,
There are many people sending mails to secondary smtp address instead of primary smtp address. How can i pull the report of message tracking logs if they sent it to secondary smtp address using get-messagetrackinglog cmdlet?
Sankar M http://messagingdevelopment.blogspot.in/

Hi Sankar,
If I don't understand your description, it seems that you want to get the message tracking log on an mailbox with primary SMTP address and secondary SMTP address.
If it is the case, please add both primary SMTP address and secondary SMTP address to the "Recipients" parameter. More details to see:
http://technet.microsoft.com/en-us/library/aa997573(v=exchg.150).aspx
Thanks
Mavis Huang
TechNet Community Support

Cannot ping secondary IP address on subinterface from SVI interface.

Hi to all.
We have a border router with lots of subinterfaces and some of them have few secondary networks from different subnets on it. I've configured SVI interface on same VLAN in same subnet, but can't ping from this SVI the secondary address, that applied on subinterface on a router.
It seems strange, because on other subinterface, with few secondary networks - all works fine.
All links between swithes and routers are in trunk mode, all switches contains appropriate vlans on their vlan.dat, all appropriate vlans are allowed on switches, all arp entries are present on border router and on switches, all appopriate mac addresses are in mac-add table present.int v
BR conf:
int gi0/1.10
encapsulation dot1q 10
ip add 192.168.1.1 255.255.255.0
ip add 192.168.2.1 255.255.255.0 secondary
int gi0/1.20
encapsulation dot1q 20
ip add 192.168.10.1 255.255.255.0
ip add 192.168.11.1 255.255.255.0 secondary
sw101 conf:
int vlan10
ip add 192.168.1.2 255.255.255.0
no ip route-cache
int vlan20
ip add 192.168.10.2 255.255.255.0
no ip route-cache
ip default-gateway 192.168.1.1
sw102 conf:
int vlan10
ip add 192.168.1.3 255.255.255.0
no ip route-cache
int vlan20
ip add 192.168.10.3. 255.255.255.0
no ip route cache
ip default-gateway 192.168.1.1
Connection scheme is trivial: br-->sw101-----L2VPN(QinQ) ISP-->sw102
ping 192.168.1.1 from sw101 & sw102 are successful.
ping to 192.168.10.1 from sw101 & sw102 are fails (sometimes some packets reach to destination - about 1-2 from 5 sended packets)
When i remove secondary ip address from BR (192.168.11.1/24) subinterface - all works fine.
Cannot understand, what's wrong ?
br - 7206VXR (NPE-G2)
sw101 - WS-C3560X-48T-L
sw102 - WS-X45-SUP7L-E
I haven't attach the other configurations of ports (trunk port configuration, vlan database and etc) bcoz i believe the problem not in L2 Layer, i think problem as for arp entries.
P.S. Sorry guys for my english, sorry for probably a stupid question, but i really can't catch it - pls help me to understand that.

Hi sgulyamov,
did you try to debug ARP request on Br ?
Could you post the configuration of the Swtich interface connected to Br ?
Bye,
enrico

CSS 11503 - question on version

We're about to do an annual OS update to our CSS 11503, and I noticed that there are two current versions of WebNS, both released in the same month: 8.10.4.01 and 8.20.2.01. Could anyone outline for me the differences between the two (or point me to the right release notes)? I usually upgrade to the latest release, but having two at the same time is awfully confusing.
Thank you!

They are essentially the same.
We always port all fix to both of them.
Release notes are here :
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.10/release/note/RN810_X.html
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/release/note/RN820_X.html
Gilles.

Secondary IP address support on CSS-11503

Similar Messages

Maybe you are looking for