WAAS with ACE - Use Ace or use WCCP or use PBR?

Wich is better to use, i need use two aces in HA (active x active). But the model of Switch Router is Enterasys and Enterasys dont have WCCP, but have TWCB(Transparent Web Cache Balancing (https://extranet.enterasys.com/sites/dms/DMSAssetLib/Documents/Feature%20Guides/twcbFeatGde041609.pdf), but my questions are:
1) I have two Aces too, the better is use Ace to do this or not? (In reality i think that is not the best way).
2) Somebody can say me if TWCB is the same of WCCP?
3) With PBR can i use two WAAS in active x active mode?
Thanks

Hi Luciano,
I tried to open the link you provided, but it's asking me for an Enterasys username and password so I couldn't find out what exactly this feature is. My guess is that it allows some transparent redirection similar to WCCP, but I have no clue how this is achieved. Therefore, I'm just going to speak about the other options.
The first thing I would like to say is that, if you have to choose between PBR and ACE, I would recommend you to use the ACE. The main problem of PBR is that the redirection needs to be statically configured based on ACLs maching on the source or destination addresses, so, you don't have any kind of redundancy if a WAE goes down, and you may have to rewrite the ACLs if something changes in your environment. With the ACE, the load-balancing is dynamically done, so, if one of the WAE fails or the traffic patterns change, the load distribution will be dynamically adjusted
Regards
Daniel

Similar Messages

Traffic interception using ACE instead wccp

Hi,
I am probbing balancing the core WAEs with ACE. Most our servers are not balanced, their dft gw is not the ACE and we saw that when I am not using a VIP, the ACE does not do a nat and the traffic goes directly through 6500. The questions is: Can we use WAAS&ACE when the servers's company are not balanced by the ACE?
Thank in advanced.
Celeste

Gilles.
Do you have an example with ACE where traffic going to Datacenter is intercepted by a PBR (that PBR sends traffic to the ACE) and traffic going to the branch is intercepted with another PBR(that PBR sends traffic to the ACE too)?

Use ACE to redirect or insert a WWW in a client request

I am using ACE 4710s running 4.1 to load balance web traffic across our web server farms. Redirection is configured to redirect http to https. There is a new requirement to redirect a request that does not include the "www" in the URL to include the "www". In other words, if a client merely types "mytesturl.com/test1" the ACE is to redirect or rewrite and insert the www so the request becomes"www.mytesturl.com/test1". I am searching through the documentation, but thought I would pick the collective brains of the community at the same time to see who can come up with the correct answer first. Below is a sample of the working config.
Thanks in advance,
mb
rserver host RS_TEST_01
description ***Test Producation Host***
ip address 10.64.64.45
inservice
rserver redirect RD_EC
description ***TEST Sub-Site***
webhost-redirection https://www.test.com/EC/
inservice
rserver redirect http
webhost-redirection https://%h%p 301
inservice
serverfarm redirect REDIRECT
rserver http
    inservice
serverfarm host SF_TEST
rserver RS_TEST_01 80
    inservice
serverfarm redirect SF_EC
description ***Test Sub-Site***
rserver RD_EC
    inservice
sticky ip-netmask 255.255.255.0 address both STICKY_TEST_1
timeout 600
replicate sticky
serverfarm SF_TEST
ssl-proxy service SSL_TEST_1
key TEST_KEY
cert TEST_CERT
chaingroup VERISIGN
ssl advanced-options SSL_TERMINATION
class-map match-any TEST_VIP_01
description ***VIP for TEST***
2 match virtual-address 10.64.74.45 tcp eq https
class-map type http loadbalance match-all TEST_EC
2 match http url /ec*
policy-map type loadbalance first-match LB_TEST_01
description ***Load Balancing Policy for Test***
class TEST_EC
    serverfarm SF_EC
policy-map type loadbalance first-match LB_REDIRECT
description L7SLBPolicy-Redirect
class class-default
    serverfarm REDIRECT
policy-map multi-match NEW_WEB_POLICY
class TEST_VIP_01
    loadbalance vip inservice
    loadbalance policy LB_TEST_01
    loadbalance vip icmp-reply active
    ssl-proxy server SSL_TEST_1
interface vlan 474
description ***Front End VIP interface***
ip address 10.64.74.254 255.255.255.0
alias 10.64.74.252 255.255.255.0
peer ip address 10.64.74.253 255.255.255.0
access-group input TEST_WEB
service-policy input TEST_WEB_POLICY
no shutdown

Hi Michael,
The configuration to achieve this would be something like the one below. I wrote it without trying it in the lab first, so, make sure to test it before putting it in production (specially the syntax of the regular expressions)
rserver redirect http
webhost-redirection https://%h%p 301
inservice
rserver redirect http_and_www
webhost-redirection https://www.%h%p 301
inservice
serverfarm redirect REDIRECT
rserver http
    inservice
serverfarm redirect REDIRECT_and_www
rserver http_and_www
    inservice
class-map type http loadbalance match-all http_with_www
2 match http header Host header-value www.*
policy-map type loadbalance first-match LB_REDIRECT
description L7SLBPolicy-Redirect
class http_with_www
    serverfarm REDIRECT
class class-default
    serverfarm REDIRECT_AND_WWW
I hope this helps
Daniel

Using ACE RHI to inject a default route

I think I posted this onto the wrong Forum. Anyone able to advise here?
SteveK.
Posted by: stevek1 - Network Administrator, Dept Natural Resources and Mines
Apr 18, 2008, 12:04am PST
Hi Folks,
I need to provide internal devices with active-active access to our clustered firewall which sits across 2 data centres.
I need to allow internal hosts to reach external/unknown networks via a default route.
We have ACE modules in our internal network aggregation 6513s at each site.
I aim to achieve this using RHI...ie...device at site 1 reaches the internet via firewall at site 1, device at site 2 reaches internet via firewall at site 2 (due to better route). If the firewall is inaccessible from site 2, ACE at site 2 removes the route from the MSFC using RHI and site 2 device traffic is re-routed to the site 1 exit point.
Has anyone out there done this before?
Regards, Steve.
| Outline | Subscribe | E-Mail this Message
Replied by: stevek1 - Network Administrator, Dept Natural Resources and Mines - Apr 20, 2008, 6:48pm PST
Hi Folks,
It's Steve here again. I haven't had a response to my query as yet, but basically I need to know the validity of using ACE RHI to inject a default route as opposed to a host route.
Can anyone please advise?
Best Wishes, Steve.

Thanks so much for your response Zahoor.
The solution you have provided is more complicated than I had in mind. For example we had not intended using FWSM (we don't have these modules). I just want to use our existing ACEs at each Data Centre to provide the injection of a default route to our internal EIGRP process based on the result of a probe to our Checkpoint FW. What do you think?
Steve.

Using ACE for proxy server load balancing

Hello groups,
I wanted to know your experiences of using ACE for proxy server load balancing.
I want to load balance to a pool of proxy servers. Note: load-balancing should be based on the HTTP URL (i can't use source or dest. ip address) so that
a certain domain always gets "cached/forwarded" to the same proxy server. I don't really want to put matching
criteria in the configuration (such as /a* to S1, /b* to S2, /c* to S3,etc..), but have this hash calculated automatically.
Can the ACE compute its own hash based on the number of "online" proxy servers ? ie. when 4 servers are online, distribute domains between 1,2,3,4 evenly.
Should server 4 fail, recalculate hash so that the load of S4 gets distributed across the other 3 evenly. Also load-balancing domains of S1 ,S2 and S3 should not change if S4 fails.....
regards,
Geert

This is done with the following predictor command:
Scimitar1/Admin# conf t
Enter configuration commands, one per line. End with CNTL/Z.
Scimitar1/Admin(config)# serverfarm Proxy
Scimitar1/Admin(config-sfarm-host)# predictor hash ?
address         Configure 'hash address' Predictor algorithms
content         Configure 'hash http content' Predictor algorithms
cookie          Configure 'hash cookie' Predictor algorithms
header          Configure 'hash header' Predictor algorithm
layer4-payload Configure 'hash layer4-payload' Predictor algorithms
url             Configure 'hash url' Predictor algorithm
Scimitar1/Admin(config-sfarm-host)# predictor hash url
It does hash the url and the result takes into account the number of active proxies dynamically.
This command has been designed for this kind of scenario that you describe.
Gilles.

HT204053 i RECENTLY PURCHASED ANOTHER IPHONE. MY INTERNET IS NOT WORKING. I JUST CREATED AN APPLE ID. WHAT'S NEXT? I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES. HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

I RECENTLY PURCHASED ANOTHER IPHONE. MY INTERNET IS NOT WORKING. I JUST CREATED AN APPLE ID. WHAT'S NEXT? I NOW HAVE TWO DIFFERENT ACCOUNTS WITH DIFFERENT USER NAMES. HOW CAN I USE ONLY ONE ACCOUNT FOR ITUNES, ICLOUD APPLE ID ETC???

Welcome to the Apple community.
iTunes and iCloud and different accounts, you will need to delete both accounts from your device before adding the new details in their place.
For iCloud go to settings > iCloud, scroll down and hit the delete button. You can then sign back in using your correct details. For iTunes go to settings >store, tap your account ID and then sign out, you can then sign back in using your correct Apple ID.

I'm running Pages version 5.2 on a Desktop Mac version 10.9.2. with the Pages app open how do I use the Time Machine to go back five hours to see the work?

I'm running Pages version 5.2 on a Desktop Mac version 10.9.2. With the Pages app open how do I use the Time Machine to go back five hours to see my page? Can I access Time Machine within an app like Pages? How do I enter Time Machine within the application? It always takes me to the Finder. I apolgise for the mumbo jumbo. I simply do not know how to use Time Machine. It makes sense when I follow the Tutorial but then I lose it.

OK. You've kind of skipped over the reason why you want to go back five hours, but my assumption would be that you've made changes to a Pages file that you want to revert.
There are two ways to tackle this. From Pages itself, open the current version of your document, and from the File menu, click Revert To, and Browse All Versions. You'll then be in the Time Machine interface for that file, and can browse back to the version you want.
Or, outside of Pages, you can select the file (or the folder it was originally in, if you've since deleted it) and enter Time Machine from the TM menu (it sounds like you've already tried this?)
best
Matt

How do I access "Firefox is NOT compatible with this application. For best performance, please use Internet Explorer 5.0 and above...." web sites; when I try to download any alternate browser, then a warning that alternate is "imcompatable with your opera

How do I access websites that warn: "Firefox is NOT compatible with this application. For best performance, please use Internet Explorer 5.0 and above...."? When I try to download any alternate browser, all I get is another warning that the alternate is "not compatible with your operating system." Is Firefox preventing this? The site listed below is a job application site. I've had this same problem with other job application sites also.
== URL of affected sites ==
https://storefront.kenexa.com/lithia/cc/Home.ss

There should be a User Agent Switcher menu item under Tools, which gives you the browser names you can impersonate.
The menu item name changes to the browser UA you are presently using.
There is also a User Agent Switcher button, you can add it using View -> Toolbars -> Customize, and dragging the button to your toolbar.
See http://chrispederick.com/work/user-agent-switcher/features/ and http://chrispederick.com/work/user-agent-switcher/help/
You can just start trying IE versions (or the versions it says on the site) until it lets you in.

HT5624 Why in my email ( the one on my ipod5 that I use with my apple ID) when I get emails about my use of my apple ID to use a service in the from field it has my fathers name and when I click on it it shows his contact info ????

Why in my email ( the one on my ipod5 that I use with my apple ID) when I get emails about my use of my apple ID to use a service in the from field it has my fathers name and when I click on it it shows his contact info ???? I also set up my apple ID with a new email account and also I signed up for iCloud but used the same apple I'd email and password but it gave me a I cloud email! I did activate the favorites in my email . Noticed the from field has my fathers name and contact and it is a notification about me using my apple ID to sign in to FaceTime! Something is messed up, not sure how or why???

i didn't read a lot of your 2nd paragraph, but it seems like the password is the issue, right?
do a true clean install
reboot your machine and hold down command+option+r, you should see a spinning globe - if you don't see the globe or anything that reads internet recovery, shut down and try again
at menu, chose disk utility and once there, find your HD on the left side, select the physical name and erase it as mac journaled
exit disk utlity
at menu, choose install OSX
this time, when it asks for a password just hit continue, it will let you complete without a password
you should be able to get into your laptop, now figure out what password you'll be able to use with your kb issue

HT201493 Why when I try to sign in to Find my Friends does it tell me I cannot as my iPhone is not supported with free iCloud service? I do not use find my friends on another device.

Why when I try to sign in to Find my Friends does it tell me I cannot as my iPhone is not supported with free iCloud service? I do not use find my friends on another device.

So, have you created an iCloud account and is your device connected to iCloud?

My itunes comes up with this when i try to download purchased songs: this devise is already associated with an apple id. this devise can be used with another apple id in 82 days. i need help to see if i can fix this problem please.

i have an iphone 4s i signed out of my itunes on the devise and my friend signed herself into ituned but i signed her out an myself back in but my purchased songs and tones cannot download. it gives me a message of:this device is already associated with an apple id. this device can be used with another apple id in 82 days! is there anyway for me to fix this or override something. im freaking out!!

Sorry: once a device has been authorised for a particular iTunes account you can't change it to another until 90 days have passed. This is to prevent people cirumventing the restrictions of purchases to one account from consteantly swopping between accounts. You will have to wait for the 82 remaining days, and there is no workaround.

I have an Apple MacBook Pro with 2 USB ports and a MiniDisplay Port. I also have an HDTV with a HDMI port. How can I use the TV as a display without any tethering wires between my computer and the TV?

I have an Apple MacBook Pro with 2 USB ports and a MiniDisplay Port. I also have an HDTV with a HDMI port. How can I use the TV as a display without any tethering wires between my computer and the TV? I have a MiniDisplay Port to VGA adapter, but there are two issues with it: The new display doesn't have a VGA port, and even if it did, I wouldn't want to have my mac constantly attached to the display by a cable. I was looking for a way to use the TV as a display without any wires. Is there some type of bluetooth setup I could use? Please let me know if you have any suggestions.

As I wrote above, I think you should look into the Apple TV yourself. The best place to find information about what it can and can't do and to ask your own specific questions is probably in the Apple TV forum, here:
https://discussions.apple.com/community/appletv/appletv

I am using my Ipad on a remote craftshow site and am having problems with battery lasting 8 hrs. Can I use a 12v rv battery to recharge it or atleast maintain the charg over longer periods of time? I have a dc adapter. thanks

I am using my Ipad on a remote craftshow site and am having problems with battery lasting 8 hrs. Can I use a 12v rv battery to recharge it or at least maintain the charge over longer periods of time? I have a dc adapter. thanks

You should be able to use the battery if you get a car type charger which recharges mobile devices.
The full size iPads use a 10-12W charger, whereas the mini uses a 5W charger. Many car chargers only supply 5W. But at 5W, the car charger should give you some extra time on your iPad. It would be best to use a 10-12W car charger.
 Cheers, Tom

I have 12 core with Quatro 4000 and 5770, I want to use dual monitor setup, monitors are NEC with Spectraview-II. How do I connect? 4000 only has 1 Display Port and 1 DVI. 5770 has 2 of each, if I use both 5770 Display Ports, does the 4000 contribute?

I just bought a 12 core with Quatro 4000 and 5770, I want to use dual monitor setup, monitors are NEC with Spectraview-II. How do I connect? 4000 only has 1 Display Port and 1 DVI. 5770 has 2 of each, if I use both 5770 Display Ports, does the 4000 contribute any work at all? I read where on a PC they would work together, but on a MAC they do not.
I read that Display Port has higher band width than DVI, NEC monitors for best performance they recommend using DIsplay Port.
When I was setting this up I looked at a Nvidia Quadro 4000, unfortunately it was for PC, it had 2 Display Ports, in the Mac version they reduce it to one. I did not think there could be a difference.
Mainly want to use it for CS6 and LR4.
How to proceed???
I do not want to use the Quadro 4000 for both, that would not optimize both monitors, one DP and 1 DVI. Using just the 5770 would work but I do not think the 4000 would be doing anything, and the 5770 has been replaced by the 5870.more bandwidth.
Any ideas, I am a Mac newbie, have not ever tried a Mac Pro, just bought off ebay and now I have these problems.
As a last resort I could sell both and get a 5870. That would work, I'm sure of that, it's just that I wanted the better graphics card.
Thanks,
Bill

The Hatter,
I am a novice at Mac so I read all I can. From what I understand the NEC monitors I bought require Display Port for their maximum performance. The GTX 680 only has DVI outputs. Difference from what I understand is larger bandwidth with the DP.
You said I have the 4000 for CUDA. I am not all that familiar with CUDA and when I do read about it I do not understand it.
A concern I have is, that if I connect the 2 high end NEC monitors via the 5770, using it's 2 Display Ports I would have nothing connected to the 4000. Is the 4000 doing anything with nothing connected? I read where in a PC system the 2 cards would interact but in a Mac system they do not.
Bottom line, as I see it, the 4000 will not be useful at all to me, since I want a dual monitor set-up.
So far the 5870 seems the best choice, higher band width than the 5770, and it has 2 Display Ports to optimize the NEC monitors.
I'm not sure how fine I am splitting hairs, nor do I know how important those hairs are. I am just trying to set up a really fast reliable system that will mainly be used for CS6 and LR4. Those NEC monitors are supposed to be top notch.

I tried to install the new iOs 7 on my iphone 4, but it wasn't completed (showing error 4005). Now, my iphone is stuck on the itunes' logo with the usb cord, and I can't use my phone. And itunes doesn't detect my iphone when I connect it on my computer.

Hi everyone! I tried to install the new iOs 7 on my iphone 4, but it wasn't completed (showing error 4005). Now, my iphone is stuck on the itunes' logo with the usb cord, and I can't use my phone. And itunes doesn't detect my iphone when I connect it on my computer, so I can't put it in recovery mode or someting like that... What can I do?? I tried everything they tell me to do in the apple support but nothing seems to work. Thank you!

No problem, glad to help!
Update: my PC USB hub was connected to a USB 3 port, I connected the 30 pin cable directly to my PC, And the restore worked just fine. Restored phone from iCloud backup and seems to be working fine.

WAAS with ACE - Use Ace or use WCCP or use PBR?

Similar Messages

Maybe you are looking for