Configuring Transparent Caching on the Content Switch Module

Size: px
Start display at page:

Download "Configuring Transparent Caching on the Content Switch Module"

Transcription

1 Configuring Transparent Caching on the Content Switch Module Document ID: Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify CSM debug and show Commands Content Engine show Commands Troubleshoot Related Information Introduction This document describes how to configure a Content Switch Module (CSM) for transparent caching, with Cisco Content Engines as caches. The transparent cache sits between the user and the server. The CSM is introduced between the user and the cache. The CSM is intelligent because of its Layer 5 ability to dynamically analyze content and determine if it is cacheable or not. These guidelines apply: If cacheable, the CSM load balances the request to the cache service based on the configured predictor. If not cacheable, the CSM sends it directly to the origin server. This avoids the performance hit that occurs when the non cacheable object goes to the cache, only to have its request redirected by the cache to the origin server. There are several balancing methods available, which depend upon how you want to distribute data over the caches (for example, whole URL, URL string, and so forth). The CSM can be configured with a list of file extensions to send to the cache. This list is called an Extension Qualifier List (EQL). Once you configure the slb policy CACHE POLICY under vserver TRANSPARENT, only requests with the file extensions that are listed in the map CACHEABLE url list are sent the cache. If a file extensions is not listed in the map CACHEABLE url list, then the request will hit slb policy NONCACHE POLICY. Prerequisites Requirements There are no specific requirements for this document.

2 Components Used The information in this document is based on these software and hardware versions: Catalyst 6000 Supervisor Cisco IOS Software Release 12.1(8)EX for Supervisor Engine 1 with MSFC1 (c6sup11 dsv mz.121 8a.EX) Catalyst 6000 CSM Software Release 2.1(2) (c6slb apc bin) Cisco Content Engine 565 running Cisco Application and Content Networking System (ACNS) Software Release The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. Conventions For more information on document conventions, refer to the Cisco Technical Tips Conventions. Configure In this section, you are presented with the information to configure the features that are described in this document. Network Diagram This document uses this network setup: Transparent Caching on the CSM

3 Configurations This document uses these configurations: CSM Content Engine CSM Building configuration... Current configuration : 4500 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password encryption hostname cat boot buffersize enable password cisco redundancy main cpu auto sync standard ip subnet zero ip name server CSM located in slot 3. Module is running as active cache and client side on the same CSM VLAN 100. module ContentSwitchingModule 3 vlan 100 client ip address gateway End user located in CSM VLAN 200. vlan 200 server ip address Probe setup to check the availability of the Content Engine default probe values. Interval is 300 seconds. probe CACHEPROBE tcp Serverfarm CACHE. Note: Issue the no nat server command. CSM needs to do a Layer 2 rewrite. Balancing predictor is hash URL. no nat server no nat client predictor hash url real real

4 probe CACHEPROBE Serverfarm OUTBOUND. Note: Use the serverfarm OUTBOUND to bypass the cache. Requests that do not match the map CACHEABLE url list will use serverfarm OUTBOUND. The NAT server has no effect, as no reals are configured. Balancing predictor forward. serverfarm OUTBOUND nat server no nat client predictor forward Map CACHEABLE URL. map CACHEABLE url Extension Qualifier List (EQL). match protocol http url *.pdf match protocol http url *.fdf match protocol http url *.au match protocol http url *.bmp match protocol http url *.z match protocol http url *.gif match protocol http url *.html match protocol http url *.js match protocol http url *.mocha match protocol http url *.jpeg match protocol http url *.jpg match protocol http url *.jpe match protocol http url *.jfif match protocol http url *.pjpeg match protocol http url *.pjp match protocol http url *.mp2 match protocol http url *.mpa match protocol http url *.abs match protocol http url *.mpeg match protocol http url *.mpg match protocol http url *.mpe match protocol http url *.mpv match protocol http url *.vbs match protocol http url *.m1v match protocol http url *.pcx match protocol http url *.txt match protocol http url *.text match protocol http url *.mov match protocol http url *.tiff match protocol http url *.tar match protocol http url *.avi match protocol http url *.wav match protocol http url *.gz match protocol http url *.zip map NONCACHABLE url match protocol http url * policy CACHE POLICY url map CACHEABLE policy NONCACHE POLICY url map NONCACHABLE

5 serverfarm OUTBOUND Vserver TRANSPARENT. Note: Virtual IP is all zeros. Use of persistence rebalance for HTTP 1.1. Parse lengh set to 2000 bytes. Two policies added to vserver TRANSPARENT. vserver TRANSPARENT virtual tcp www persistent rebalance parse length 2000 slb policy CACHE POLICY slb policy NONCACHE POLICY Fault Tolerance group 1. Used to configure redundancy between modules 3 and 4. ft group 1 vlan 250 priority 20 CSM located in slot 4. Module is running as standby cache and client side on the same CSM VLAN 100. module ContentSwitchingModule 4 vlan 100 client ip address gateway End user located in CSM VLAN 200. Note: Module 3 and 4 VLAN IP addresses are different. vlan 200 server ip address Probe setup to check availability of Content Engine. Default probe values. Interval 300 seconds. probe CACHEPROBE tcp Serverfarm CACHE. Note: Issue the no nat server command. CSM needs to do a Layer 2 rewrite. Balancing predictor is hash URL. no nat server no nat client predictor hash url real real probe CACHEPROBE Serverfarm OUTBOUND

6 Note: Use the serverfarm OUTBOUND to bypass the cache. Requests that do not match the CACHEABLE URL list will use serverfarm OUTBOUND. The NAT server has no effect, as no reals are configured. Balancing predictor forward. serverfarm OUTBOUND nat server no nat client predictor forward Map CACHEABLE URL. map CACHEABLE url Extension Qualifier List (EQL). match protocol http url *.pdf match protocol http url *.fdf match protocol http url *.au match protocol http url *.bmp match protocol http url *.z match protocol http url *.gif match protocol http url *.html match protocol http url *.js match protocol http url *.mocha match protocol http url *.jpeg match protocol http url *.jpg match protocol http url *.jpe match protocol http url *.jfif match protocol http url *.pjpeg match protocol http url *.pjp match protocol http url *.mp2 match protocol http url *.mpa match protocol http url *.abs match protocol http url *.mpeg match protocol http url *.mpg match protocol http url *.mpe match protocol http url *.mpv match protocol http url *.vbs match protocol http url *.m1v match protocol http url *.pcx match protocol http url *.txt match protocol http url *.text match protocol http url *.mov match protocol http url *.tiff match protocol http url *.tar match protocol http url *.avi match protocol http url *.wav match protocol http url *.gz match protocol http url *.zip map NONCACHABLE url match protocol http url * policy CACHE POLICY url map CACHEABLE policy NONCACHE POLICY url map NONCACHABLE serverfarm OUTBOUND Vserver TRANSPARENT.

7 Note: Virtual IP is all zeros. Use of persistence rebalance for HTTP 1.1. Parse lengh set to 2000 bytes. Two policies added to vserver TRANSPARENT. vserver TRANSPARENT virtual tcp www persistent rebalance parse length 2000 slb policy CACHE POLICY slb policy NONCACHE POLICY Fault Tolerance group 1. Used to configure redundancy between modules 3 and 4. ft group 1 vlan 250 interface GigabitEthernet1/1 shutdown interface GigabitEthernet1/2 shutdown CSM client side VLAN. Uplink to the Internet. interface FastEthernet2/1 switchport switchport access vlan 100 interface FastEthernet2/2 shutdown Cache Engine connected to FE2/3 and FE2/4. CSM client side VLAN. interface FastEthernet2/3 duplex full speed 100 switchport switchport access vlan 100 interface FastEthernet2/4 duplex full speed 100 switchport switchport access vlan 100 CSM Server side VLAN. Connection to end users. interface FastEthernet2/5 switchport switchport access vlan 200

8 MSFC VLAN 100. Content Engine and client uses this address as the default gateway. interface Vlan100 ip address ip classless ip route no ip http server line con 0 line vty 0 4 password cisco login end device mode content engine hostname ce1 http proxy incoming 80 Content Engine Accept proxy requests on port 80. http l4 switch enable Instructs the Content Engine to accept traffic that is directed to any destination IP. ip domain name cisco.com interface Fastethernet 0/0 ip address exit interface Fastethernet 0/1 exit ip default gateway primary interface Fastethernet 0/0 no auto register enable ip name server username admin password 1 bvmdmmmmzapjy username admin privilege 15 authentication login local enable primary authentication configuration local enable primary End of ACNS configuration

9 Verify This section provides information that you can use to confirm that your configuration is working properly. Certain show commands are supported by the Output Interpreter Tool (registered customers only), which allows you to view an analysis of show command output. Note: Before you issue debug commands, refer to Important Information on Debug Commands. CSM debug and show Commands show module show arpprovides the Server Load Balancing (SLB) Address Resolution Protocol (ARP) cache listing. show connsprovides SLB connection information. show dfp Provides SLB Dynamic Feedback Protocol (DFP) manager information. show ftprovides SLB Fault Tolerance (FT) information. cat# show module csm 3 ft FT group 1, vlan 250 This box is active priority 20, heartbeat 1, failover 3, preemption is off cat# show module csm 4 ft FT group 1, vlan 250 This box is in standby state priority 10, heartbeat 1, failover 3, preemption is off show map Provides SLB map information. show memoryprovides SLB memory information. show natpoolsprovides SLB client NAT pool information. show policyprovides SLB policy information. show probeprovides SLB probe information. show realsprovides SLB real server information. show serverfarmsprovides SLB server farm information. show staticprovides SLB static server NAT information. show statsprovides SLB statistics. show statusprovides SLB status information. show stickyprovides SLB sticky database. show tech supportprovides SLB technical debug information. show vlanprovides SLB VLAN information. show vserversprovides SLB virtual server information. show module csm 3 vservers name transparent detail TRANSPARENT, state = OPERATIONAL, v_index = 10 virtual = /0:80, TCP, service = NONE, advertise = FALSE idle = 3600, replicate csrp = none, vlan = ALL max parse len = 2000, persist rebalance = TRUE conns = 0, total conns = 47 Default policy: server farm = CACHE sticky: timer = 0, subnet = , group id = 0 Policy Tot Conn Client pkts Server pkts CACHE POLICY NONCACHE POLICY

10 (default) module csm?configures the CSM for transparent caching. Also specifies the location of the CSM that you are configuring. cat(config)# module csm? <1 6> slot where the CSM module resides vserver proxyconfigures the virtual server. cat(config module csm)# vserver proxy cat(config slb vserver)#? vserver advertiseadvertise the virtual IP address. vserver clientsets the client IP addresses. vserver defaultsets a command to its defaults. vserver exitexits server load balancing submode. vserver idlesets idle timer. vserver Enables service for this virtual server. no vservernegates a command or sets its defaults. vserver parse lengthsets the maximum Layer 7 parse length. vserver persistentenables or disables connection persistence. vserver replicatesets vserver fault tolerance replication. vserver serverfarmsets real server farm. vserver slb policysets server load balancing policy. vserver stickysets sticky timer. vserver url hashsets prefix/suffix match for url hash algorithm. vserver virtualconfigures a virtual server. serverfarm cache Configures the server farm. cat(config module csm)# serverfarm cache cat(config slb sfarm)#? serverfarm bindidbinds ID for DFP. serverfarm defaultsets a command to its defaults. serverfarm exitexits SLB server farm submode. serverfarm failactionaction to take on real server failure. serverfarm natsets the address translation for SLB. no serverfarmnegates a command or sets its defaults. serverfarm predictorsets the load balancing prediction algorithm. serverfarm probeconfigures for the use of a probe. serverfarm real Configures a real server. serverfarm redirect vserverconfigures an SLB redirect virtual server. Content Engine show Commands show statistics http savingssaves the statistics from the Content Engine. ce1# show statistics http savings Statistics Savings Requests Bytes Total: Hits: Miss: Savings: 17.8 % 9.2 %

11 As you can see, there were 113 hits. Troubleshoot There is currently no specific information available to troubleshoot this configuration. Related Information Cisco ACNS Software Product Support Content Networking Technology Support Technical Support & Documentation Cisco Systems Contacts & Feedback Help Site Map Cisco Systems, Inc. All rights reserved. Terms & Conditions Privacy Statement Cookie Policy Trademarks of Cisco Systems, Inc. Updated: Jan 30, 2006 Document ID: 19680

Configuring Secure (Router) Mode on the Content Switching Module

Configuring Secure (Router) Mode on the Content Switching Module Configuring Secure (Router) Mode on the Content Switching Module Document ID: 5448 Contents Introduction Before You Begin Conventions Prerequisites Components Used Operation Mode Network Diagram Configurations

More information

Configuring IOS Server Load Balancing with HTTP Probes in the Dispatched Mode

Configuring IOS Server Load Balancing with HTTP Probes in the Dispatched Mode Configuring IOS Server Load Balancing with HTTP Probes in the Dispatched Mode Document ID: 15055 Contents Introduction Prerequisites Requirements Components Used Conventions Configure HTTP Probes Network

More information

vserver vserver virtserver-name no vserver virtserver-name Syntax Description

vserver vserver virtserver-name no vserver virtserver-name Syntax Description Chapter 2 vserver vserver To identify a virtual server, and then enter the virtual server configuration submode, use the vserver command. To remove a virtual server from the configuration, use the no form

More information

Configuring Transparent and Proxy Media Redirection Using ACNS Software 4.x

Configuring Transparent and Proxy Media Redirection Using ACNS Software 4.x Configuring Transparent and Proxy Media Redirection Using ACNS Software 4.x Document ID: 4717 Contents Introduction Before You Begin Conventions Prerequisites Requirements Components Used Configure Network

More information

RHI on the Content Switching Module Configuration Example

RHI on the Content Switching Module Configuration Example RHI on the Content Switching Module Configuration Example Document ID: 60043 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify

More information

Content Switching Module with SSL Commands

Content Switching Module with SSL Commands CHAPTER 2 This chapter contains an alphabetical listing of the commands necessary to configure the CSM-S. These commands are unique to server load-balancing (SLB) and Layer 3 switching. 2-1 arp Chapter

More information

Configure ACE with Source NAT and Client IP Header Insert

Configure ACE with Source NAT and Client IP Header Insert Configure ACE with Source NAT and Client IP Header Insert Document ID: 107399 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify

More information

Catalyst Switches for Microsoft Network Load Balancing Configuration Example

Catalyst Switches for Microsoft Network Load Balancing Configuration Example Catalyst Switches for Microsoft Network Load Balancing Configuration Example Document ID: 107995 Contributed by Shashank Singh, Cisco TAC Engineer. Dec 19, 2013 Contents Introduction Prerequisites Requirements

More information

Configuring Additional Features and Options

Configuring Additional Features and Options CHAPTER 10 This chapter describes how to configure content switching and contains these sections: Configuring Sticky Groups, page 10-3 Configuring Route Health Injection, page 10-5 Environmental Variables,

More information

match protocol http cookie (cookie map submode)

match protocol http cookie (cookie map submode) Chapter 2 22 match protocol http cookie (cookie map submode) match protocol http cookie (cookie map submode) To add cookies to a cookie map, use the match protocol http cookie command in SLB cookie map

More information

Configuring Catalyst Switches for Polycom Conference Phones

Configuring Catalyst Switches for Polycom Conference Phones Configuring Catalyst Switches for Polycom Conference Phones Document ID: 97229 Contents Introduction Prerequisites Requirements Components Used Related Products Conventions Background Information Configure

More information

Configuring the CSM-S SSL Services

Configuring the CSM-S SSL Services CHAPTER 7 This chapter describes the Line Interface (CLI) commands to configure, monitor, and debug the CSM-S software for SSL. These configuration commands are the same commands that are valid in the

More information

Table of Contents. isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ

Table of Contents. isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ king Between a Catalyst 3550 and Catalyst Switches Running isco Configuring 802.1q Trunking Between a Catalyst 3550 and Catalyst Switches Running Integrated Cisco IOS (Nativ Table of Contents Configuring

More information

CONFIGURATION DU SWITCH

CONFIGURATION DU SWITCH Current configuration : 2037 bytes version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Switch no aaa new-model ip subnet-zero

More information

Configuring ISL Trunking Between Catalyst Switches Running CatOS and Cisco IOS System Software

Configuring ISL Trunking Between Catalyst Switches Running CatOS and Cisco IOS System Software Configuring ISL Trunking Between Catalyst Switches Running CatOS and Cisco IOS System Software Document ID: 8759 Contents Introduction Prerequisites Requirements Components Used Background Theory Important

More information

Configuring Different Modes of Operation

Configuring Different Modes of Operation CHAPTER 5 The SSL Services Module operates either in a standalone configuration or with a Content Switching Module (CSM). In a standalone configuration, secure traffic is directed to the SSL Services Module

More information

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(10)

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(10) Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(10) March 18, 2005 Previous Releases 3.1(9), 3.1(8), 3.1(7), 3.1(6), 3.1(5), 3,1(4), 3,1(3), 3,1(2), 3.1(1a), 3.1(1)

More information

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(9)

Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(9) Release Notes for Catalyst 6500 Series Content Switching Module Software Release 3.1(9) November 2, 2004 Previous Releases 3.1(8), 3.1(7), 3.1(6), 3.1(5), 3,1(4), 3,1(3), 3,1(2), 3.1(1a), 3.1(1) This publication

More information

Support for policy-based routing applies to the Barracuda Web Security Gateway running version 6.x only.

Support for policy-based routing applies to the Barracuda Web Security Gateway running version 6.x only. Support for policy-based routing applies to the Barracuda Web Security Gateway running version 6.x only. Transparently Routing Web Traffic to the Barracuda Web Security Gateway This article demonstrates

More information

How to Configure a Cisco Router Behind a Non-Cisco Cable Modem

How to Configure a Cisco Router Behind a Non-Cisco Cable Modem How to Configure a Cisco Router Behind a Non-Cisco Cable Modem Document ID: 19268 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify

More information

Assignment Six: Configure Hot Standby Router Protocol. Brian Dwyer. Morrisville State College

Assignment Six: Configure Hot Standby Router Protocol. Brian Dwyer. Morrisville State College Running head: ASSIGNMENT SIX: CONFIGURE HSRP Assignment Six: Configure Hot Standby Router Protocol Brian Dwyer Morrisville State College ASSIGNMENT SIX 1 Brian Dwyer CITA370 2/5/2010 Assignment Six: Configure

More information

Configuring Virtual Servers, Maps, and Policies

Configuring Virtual Servers, Maps, and Policies 6 CHAPTER This chapter describes how to configure content switching and contains these sections: Configuring Virtual Servers, page 6-1 Configuring Maps, page 6-9 Configuring Policies, page 6-11 Configuring

More information

Configuring a Terminal/Comm Server

Configuring a Terminal/Comm Server Configuring a Terminal/Comm Server Document ID: 5466 Introduction Prerequisites Requirements Components Used Conventions Cabling Design Strategy Configure Network Diagram Configurations Command Summary

More information

Using ANM With Virtual Data Centers

Using ANM With Virtual Data Centers APPENDIXB Date: 3/8/10 This appendix describes how to integrate ANM with VMware vcenter Server, which is a third-party product for creating and managing virtual data centers. Using VMware vsphere Client,

More information

Configuring Real Servers and Server Farms

Configuring Real Servers and Server Farms CHAPTER2 Configuring Real Servers and Server Farms Note The information in this chapter applies to both the ACE module and the ACE appliance unless otherwise noted. All features described in this chapter

More information

Configuring Real Servers and Server Farms

Configuring Real Servers and Server Farms 6 CHAPTER This section provides an overview of server load balancing and procedures for configuring real servers and server farms for load balancing on an ACE appliance. When you use the ACE CLI to configure

More information

Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example

Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example Document ID: 113337 Contents Introduction Prerequisites Requirements Components Used Conventions Configuration

More information

Configuring Real Servers and Server Farms

Configuring Real Servers and Server Farms CHAPTER2 Configuring Real Servers and Server Farms This chapter describes the functions of real servers and server farms in load balancing and how to configure them on the ACE module. It contains the following

More information

Configuring Stickiness

Configuring Stickiness CHAPTER 5 This chapter describes how to configure stickiness (sometimes referred to as session persistence) on an Cisco 4700 Series Application Control Engine (ACE) appliance. It contains the following

More information

VPN Connection through Zone based Firewall Router Configuration Example

VPN Connection through Zone based Firewall Router Configuration Example VPN Connection through Zone based Firewall Router Configuration Example Document ID: 112051 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure

More information

Configuring a Cisco 827 Router to Support PPPoE Clients, Terminating on a Cisco 6400 UAC

Configuring a Cisco 827 Router to Support PPPoE Clients, Terminating on a Cisco 6400 UAC Configuring a Cisco 827 Router to Support PPPoE Clients, Terminating on a Cisco 6400 UAC Document ID: 12889 Contents Introduction Before You Begin Conventions Prerequisites Components Used Configure Network

More information

Use NAT to Hide the Real IP Address of CTC to Establish a Session with ONS 15454

Use NAT to Hide the Real IP Address of CTC to Establish a Session with ONS 15454 Use NAT to Hide the Real IP Address of CTC to Establish a Session with ONS 15454 Document ID: 65122 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Topology

More information

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference Software 2.1(1) May, 2005 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com

More information

PIX/ASA 7.x and Later : Easy VPN with Split Tunneling ASA 5500 as the Server and Cisco 871 as the Easy VPN Remote Configuration Example

PIX/ASA 7.x and Later : Easy VPN with Split Tunneling ASA 5500 as the Server and Cisco 871 as the Easy VPN Remote Configuration Example PIX/ASA 7.x and Later : Easy VPN with Split Tunneling ASA 5500 as the Server and Cisco 871 as the Easy VPN Remote Configuration Example Document ID: 68815 Contents Introduction Prerequisites Requirements

More information

Configuring Dynamic Multipoint VPN Using GRE Over IPsec With OSPF, NAT, and Cisco IOS Firewall

Configuring Dynamic Multipoint VPN Using GRE Over IPsec With OSPF, NAT, and Cisco IOS Firewall Configuring Dynamic Multipoint VPN Using GRE Over IPsec With OSPF, NAT, and Cisco IOS Firewall Document ID: 43068 Contents Introduction Prerequisites Requirements Components Used Conventions Configure

More information

Using NAT in Overlapping Networks

Using NAT in Overlapping Networks Using NAT in Overlapping Networks Document ID: 13774 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify Troubleshoot Related Information

More information

Cisco - VPN Load Balancing on the CSM in Dispatched Mode Configuration Example

Cisco - VPN Load Balancing on the CSM in Dispatched Mode Configuration Example Page 1 of 7 VPN Load Balancing on the CSM in Dispatched Mode Configuration Example Contents Introduction Before You Begin Requirements Components Used Conventions Configurations Tasks Network Diagram CSM

More information

Secure ACS Database Replication Configuration Example

Secure ACS Database Replication Configuration Example Secure ACS Database Replication Configuration Example Document ID: 71320 Introduction Prerequisites Requirements Components Used Related Products Conventions Background Information Scenario I Scenario

More information

Configuring Redundant Routing on the VPN 3000 Concentrator

Configuring Redundant Routing on the VPN 3000 Concentrator Configuring Redundant Routing on the VPN 3000 Concentrator Document ID: 13354 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Router Configurations

More information

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and a Router (InterVLAN Routing)

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and a Router (InterVLAN Routing) Cisco - Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Conf... Page 1 of 13 Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and a Router

More information

Configuring Secure (Router) Mode, Redundancy, Fault Tolerance, and HSRP

Configuring Secure (Router) Mode, Redundancy, Fault Tolerance, and HSRP CHAPTER 4 Configuring Secure (Router) Mode, Redundancy, Fault Tolerance, and HSRP This chapter describes how to configure the following aspects of content switching that are necessary for the Content Services

More information

Configuring IDS TCP Reset Using VMS IDS MC

Configuring IDS TCP Reset Using VMS IDS MC Configuring IDS TCP Reset Using VMS IDS MC Document ID: 47560 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Initial Sensor Configuration

More information

cable modem dhcp proxy nat on Cisco Cable Modems

cable modem dhcp proxy nat on Cisco Cable Modems cable modem dhcp proxy nat on Cisco Cable Modems Document ID: 12176 Contents Introduction Prerequisites Requirements Components Used Conventions Dynamic NAT Versus Static NAT Configuration Using cable

More information

Lab 8.5.2: Troubleshooting Enterprise Networks 2

Lab 8.5.2: Troubleshooting Enterprise Networks 2 Lab 8.5.2: Troubleshooting Enterprise Networks 2 Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway Fa0/0 192.168.10.1 255.255.255.0 N/A R1 Fa0/1 192.168.11.1 255.255.255.0

More information

How to Configure IOS SLB Features

How to Configure IOS SLB Features How to Configure IOS SLB Features How to Configure IOS SLB Features Last Updated: April 26, 2011 Configuring IOS SLB involves identifying server farms, configuring groups of real servers in server farms,

More information

Cisco Virtual Office High-Scalability Design

Cisco Virtual Office High-Scalability Design Solution Overview Cisco Virtual Office High-Scalability Design Contents Scope of Document... 2 Introduction... 2 Platforms and Images... 2 Design A... 3 1. Configure the ACE Module... 3 2. Configure the

More information

Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example

Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example Router Allows VPN Clients to Connect IPsec and Internet Using Split Tunneling Configuration Example Document ID: 91193 Contents Introduction Prerequisites Requirements Components Used Conventions Background

More information

Configuring Route Health Injection

Configuring Route Health Injection CHAPTER 11 This chapter describes how to configure route health injection (RHI) for the Cisco Application Control Engine (ACE) module. This chapter contains the following sections: Information About RHI

More information

Static NAT Mapping with HSRP

Static NAT Mapping with HSRP This module contains procedures for configuring Network Address Translation (NAT) to support the increasing need for highly resilient IP networks. This network resiliency is required where application

More information

Configuring Web Cache Services By Using WCCP

Configuring Web Cache Services By Using WCCP CHAPTER 44 Configuring Web Cache Services By Using WCCP This chapter describes how to configure your Catalyst 3560 switch to redirect traffic to wide-area application engines (such as the Cisco Cache Engine

More information

RPR+ on Cisco 7500 Series Routers

RPR+ on Cisco 7500 Series Routers RPR+ on Cisco 7500 Series Routers Feature History 12.0(19)ST1 12.0(22)S 12.2(14)S This feature was introduced. This feature was integrated into Cisco IOS Release 12.0(22)S. This feature was integrated

More information

LAN to LAN IPsec Tunnel Between a Cisco VPN 3000 Concentrator and Router with AES Configuration Example

LAN to LAN IPsec Tunnel Between a Cisco VPN 3000 Concentrator and Router with AES Configuration Example LAN to LAN IPsec Tunnel Between a Cisco VPN 3000 Concentrator and Router with AES Configuration Example Document ID: 26402 Contents Introduction Prerequisites Requirements Components Used Conventions Configure

More information

Configuring EtherChannel Between Catalyst 2900XL/3500XL Switches and CatOS Switches

Configuring EtherChannel Between Catalyst 2900XL/3500XL Switches and CatOS Switches Configuring EtherChannel Between Catalyst 2900XL/3500XL Switches and CatOS Switches Document ID: 14974 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information

More information

IP Application Services Commands default (tracking) default {delay object object-number threshold percentage}

IP Application Services Commands default (tracking) default {delay object object-number threshold percentage} default (tracking) default (tracking) To set the default values for a tracked list, use the default command in tracking configuration mode. To disable the defaults, use the no form of this command. default

More information

IOS Router : Easy VPN (EzVPN) in Network Extension Mode (NEM) with Split tunnelling Configuration Example

IOS Router : Easy VPN (EzVPN) in Network Extension Mode (NEM) with Split tunnelling Configuration Example IOS Router : Easy VPN (EzVPN) in Network Extension Mode (NEM) with Split tunnelling Configuration Example Document ID: 63098 Contents Introduction Prerequisites Requirements Components Used Conventions

More information

WCCPv2 and WCCP Enhancements

WCCPv2 and WCCP Enhancements WCCPv2 and WCCP Enhancements Release 12.0(11)S June 20, 2000 This feature module describes the Web Cache Communication Protocol (WCCP) Enhancements feature and includes information on the benefits of the

More information

Configuring Network Side ISDN BRI Voice Interface Cards

Configuring Network Side ISDN BRI Voice Interface Cards Configuring Network Side ISDN BRI Voice Interface Cards Document ID: 15415 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Configure the VIC

More information

Configuring IOS to IOS IPSec Using AES Encryption

Configuring IOS to IOS IPSec Using AES Encryption Configuring IOS to IOS IPSec Using AES Encryption Document ID: 43069 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Configurations Verify Troubleshoot Troubleshooting

More information

Configuring Cache Services Using the Web Cache Communication Protocol

Configuring Cache Services Using the Web Cache Communication Protocol Configuring Cache Services Using the Web Cache Communication Protocol Finding Feature Information, page 1 Prerequisites for WCCP, page 1 Restrictions for WCCP, page 2 Information About WCCP, page 3 How

More information

Device Interface IP Address Subnet Mask Default Gateway. Ports Assignment Network

Device Interface IP Address Subnet Mask Default Gateway. Ports Assignment Network Felix Rohrer Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 172.17.99.11 255.255.255.0 N/A S2 VLAN 99 172.17.99.12 255.255.255.0 N/A S3 VLAN 99 172.17.99.13

More information

Configuring Virtual Servers

Configuring Virtual Servers 3 CHAPTER This section provides an overview of server load balancing and procedures for configuring virtual servers for load balancing on an ACE appliance. Note When you use the ACE CLI to configure named

More information

Table of Contents. Cisco NAT Order of Operation

Table of Contents. Cisco NAT Order of Operation Table of Contents NAT Order of Operation...1 Document ID: 6209...1 Introduction...1 Prerequisites...1 Requirements...1 Components Used...1 Conventions...1 NAT Overview...1 NAT Configuration and Output...2

More information

1 of :22

1 of :22 Feedback: Help us help you Please rate this document. Excellent Good Average Fair Poor This document solved my problem. Yes No Just Browsing Suggestions to improve this document. (512 character limit)

More information

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS

Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS Document ID: 23408 Contents Introduction Prerequisites Requirements Components

More information

Table of Contents. Cisco IPSec Tunnel through a PIX Firewall (Version 7.0) with NAT Configuration Example

Table of Contents. Cisco IPSec Tunnel through a PIX Firewall (Version 7.0) with NAT Configuration Example Table of Contents IPSec Tunnel through a PIX Firewall (Version 7.0) with NAT Configuration Example...1 Document ID: 63881...1 Introduction...1 Prerequisites...2 Requirements...2 Components Used...2 Conventions...2

More information

Lab - Troubleshooting VLAN Configurations (Instructor Version Optional Lab)

Lab - Troubleshooting VLAN Configurations (Instructor Version Optional Lab) (Instructor Version Optional Lab) Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or

More information

Configuring Virtual Servers, Maps, and Policies

Configuring Virtual Servers, Maps, and Policies CHAPTER 6 This chapter describes how to configure content switching and contains these sections: Configuring Virtual Servers, page 6-1 Configuring Maps, page 6-6 Configuring Policies, page 6-9 Configuring

More information

Basic Router Configuration using SDM

Basic Router Configuration using SDM Basic Router Configuration using SDM Document ID: 71305 Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Interface Configuration NAT Configuration Routing Configuration

More information

SSG Configuration Example

SSG Configuration Example APPENDIX A Example A-1 is a sample SSG configuration for the Cisco 10000 series router based on the topology in Figure A-1. The configuration includes AAA, PPP, SSG, and RADIUS. The SSG configuration enables

More information

CWA URL Redirect support on C891FW

CWA URL Redirect support on C891FW Introduction, page 1 Prerequisites for, page 2 Configuring, page 3 HTTP Proxy Configuration, page 8 Configuration Examples for, page 8 Important Notes, page 14 Additional References for, page 14 Feature

More information

Configure the ASA for Dual Internal Networks

Configure the ASA for Dual Internal Networks Configure the ASA for Dual Internal Networks Document ID: 119195 Contributed by Dinkar Sharma, Bratin Saha, and Prashant Joshi, Cisco TAC Engineers. Aug 05, 2015 Contents Introduction Prerequisites Requirements

More information

Internet. SonicWALL IP Cisco IOS IP IP Network Mask

Internet. SonicWALL IP Cisco IOS IP IP Network Mask Prepared by SonicWALL, Inc. 9/20/2001 Introduction: VPN standards are still evolving and interoperability between products is a continued effort. SonicWALL has made progress in this area and is interoperable

More information

co Configuring PIX to Router Dynamic to Static IPSec with

co Configuring PIX to Router Dynamic to Static IPSec with co Configuring PIX to Router Dynamic to Static IPSec with Table of Contents Configuring PIX to Router Dynamic to Static IPSec with NAT...1 Introduction...1 Configure...1 Components Used...1 Network Diagram...1

More information

No Service Password-Recovery

No Service Password-Recovery No Service Password-Recovery Last Updated: January 18, 2012 The No Service Password-Recovery feature is a security enhancement that prevents anyone with console access from accessing the router configuration

More information

Three interface Router without NAT Cisco IOS Firewall Configuration

Three interface Router without NAT Cisco IOS Firewall Configuration Three interface Router without NAT Cisco IOS Firewall Configuration Document ID: 13893 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations

More information

Chapter 6 Lab 6-1, First Hop Redundancy Protocols HSRP and VRRP INSTRUCTOR VERSION

Chapter 6 Lab 6-1, First Hop Redundancy Protocols HSRP and VRRP INSTRUCTOR VERSION CCNPv7.1 SWITCH Chapter 6 Lab 6-1, First Hop Redundancy Protocols HSRP and VRRP INSTRUCTOR VERSION Topology Objectives Configure inter-vlan routing with HSRP and load balancing Configure HSRP authentication

More information

II+/II+TS/II+10GE/III/IV/V/V 10GE

II+/II+TS/II+10GE/III/IV/V/V 10GE Password Recovery Procedure for the Catalyst 4500/4000 Supervisor Engine II+/II+TS/II+10GE/III/IV/V/V 10GE Module and Catalyst 4900 Switches that Run Cisco IOS Software Document ID: 21229 Contents Introduction

More information

Configuring Hookflash Relay on FXS/FXO Voice Ports

Configuring Hookflash Relay on FXS/FXO Voice Ports Configuring Hookflash Relay on FXS/FXO Voice Ports Document ID: 15405 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Configure PLAR OPX and

More information

Configuring Web-Based Authentication

Configuring Web-Based Authentication CHAPTER 61 This chapter describes how to configure web-based authentication. Cisco IOS Release 12.2(33)SXH and later releases support web-based authentication. Note For complete syntax and usage information

More information

Bi-directional ADN Deployment Using WCCP with Reflect Client IP [Configuration Sample] Ken Fritz (PSS)

Bi-directional ADN Deployment Using WCCP with Reflect Client IP [Configuration Sample] Ken Fritz (PSS) Bi-directional ADN Deployment Using WCCP with Reflect Client IP [Configuration Sample] February 17, 2011 Ken Fritz (PSS) Copyright 2011 Blue Coat Systems, Inc. All rights reserved worldwide. No part of

More information

Configuring VLAN Interfaces

Configuring VLAN Interfaces CHAPTER1 The Cisco Application Control Engine (ACE) module does not have any external physical interfaces to receive traffic from clients and servers. Instead, it uses internal VLAN interfaces. You assign

More information

Catalyst 6500 Series Switch Content Switching Module Command Reference

Catalyst 6500 Series Switch Content Switching Module Command Reference Catalyst 6500 Series Switch Content Switching Module Command Reference Software 4.1(1) March, 2004 WS-X6066-SLB-APC Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706

More information

Zeeshan Naseh, CCIE No Haroon Khan, CCIE No. 4530

Zeeshan Naseh, CCIE No Haroon Khan, CCIE No. 4530 Desi So! itching s Zeeshan Naseh, CCIE No. 6838 Haroon Khan, CCIE No. 4530 Cisco Press 800 Eas Indianapolis, Indiana Table of Contents Foreword Introduction xxv xxvi Part I Server Load Balancing (SLB)

More information

Oracle E-Business Suite 11i with Cisco ACE Series Application Control Engine Deployment Guide, Version 1.0

Oracle E-Business Suite 11i with Cisco ACE Series Application Control Engine Deployment Guide, Version 1.0 Design Guide Oracle E-Business Suite 11i with Cisco ACE Series Application Control Engine Deployment Guide, Version 1.0 This design guide describes how to deploy the Cisco Application Control Engine (Cisco

More information

Communication Media Module IP Connectivity

Communication Media Module IP Connectivity Communication Media Module IP Connectivity Document ID: 91263 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Configurations Packet Flow Troubleshoot

More information

Configuring VLAN Interfaces

Configuring VLAN Interfaces CHAPTER1 The Cisco Application Control Engine (ACE) module does not have any external physical interfaces to receive traffic from clients and servers. Instead, it uses internal VLAN interfaces. You assign

More information

IP MultiLayer Switching Sample Configuration

IP MultiLayer Switching Sample Configuration IP MultiLayer Switching Sample Configuration Document ID: 12022 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Network Diagram MLS Operation

More information

TACACS+ on an Aironet Access Point for Login Authentication Configuration Example

TACACS+ on an Aironet Access Point for Login Authentication Configuration Example TACACS+ on an Aironet Access Point for Login Authentication Configuration Example Document ID: 70149 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram

More information

Lab 1. CLI Navigation. Scenario. Initial Configuration for R1

Lab 1. CLI Navigation. Scenario. Initial Configuration for R1 Lab 1 CLI Navigation This lab covers the most basic skills for accessing and using the command-line interface (CLI) on a Cisco router or switch. Many of the small, picky details of how the CLI works cannot

More information

LANE, CES, and VBR PVCs in Shaped VP Tunnels

LANE, CES, and VBR PVCs in Shaped VP Tunnels LANE, CES, and VBR PVCs in Shaped VP Tunnels Document ID: 10493 Contents Introduction Prerequisites Requirements Components Used Conventions Assumptions Configure Network Diagram Configurations Troubleshoot

More information

Policy Based Routing with the Multiple Tracking Options Feature Configuration Example

Policy Based Routing with the Multiple Tracking Options Feature Configuration Example Policy Based Routing with the Multiple Tracking Options Feature Configuration Example Document ID: 48003 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram

More information

Effective with Cisco IOS Release 15.0(1)M, the ssg default-network command is not available in Cisco IOS software.

Effective with Cisco IOS Release 15.0(1)M, the ssg default-network command is not available in Cisco IOS software. ssg default-network ssg default-network Effective with Cisco IOS, the ssg default-network command is not available in Cisco IOS software. To specify the default network IP address or subnet and mask, use

More information

Configuring FXS Ports for Basic Calls

Configuring FXS Ports for Basic Calls Configuring FXS Ports for Basic Calls First Published: October 2, 2008 Last updated: March 19, 2010 This module describes how to configure analog Foreign Exchange Station (FXS) ports on a Cisco Integrated

More information

Oracle 10g Application Server Suite Deployment with Cisco Application Control Engine Deployment Guide, Version 1.0

Oracle 10g Application Server Suite Deployment with Cisco Application Control Engine Deployment Guide, Version 1.0 Design Guide Oracle 10g Application Server Suite Deployment with Cisco Application Control Engine Deployment Guide, Version 1.0 This design guide describes how to deploy the The Cisco Application Control

More information

Configuring Layer 2 Tunneling Protocol (L2TP) over IPSec

Configuring Layer 2 Tunneling Protocol (L2TP) over IPSec Configuring Layer 2 Tunneling Protocol (L2TP) over IPSec Document ID: 14122 Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify Troubleshoot

More information

Configuring Web-Based Authentication

Configuring Web-Based Authentication CHAPTER 42 This chapter describes how to configure web-based authentication. It consists of these sections: About Web-Based Authentication, page 42-1, page 42-5 Displaying Web-Based Authentication Status,

More information

This document provides a sample configuration for X25 Over TCP.

This document provides a sample configuration for X25 Over TCP. X.25 over TCP/IP Document ID: 9363 Contents Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Network Diagram Configurations Verify Troubleshoot Troubleshooting

More information

Lab Configuring Basic RIPv2 (Solution)

Lab Configuring Basic RIPv2 (Solution) (Solution) Topology 2017 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 15 Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway

More information

Lab Configuring Per-Interface Inter-VLAN Routing (Solution)

Lab Configuring Per-Interface Inter-VLAN Routing (Solution) (Solution) Topology Addressing Table Objectives Device Interface IP Address Subnet Mask Default Gateway R1 G0/0 192.168.20.1 255.255.255.0 N/A G0/1 192.168.10.1 255.255.255.0 N/A S1 VLAN 10 192.168.10.11

More information

Quick Start Guide, Cisco ACE 4700 Series Application Control Engine Appliance

Quick Start Guide, Cisco ACE 4700 Series Application Control Engine Appliance Quick Start Guide, Cisco ACE 4700 Series Application Control Engine Appliance Software Version A5(1.0) September 2011 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706

More information