Failover with CVPN3030

Similar Questions

• How to simulate failover with 6.5.1 or auto-passage vCSHB to the

  Hello

  How do we simulate the auto-passage or failover with vCSHB 6.5.1?

  In the installation guide, you will find a chapter entitled: "Installation check" - pag 49. You can find the details on you can do these tests.

• failover with MRU policy

  Hola,

  ¿Alguien me could decir como activar the failover with MRU politica y donde? Concreta SAN Necesito UN tenerla activada para poder connect LUNS to una. Tengo el vphere 4.0

  Gracias.

  A greeting.

  Hola,

  The MRU policy are that viene por defecto. Lo podras is una vez tengas acceso a los discos, adapters for storage en-> device-> manage paths con el boton inverso del mouse.

  A greeting

• AIP - SSM recreate the image in secondary ASA 5500 (failover) with virtual contexts

  Hello guys,.

  The scenario is as follows:

  2 ASA 5500 with virtual contexts for failover.

  The ASA elementary school has the work of the AIP-SSM20.

  ASA school (which is in active / standby) has its SSM20 AIP to work now and everything is in production.

  Someone tried to configure this 2nd AIP - SSM, changed the password and lost, so I tried to re - the image (without authorized passage recovery), but the connection fails on the TFTP server, where is the image of the AIP - SSM.

  Now questions, documentation Cisco re-imaging view orders under ASA #.

  but as this scenario has several virtual contexts the ASA # shell contains no IP address as you know (which I suppose is the reason why the ASA cannot download the image from the TFTP server) and switch to another context (ASA / admin #) re-imaging commands do not work (hw-module module 1... etc...).

  What is the solution? Is there documentation for it (with security contexts)?

  Thank you very much for reading ;) comment on possible solutions.

  Yes,

  Some things to keep in mind.

  (1) run 'debug module start' on the SAA before running the command "hw-module module 1 recover boot. This will show you the ROMMON of the MSS output as it tries to make the new image and you can look for any errors.

  (2) before trying to download from the SSM, first use a machine separate download tftp from your laptop. This will ensure the TFTP on your laptop works and confirm what directory (if any) that you can use as the file location.

  (3) if the tftp download does not SSM, then the SSM is unable to properly connect to your laptop. You need a crossover cable to connect your laptop to the SSM. If you have a crossover cable, then you could try to connect the MSS and your laptop to a small hub, or configure a new vlan on your switch with only 2 ports and connect the MSS and your computer laptop this vlan 2 port.

  (4) also try the download first at the end of the gateway to 0.0.0.0 since your laptop and the SSM will be on the same subnet. If this does not work then you can try a non-existent 30.0.0.4 address as gateway.

  (5) understand that the IP address that you specify for the MSS using the command "configure the hw-module module 1 recover" is just temporary for download. Once an image is installed, then sitting at the module and run the "setup" command in order to configure the permanent address you want ure on external port of the SSM. This address in the "setup" command can the same as that used in the command 'get the 1 hw-module module configure' or a completely new (as in your case). Just make sure that you connect to the network just to what address you give.

• Automatic failover with Transport and apply Lag fails with ORA-16798

  Hello
  I configured a physical database maximum Performance, accelerated failover mode standby. I set FastStartFailoverLagLimit to 3 hours (10800 seconds).

  If I understand the Oracle documentation, Fast-Start failover should work with Max Performance, as long the Transport timeout is whithin the FastStartFailoverLagLimit.

  
  So I started a few scripts, generated some loading, so I have a Transport and apply the shift of 3-4 Minutes.
  Then I killed pmon to cause an automatic failover.

  Failover failed with ORA-16798.

  I know, there is Note 846087.1 , which describes the problem, but I thought that automatic failover should work in this configuration.
  Is this a bug or am I wrong?

  Thank you very much in advance.

  
  Configuration Data Guard standby:
  -----------------------------------------------

  Role: STANDBY PHYSICS
  State of destination: apply
  Transport delay: 3 minutes 3 seconds (calculated two seconds ago)
  Apply the Lag: 3 minutes 26 seconds (calculated 0 seconds ago)
  Apply the rate: 23,52 MB/s
  Real-time query: OFF
  Occurrence (s):
  ...

  Properties:
  ...
  LogXptMode = "async".
  DelayMins = '0'
  Binding = "optional."
  MaxFailure = '0'
  MaxConnections = '1'
  ReopenSecs = "300"
  NetTimeout = "15"
  RedoCompression = "DISABLE."
  ...

  State of the database:
  SUCCESS

  Fast failover configuration:
  -----------------------------------------------

  Fast-Start Failover: ENABLED

  Threshold: 180 seconds
  Target: < Targetname >
  Observer: < servername >
  Offset limit: 10800 seconds
  Primary closure: TRUE
  Auto-Rétablir: TRUE
  Reconnection of the observer: (none)
  Substitution of the observer: FALSE

  ...

  
  Messages of the DG - Log:
  -----------------------------------------------
  FAILOVER TO < DB >
  Starting failover to the < DB > database
  Notifying Oracle Clusterware to disassembly for the FAILOVER database
  02/02/2015-13:38:04
  Error running SQL = 604, sql = [ALTER DATABASE RECOVER MANAGED STANDBY DATABASE FI
  ORA-00604: an error has occurred at the SQL level 1 recursive
  ORA-00283: cool cancelled due to errors
  ORA-16171: RECOVER... FINISHING not allowed away for thr 1, seq 34-37
  Failed to retrieve Terminal.
  Database error resource SetState (16798)
  02/02/2015-13:38:08
  Command FAILOVER < DB > completed with error ORA-16798

  
  

  The FastStartFailoverLagLimit property specifies the amount of data, in seconds, during which the standby database target can

  delay on the main database on the recovery plan applied. If again applied Eve point database notes that many

  seconds of the primary database redo point generation, accelerated tipping is allowed.

  Errors show a gap for sequences 34-37, which is not optimal for a fast failover.

  Even if FastStartFailoverLagLimit is set to 3 hours, there is too much data loss for the standby site because newspapers are not available on the backup server and the Broker cannot activate the Pb of the day before.

  I recommend to to lean on increase the bandwidth network.

  Concerning

• Failover with VM network does not

  Hi all

  I currently have a configuration similar to the following:

  vSwitch0

  Service - vmnic0 - value failover for Vmkernel console

  VMkernel - vmnic2 - value for Service Console failover

  vswitch1

  Vmnetwork - vmnic1, vmnic3 - road of Port oringinating ID

  Now when I pull out vmnic1 network connection to test the failover of the virtual machine is not tipping? shouldn't vmnic3 for vmnic1 failover if he fails until vmnic1 comes back online? I tested the opposite effect by pulling the cable on vmnic3 as even result.  All the vm on the ESX Server is assigned to a specific network card as it should be with oringinating port ID but I was under the impression that NICs would be failover for the other failover?

  Issue the following command in the console of service before and after pulling the network cable:

  esxcfg-NICS - l

  It's a tiny 'L' on the command line.

  Ken Cline

  VMware vExpert 2009

  VMware communities user moderator

  Blogs about: http://KensVirtualReality.wordpress.com/

• Manual failover with several Standby logical

  Hello
  
  I failed to run with two standby failover logic. The transition to the
  at the first news is successful, but when I try to sinchronize the second logical standby I
  get this error in the alert.log and the trace:
  
  SERVICE NAME:(SYS$USERS) 2011-02-21 02:05:32.644
  SESSION ID: (138.8) 2011-02-21 02:05:32.644
  The main database identifier does not match the database
  identifier associated with the standby redo log of the
  logical standby database.
  ORA-16086: standby database contains no logs available pending
  
  The scenario is llike this:
  
  Server role
  primary Leopard
  Tiger to sleep 1
  Lion to sleep 2
  
  The passage of leopard to Tiger works well. But new primary sinchronization, tiger, with
  second sleep mode, lion, breaks with the error ORA-16068.
  
  Is this possible?
  
  Thanks in advance!

  You did not provide a version number, or enough information to find out how you have configured a part any configuration.

  If the first line into two logical Standby it replicates standby who then reply standby B or both all too?

  If the primary went what mechanism is in place, the new principal to replicate to B? Expect to also replicate logic from the previous day, return to the primary origin?

  We need a lot more information to help you.

• Testing failover with VMware vCenter / SRM and SQL on protected volume.

  OK, MRS. works well in test mode, although we would like to test a failover / then backspace over the weekend...

  We run SQL 2012 on a virtual machine as well as vCenter/SRM on another virtual machine, both on the protected volumes.

  If the failover stops all VM, makes a new replication then turns on the virtual machine on the DR site, it would fail because we had SQL and SRM on a protected volume?  I can understand moving protected site vCenter / SRM VM to another volume, but SQL Server is also used for other data bases we want protected.  My guess is that MRS is not smart enough to not stop SQL server last.  What should do?  What is everybody doing?

  Thanks in advance.

  You need a RS and SRMDB on both sites. The SRM on the site of DR will manage the entire process and not the vcenter/srm on the production site.

  BTW. a Microsoft SQL Server 2008 Express (R2 SP1) - 64-bit is supportet to SRMDB. Check partnerweb.vmware.com/.../interop_matrix.php

  Kind regards

  Joerg

• Failover with VPN concentrator

  Hi all

  We have unique VPN concentrator which is the single point of failure, so need your help to mitigate the same

  The topology diagram is attached

  Site A and Site B.

  Site B has internet gateways where we have existing VPN.

  The intention to introduce the site A & Concentrator VPN gateway VPN is set as well

  Our design is provided for in

  Connectivity between the two locations & other office is managed by BGP.

  Default route is pointing at the Internet gateway.

  Info by the Internet Segment.

  ·         We have the SP independent IP range

  ·         Switching between 2 SP to site B is obtained by using the iBGP and eBGP

  Challenge: VPN concentrator single Point of failure (the Cisco VPN concentrator 3000)

  Here are the design goals

  ·         Implement internet gateways to the Site - A which will have redundancy level of Portal Site

  ·         Place on the VPN concentrator, which will act as a switch between site

  o If the concentrator vpn site B is out of box A VPN site must support all traffic.

  Concentrator VPN active o replica of Site B

  Is it possible to achieve the objectives of design.

  Please help about the VPN concentrator... How I can set VPN concentrator in failover mode... Just as we do firewalls?

  Help, please

  Hi yogesh,

  Concentrator VPN supports failover through VRRP. Please find the following for your reference document:

  http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_tech_note09186a0080094490.shtml

  As for the addition of failover for VPN concentrator, you happen to have a spare hub VPN to run VRRP?

  Don't know if you know, however, VPN concentrator comes end of life and the last delivery date was November 2007, as a result, you will not be able to buy VPN concentrator more.

  Here's the EOL notificatin for your reference:

  http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5743/ps5749/ps2284/prod_end-of-life_notice0900aecd805cd5a0.html

• Test failover with physical standby

  Hello

  I have a primary at base of 11.2.0.4 (cars) and an instance of unique physical standby (on a virtual machine).

  I need to test failover.

  I'm looking some procedure or steps.

  Can they be valid?

  On primary

  • change the built-in system again to standby_db_name;
  • alter system archive log current;
  • Stop the shipment of archive: alter system set log_archive_dest_state_2 = "DAVID";

  Standby:

  • ALTER DATABASE RECOVER MANAGED STANDBY DATABASE CANCEL;
  • ALTER DATABASE RECOVER MANAGED STANDBY DATABASE FINISH;
  • stop immediately; --> the snapshot can be done at this stage or need to get after 'RECOVER MANAGED STANDBY DATABASE CANCEL'
  • Make a snapshot of the virtual machine
  • startup nomount
  • ALTER database base_de_donnees eve of Mount;
  • ALTER DATABASE ACTIVATE PHYSICAL STANDBY DATABASE.
  • ALTER DATABASE OPEN;

  Test what finish

  Standby:

  • stop the database
  • restore from snapshot
  • Put the database in recovery mode

  Elementary school:

  • Allow destination of the Journal 2

  What do you think?

  Use the snapshot before...

  https://docs.Oracle.com/CD/B28359_01/server.111/b28294/manage_ps.htm#BACIEJJI

• ESXi on EMC e 3100 failover with only a single switch

  I have 2 hosts ESXi, I need cluster around an EMC e 3100 (NFS data warehouses).

  -This client has only a single gigabit switch.

  -Guests have a nic four ports and a double network card port each

  -E has 2 SPS with 2 port on each SP

  -The lonely gigabit network switch will be 2 VLANS configured, one for management, one for traffic to the virtual machine.

  What is the best way I can configure a vSwitch accommodation VMkernel to switch to this NFS configuration?  I know that there is a single point of failure at the level of the switch.

  I would benefit by choosing iSCSI?  No necessary RDM LUN...

  This isn't a bad design.

  You can certainly make an etherchannel and it will help your flow.

• Failover on Cisco ASA 5505 with EasyVPN

  Hello

  I've implemented a customer EasyVPN with a Cisco ASA 5505 and I am trying to configure the failover but I get this message:

  "Failover cannot be configured as Cisco Easy VPN remote is activated."

  However, I have seen in the link below, this dynamic rollover is compatible with the easy standard (and not with improved but I don't think I use easyVPN improved).

  http://www.Cisco.com/c/en/us/products/collateral/security/iOS-easy-VPN/e...

  The configuration I did through ASDM is very simple:

  vpnclient server * * *.
  vpnclient-mode client mode
  vpngroup vpnclient * password *.
  vpnclient username * password *.
  vpnclient enable

  My question is how can I implement failover with a client on a Cisco ASA 5505 EasyVPN?

  Thanks in advance

  You cannot configure the failover of a device that acts as a client

• Site to Site VPN IPSEC for multisite with dual ISP failover

  Hello world

  I have total 6 ASA 5505, I already built failover with double tis. Now, I want to configure site 2 site VPN for all 3 sites. Each site has 2 firewall.

  I just built a config for 2 a site WHAT VPN here is the config for a single site.

  local ip address: 172.16.100.0

  IP of the pubis: 10.5.1.101, 10.6.1.101

  Remote local ip: 172.16.101.0

  Remote public ip: 10.3.1.101, 10.4.1.101

  Remote local ip: 192.168.0.0

  Remote public ip: 10.1.1.101, 10.2.1.101

  the tunnel on the first 2 firewall configuration:

  IP 172.16.100.0 allow Access-list vpn1 255.255.255.0 172.16.101.0 255.255.255.0

  backupvpn1 ip 172.16.100.0 access list allow 255.255.255.0 172.16.101.0 255.255.255.0

  ip 172.16.100.0 access VPN2 list allow 255.255.255.0 192.168.0.0 255.255.255.0

  backupvpn2 ip 172.16.100.0 access list allow 255.255.255.0 192.168.0.0 255.255.255.0

  IP 172.16.100.0 allow Access-list sheep 255.255.255.0 172.16.101.0 255.255.255.0

  172.16.100.0 IP Access-list sheep 255.255.255.0 allow 192.168.0.0 255.255.255.0

  !

  !

  NAT (inside) 0 access-list sheep

  NAT (inside) 1 0.0.0.0 0.0.0.0

  !

  !

  !

  crypto ISAKMP allow outside

  ISAKMP crypto enable backup

  crypto ISAKMP policy 10

  preshared authentication

  3des encryption

  sha hash

  !

  !

  !

  Crypto ipsec transform-set esp-3des esp-sha-hmac my-set1

  card crypto outside_map 1 match for vpn1

  peer set card crypto outside_map 1 10.3.1.101

  My outside_map 1 transform-set-set1 crypto card

  outside_map interface card crypto outside

  !

  !

  card crypto outside_map 2 match address backupvpn1

  peer set card crypto outside_map 2 10.4.1.101

  My outside_map 2 transform-set-set1 crypto card

  backup of crypto outside_map interface card

  !

  !

  !

  Crypto ipsec transform-set esp-3des esp-sha-hmac my-set2

  crypto outside_map 3 game card address vpn2

  peer set card crypto outside_map 3 10.1.1.101

  My outside_map 3 transform-set-set2 crypto card

  outside_map interface card crypto outside

  !

  !

  card crypto 4 correspondence address backupvpn2 outside_map

  peer set card crypto outside_map 4 10.2.1.101

  My outside_map 4 transform-set-set2 crypto card

  backup of crypto outside_map interface card

  !

  !

  !

  tunnel-group 10.3.1.101 type ipsec-l2l

  IPSec-attribute Tunnel-Group 10.3.1.101

  pre-shared key cisco

  ISAKMP keepalive retry 20 3 threshold

  !

  !

  tunnel-group 10.4.1.101 type ipsec-l2l

  IPSec-attribute Tunnel-Group 10.4.1.101

  pre-shared key cisco

  ISAKMP keepalive retry 20 3 threshold

  !

  !

  tunnel-group 10.1.1.101 type ipsec-l2l

  IPSec-attribute Tunnel-Group 10.1.1.101

  pre-shared key cisco

  ISAKMP keepalive retry 20 3 threshold

  !

  !

  tunnel-group 10.2.1.101 type ipsec-l2l

  IPSec-attribute Tunnel-Group 10.2.1.101

  pre-shared key cisco

  ISAKMP keepalive retry 20 3 threshold

  !

  !

  backup of MTU 1500

  If this correct what should I configure other side that I want to finish in front of it. Is my address name vpn1 crypto card must match on the other side or not?

  any suggestion is good...

  Thank you...

  What I mean with the routing is a routing protocol or static routes the SAA can choose between interfaces to establish the tunnel.

  If the ASA has the card encryption applied to two interfaces, then one should be used as primary and the other as backup.

  How will be the ASA choose which is better? Via the routing.

  If you use a routing protocol, the ASA will be known which interface to send packets every time, but if using static routes, you need to change the metric and configuring IP SLA.

  Federico.

• Failover test with and broker, flashback.

  Hello

  We have a requirement where we need to test failover to the production database. Currently we have 11.2.0.3 on Linux as production and even on another machine as the day before. We do not enabled DG broker and Flashback in any database. I want information below:

  (1) how to test failover with Flashback and DG broker in any database?

  (2) how to activate the DG broker and failover of Flashback and test with DG broker and Flashback?

  (3) how can I return back the changes after the failover for example, I want to see the production as the production and standby standby as previously.

  Thank you very much in advance.

  -Renault

  To question 1, you can start with this:

  http://www.Visi.com/~mseberg/data_guard/Data_Guard_Failover_Test_using_SQL.PDF

  For question 2, you can start with this:

  http://www.Visi.com/~mseberg/data_guard/broker_setup_example.html

  Question 3 is taken up by the link in question 1. You can also use RMAN instead of flashback.

  I would consider long and hard thinking all failover and install a test for that system it ask you some questions

  I can make a move to the place?

  How long can I I be down and how much time will take to recover from a failover?

  Should the business really a failover option?

  Best regards

  mseberg

• With iscsi failover data warehouses

  Hello to all members,

  Im looking for a solution to create a failover (active/active preference) data warehouses (iscsi) with 2 different devices.

  I read on FT but I think that FT do not create a failover with data warehouses (transparent failover) hosts only, correct?

  I need a solution for reading/writing in the two data stores at the same time.

  Thank you very much and sorry my English.

  Welcome to the community,

  you are correct FT so that DRS and HA only care about the workload of VMS, not storage.

  For the requirement type (transparent failover) you will need a storage based replication/mirroring as HP P4000 (formerly Lefthand).

  André