Without SSL on Apps Tier DNS load balancing

Similar Questions

• Two shared the Application layer without load balancer

  Hi all
  
  I created the system of Application of layer two without the load balancer.
  
  EBS: 12.1.3 DB: 11.2
  
  I have two URLS:
  
  https://XYZ:8002/OA_HTML/APPSLocalLogin.jsp
  
  https://ABC:8002/OA_HTML/APPSLocalLogin.jsp
  
  I run the auctoconfig on the last node abc. When I try to access the https://xyz:8002/OA_HTML/APPSLocalLogin.jsp, it automatically redirects to https://abc:8002/OA_HTML/APPSLocalLogin.jsp
  
  If autoconfig on xyz last execution, https://abc:8002/OA_HTML/APPSLocalLogin.jsp URL automatically redirects to https://xyz:8002/OA_HTML/APPSLocalLogin.jsp.
  
  I know in 11i is the behavior, but according to my understanding in R12 this shouldn't ' e be the case because another application works very well.
  
  Concerning
  Sourabh Gupta

  Please see (multiple Application nodes configured without Load Balancer Cause Login Redirection [1362885.1 ID]).

  Thank you
  Hussein

• Cluster without a load balancer?

  Two interactive servers FMS can work this way:
  1. they both serve the same FLV VOD on both machines
  2. where a single server gets X users connected, next user (X + 1) is routed to the next server
  3. There is no hardware for load balancing
  
  Is this possible and if this is the case, how?

  Yes, that's possible, but there is nothing integrated FMS to cope. You must write your own application to do.

  I like to handle this by building a little app that queries the service of administration of each involved server once per second or more, and retrieves his stats on the instances of the application I need to keep track of (we'll call it the 'load swing app". In this application, I include functions to loop through the statistical data for each server and determine which makes the most sense to send the following to customer.

  Client side, I connect first to the load balancer app, providing an application ID that I want to connect to as an argument in the call to the connect() function. Load Balancing takes the best decision of server and returns the host name of the target server. Then, the client disconnects from the load balancer and connects to the target host.

• Help setting up MIrage with load balancer

  I'm trying to configure Mirage to use a F5 load balancer. We simply indicated the Mirage server and received an alias DNS and VIP of the N/W team. I not configure Mirage specifically on an F5 before, should it work without the guard dog service settings configured (at least up to a point where the client can connect)? Or the watchdog service must be configured?

  For setting up F5, we recommend enabling SSL and using SSL session ID persistence, also increase value of persistence for a few hours delay Mirage can be long connected and you don't want them to bounce around. A checkup at the service of Mirage generally configure TCP/half opened on the F5 that verifies that the service of the Mirage port is open. Also enable connections unless the method of balance load.

• Configuration of AppsTier (CFP, load balancing) of nodes R12 Multi with RAC 2 nodes

  Dear all,
  
  I installed and configured applications R12 with Oracle RAC 2 nodes. (APP1, DB1 and DB2).
  
  Now, I need to add a layer of application (APP2) to configure high availability, balancing load and PCP.
  
  So, I cloned (adcfgclone.pl appsTier) application for APP2 layer (not shared, the two file systems are different). When I run the application it doesn't knot APP2 App1, more more simultaneous manager works only on a node (can be due to APPLCSF does not point to the mounting NFS share folder), although I've defined managers primary school-children also.
  
  If I run the autoconfiguration of APP1 application service will only work on APP1 and even if I do for APP2, then application works with APP2. I need to have configuration CFP, balancing the load (via DNS if possible) and the high availabllity for the Application tier.
  
  When I start the application, it will start OPMN and APPS Listener on the nodes, but simultaneous manager does not start on both, to a single node.
  
  Is this requires having both APPS name of the node is the same?
  
  Thank you very much
  
  Ravi Purbia
  
  Published by: Purbia delighted on June 9, 2009 18:04
  
  Published by: Purbia delighted on June 9, 2009 18:05
  
  Published by: Purbia delighted on June 9, 2009 18:07

  Ravi,

  If I run the autoconfiguration of APP1 application service will only work on APP1 and even if I do for APP2, then application works with APP2.

  Most likely, it's something with the profile option values, then run utility adchkcfg to get an html report that lists all files and profile options that change when you run AutoConfig on each node.

  I need to have configuration CFP, balancing the load (via DNS if possible) and the high availabllity for the Application tier.

  For load balancing, you must perform the steps according to the guidelines of this document.

  Note: 380489.1 - using Load-balance with Oracle E-Business Suite Release 12
  https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=380489.1

  For the installation of the CFP, please see:

  Note: 388577.1 - using Load-balance with Oracle E-Business Suite Release 12
  https://metalink2.Oracle.com/MetaLink/PLSQL/ml2_documents.showDocument?p_database_id=not&P_ID=388577.1

  When I start the application, it will start OPMN and APPS Listener on the nodes, but simultaneous manager does not start on both, to a single node.

  Any errors in the log file of CM?

  Is this requires having both APPS name of the node is the same?

  It is not necessary.

  Kind regards
  Hussein

• Changing the Configuration off EBS App Tier hosts

  Hello
  
  I have a few questions about to reconfigure an application to TEST system configuration after a clone/backup/restore.
  
  (1) we have three knots on our PRODUCTION file system. Node A - serves the DB level. Node B - is (Conc, Admin and Web server processing) application server and the node is the Application Server (only used for the CFP).
  
  (2) I noticed that during periods of heavy concurrent processing, node C is never used and is almost always at 0-5% usage. Node B, but at these moments is always 95-100% usage.
  
  (3) so I want to make a change in the following manner on the cloned system (and then follow through with the same change on the PRODUCTION system)
  
  (4) I want to assign the node C as the web server only (entry point into the Application)
  
  (5) I then want to assign Node B to the tier of treatment/Admin/applications concurrent server
  
  (6) node A will remain as the tier of DB server.
  
  After completing this configuration (if possible), I will double then the web and server level CP/Admin/Apps using a F5 load balancer.
  
  Is it possible (using the CONTEXT_FILE) for re - configure nodes as indicated on the 4 and 5?
  
  Thanks in advance.

  Also in the new configuration, I set the $APPL_TOP on node B and node C on the test instance and run adcfgclone.pl AppsTier on both nodes after you change the $CONTEXT_FILE?

  Do not set the $APPL_TOP on both nodes, but you don't need to edit the context file after you run the script adcfgclone.pl as the script will prompt you for the services that must be run on each node.

  Thank you
  Hussein

• Best way to HTTP in OSB load balancing

  Hello world
  
  We have a cluster of OSB and we must load balance HTTP requests on managed servers. Looking for info on OSB in load balancing, I found that there are essentially two options: use a hardware load balancer or a software solution like Weblogic HttpClusterServlet. For the moment, we have without balancer material available so we will have to take the option of software. I found a few articles on the configuration of HttpClusterServlet as http://redstack.wordpress.com/2010/12/20/using-weblogic-as-a-load-balancer.
  But I have a question for this configuration. If we use a managed server as a proxy HTTP requests between OSB as managed servers, what would happen if the server goes down? I think that one of the main objectives of a cluster deployment is to avoid a single point of failure, but with this configuration, all requests depend on the availability of the managed proxy server.
  
  Could you recommend a configuration of implementation of OSB load balancing?
  
  Thank you in advance,
  
  Daniel.

  Load Balancing in a cluster for http requests can be made using at least 4 different ways:

  (1) - use a hardware load balancer like F5 BigIP LTM
  (2) - use a web server with the plugin from weblogic to the cluster frontend
  (3) - use weblogic with HTTPClusterServlet
  (4) - use the DNS round robin - it works if you managed servers that run on 2 machines (say mach1, mach2) but on the same port. Client HTTP use hostname "mach" to access the URL and the dns has a resolution of names alternating Mach mach 1 and mach2 IP addresses...

  All options except (1) only achieve load balancing and not automatically failover all instances... Balancing load material has the additional feature to probe [sending periodic pings to targets], by which it can detect if the target resource is alive and do not send traffic to other nodes who are alive... That's why the hardware load balancers are worth their investment...
  other options may work if the client is encoded to a retry on failure... so on 2nd or subsequent attempt, the routing is done in the machine that is alive...

  For the options (1), (2)) and (3), you also need a redundancy of the system (material of load balancer, web server or weblogic) to avoid the single point of failure for load balancing... Balancers support material are usually deployed in redundant pairs to achieve...

  Published by: atheek1 on 11/22/2011 15:31

• Network Load Balancing error

  Hello

  I have DC with 192.168.10.2 255.255.255.0 P.DNS 192.168.10.2 & ADC 192.168.10.3 P.DNS 192.168.10.2 255.255.255.0

  When I configure the network load balancing in win2012r2 std I get below error. Please help on this.

  "NLB Manager running on a system with all networks bound to NLB mifht does not work as expected.
  If all interfaces are ser to run NLB in "unicast" mode, Manager NLB will fail to connect to the hosts. »

  Thank you.

  This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
  *
  http://social.technet.Microsoft.com/forums/en-us/home s/fr-U.S./Accueil
  http://social.msdn.Microsoft.com/Forum

• How to configure das MD3200i load balancing

  I would like to connect a MD3200i (with two raid controllers) to one of our Windows 2003 R2 servers without the aid of a switch.

  After most of the documentation, some things remain pretty obscure to me. I'm new to MPIO/balancing and cannot figure how to set up.

  Is it possible to connect 1 nic host to RAID 0 and another host nic to RAID 1 and then combine the bandwidth? Thus having 2Gbs instead of 1Gbs? Or is it only a redundant path sollution, happening the other controller in case of failure of the first line. How can I configure this regarding the IP addresses, subnets. And where is the configuered to load balancing. This is explained in the documentation? I can't find it. I found a few examples that include the use of a switch, but none with das sollutions.

  What I have is 4 the MD3200i UTP cables to connect to the host. 2 the high raid controller and 2 on the lower raid controller. And use that I have 4x1Gbs, resulting a connection 4Gbs to a single partition on the MD3200i of load balancing.

  Thanks for any help.

  Multiple paths and in windows 2003 load balancing is managed by the driver MPIO is installed when you install the 'host' or 'full' version install MD Storage Manager. There is no need to separately aggregated network adapters to get the aggregate bandwidth. The pilot, by default, uses repetition alternated on all ports connected to a single controller.

  Also, for a single virtual disk, all i/o through a single controller and the second controller acts as a redundant path. So, if you have 2 x 1 Gbps connections to each controller, you will have, at most, 2 Gbps for each partition. Now, each controller can have virtual disks, so the second controller may have a second partition that will also have a separate between 2 x 1 Gbps connection.

  You can set IP addresses and subnets that are similar to the way that you would with a switch as long as you can test the connection port. It would be wise for each NETWORK card on the host on a different subnet and each port on the MD3200i on the corresponding subnet. This will make it easier when you set up your iSCSI.

  You can use the configuration utility to MD in place your iSCSI sessions too

  -Mohan

• Load Balancing does not not on 2911

  Hello people,

  I have some difficulty to operate the Load Balance on my 2911.

  I have followed the editing on this site:

  http://www.Cisco.com/en/us/Tech/tk648/tk361/technologies_configuration_example09186a0080950834.shtml

  and APARENTLY it works, but not in reality, because I see packets using a NAT IPS bot thru, but when I check on the interfaces I see we're not receive / send anything.

  Background:

  G0/0, I have one ISP, other 1/G0, G0/2 my network.

  Building configuration...

  Current configuration: 6045 bytes

  !

  ! Last configuration change to 15:47:49 UTC Tuesday, January 28, 2014 by alan

  ! NVRAM config update at 14:32:59 UTC Tuesday, January 28, 2014 by alan

  ! NVRAM config update at 14:32:59 UTC Tuesday, January 28, 2014 by alan

  version 15.1

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  encryption password service

  !

  ROUTER1 hostname

  !

  boot-start-marker

  boot-end-marker

  !

  !

  logging buffered 51200 warnings

  !

  No aaa new-model

  !

  !

  No ipv6 cef

  IP source-route

  IP cef

  !

  !

  !

  !

  dhcp LAN_DHCP_POOL IP pool

  network 192.168.0.0 255.255.0.0

  default router 192.168.2.2

  domain g_bacon

  DNS 8.8.8.8 Server 208.67.222.222

  0 8 rental

  !

  !

  no ip domain search

  IP host ROUTER1 192.168.2.2

  8.8.8.8 IP name-server

  name-server IP 208.67.222.222

  IP-server names 8.8.4.4

  IP-server names 208.67.220.220

  !

  Authenticated MultiLink bundle-name Panel

  !

  !

  Crypto pki token removal timeout default 0

  !

  Crypto pki trustpoint TP-self-signed-2101532551

  enrollment selfsigned

  name of the object cn = IOS - Self - signed - certificate - 2101532551

  revocation checking no

  rsakeypair TP-self-signed-2101532551

  !

  !

  TP-self-signed-2101532551 crypto pki certificate chain

  certificate self-signed 01

  3082022B 30820194 02020101 300 D 0609 2A 864886 F70D0101 05050030 A0030201

  2 060355 04031326 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 31312F30

  69666963 32313031 35333235 6174652D 3531301E 32313137 OF 31323239 170 3131

  31335A 17 0D 323030 31303130 30303030 305A 3031 06035504 03132649 312F302D

  4F532D53 5369676E 656C662D 43 65727469 66696361 74652 32 31303135 65642D

  33323535 3130819F 300 D 0609 2A 864886 01050003, 818, 0030, 81890281 F70D0101

  8100DEA3 06574FDF B2B2113F 84A1EF39 9969F4D9 04131994 A3FCC466 D0328CCF

  B219F1AE A3DCC204 CD993BB2 F59C9A7F C251024E 382162 5 D9277CEB F1A575A5

  0356 C 896 A7A1BB48 8EA4CFF6 DA77B72C 9904A73B 6731A6E0 3004E5EA B44C1F7F

  5667496C 1E8E603D BE9B1AA1 1065E449 F6110C17 1A5FE3B9 3593BF87 96E14DEC

  010001A 3 53305130 1 130101 FF040530 030101FF 301F0603 0F060355 87FF0203

  551 2304 18301680 14E5F8C8 C30593C3 CEAB1874 F94F070B 9674F152 AD301D06

  03551D0E 04160414 E5F8C8C3 0593C3CE AB1874F9 4F070B96 74F152AD 300 D 0609

  2A 864886 F70D0101 A 05050003 81810092 51314, 50 EA812CDA AC97A8D1 2CA06BCC

  6FD5B4A6 DA888322 E2166AB4 0CF340BB E0407C95 584A1BDF 5DC3A6EE 2862E9CF

  7BF0C831 54F06ABF 011664 D 3 75269FF3 02D434BD 0FD15F32 EB34730C 47FE29D9

  7C2BBF9D 5BDB1D4F EEBFBED5 9B07450E 83DA57B2 1F296D0A 52D39A8F 6A 679244

  05C0924C F3FA9A05 53198E BDB28409

  quit smoking

  license udi pid CISCO2911/K9 sn FTX1553AJQU

  !

  !

  username privilege 15 secret 5 alan $1$ b6Jk$ 8iz3K3cTUgSZ.VePkKl5a.

  !

  redundancy

  !

  !

  !

  !

  !

  class-map correspondence-any PROHIBIDAS

  Protocol httpwww.facebook.comhost game «»

  Protocol httpwww.youtube.comhost game «»

  match Protocol http host 'www.pornotube.com.

  Protocol http host «www.xvideos.com» game

  match Protocol http host 'www.mega.co.nz'.

  match Protocol http host 'www.radios-on-line.com.ar'.

  match Protocol http host 'www.enlaradio.com.ar'.

  Protocol http host «www.cienradios.com.ar» game

  match Protocol http host 'www.radios-argentina.com.ar'.

  match Protocol http host 'www.fmyam.com.ar'.

  Protocol http host «www.piratebay.org» game

  class-map match-all P2P

  winmx Protocol game

  gnutella Protocol game

  bittorrent Protocol game

  match Protocol kazaa2

  !

  !

  Policy-map DROP_PROHIBIDAS

  class PROHIBIDAS

  drop

  class P2P

  drop

  !

  !

  !

  !

  !

  !

  !

  !

  the Embedded-Service-Engine0/0 interface

  no ip address

  Shutdown

  !

  interface GigabitEthernet0/0

  Fibertel description

  DHCP IP address

  IP access-group acl101 in

  IP access-group out acl101

  NAT outside IP

  IP virtual-reassembly in

  automatic duplex

  automatic speed

  No cdp enable

  out of service-policy DROP_PROHIBIDAS

  !

  interface GigabitEthernet0/1

  Arnet description

  IP 186.153.125.138 255.255.255.248

  IP access-group acl101 in

  IP access-group out acl101

  NAT outside IP

  IP virtual-reassembly in

  automatic duplex

  automatic speed

  No cdp enable

  out of service-policy DROP_PROHIBIDAS

  !

  interface GigabitEthernet0/2

  IP 192.168.2.2 255.255.0.0

  IP access-group block_FB in

  IP access-group out acl101

  IP nat inside

  IP virtual-reassembly in

  IP tcp adjust-mss 1452

  automatic duplex

  automatic speed

  No cdp enable

  !

  router RIP

  version 2

  network 192.168.0.0

  !

  IP forward-Protocol ND

  !

  IP http server

  IP 8180 http port

  20 class IP http access

  IP http secure server

  IP http timeout policy slowed down 60 life 86400 request 10000

  !

  IP nat inside source map route address interface GigabitEthernet0/1 overload

  IP nat inside source map route fibertel interface GigabitEthernet0/0 overload

  IP route 0.0.0.0 0.0.0.0 track GigabitEthernet0/0 123

  IP route 0.0.0.0 0.0.0.0 200.122.102.1 254

  !

  block_FB extended IP access list

  deny ip 192.168.0.0 0.0.255.255 welcome 173.252.100.16

  deny ip 192.168.0.0 0.0.255.255 173.252.64.0 0.0.63.255

  deny ip 192.168.0.0 0.0.255.255 31.13.24.0 0.0.7.255

  deny ip 192.168.0.0 0.0.255.255 31.13.64.0 0.0.63.255

  deny ip 192.168.0.0 0.0.255.255 66.220.144.0 0.0.15.255

  deny ip 192.168.0.0 0.0.255.255 69.63.176.0 0.0.15.255

  deny ip 192.168.0.0 0.0.255.255 69.171.224.0 0.0.31.255

  deny ip 192.168.0.0 0.0.255.255 74.119.76.0 0.0.3.255

  deny ip 192.168.0.0 0.0.255.255 103.4.96.0 0.0.3.255

  deny ip 192.168.0.0 0.0.255.255 204.15.20.0 0.0.3.255

  IP 192.168.0.0 allow 0.0.255.255 everything

  allow an ip

  !

  access-list 110 permit ip 192.168.0.0 0.0.255.255 everything

  !

  !

  !

  !

  route allowed fibertel 10 map

  corresponds to the IP 110

  is the interface GigabitEthernet0/0

  !

  arnet allowed 10 route map

  corresponds to the IP 110

  is the interface GigabitEthernet0/1

  !

  !

  !

  control plan

  !

  !

  exec banner ^ C ^ C

  connection of the banner ^ C ^ C

  Banner motd ^ C ^ C

  !

  Line con 0

  local connection

  line to 0

  line 2

  no activation-character

  No exec

  preferred no transport

  transport of entry all

  transport output pad rlogin lapb - your MOP v120 udptn ssh telnet

  StopBits 1

  line vty 0 4

  access-class 23 in

  privilege level 15

  local connection

  transport input telnet ssh

  line vty 5 15

  access-class 23 in

  privilege level 15

  local connection

  transport input telnet ssh

  !

  Scheduler allocate 20000 1000

  end

  So far so good, I have check the transactions of NAT:

  ROUTER1 #show ip nat trans

  Inside global internal local outside global local outdoor Pro

  TCP 200.122.102.74:62114 192.168.0.1:62114 17.151.239.110:443 17.151.239.110:443

  TCP 200.122.102.74:62119 192.168.0.1:62119 17.172.233.134:5223 17.172.233.134:5223

  TCP 200.122.102.74:34945 192.168.0.2:34945 181.30.241.103:443 181.30.241.103:443

  TCP 200.122.102.74:37444 192.168.0.2:37444 173.194.42.230:443 173.194.42.230:443

  TCP 200.122.102.74:37695 192.168.0.2:37695 181.30.241.109:80 181.30.241.109:80

  TCP 200.122.102.74:40662 192.168.0.2:40662 173.194.74.188:5228 173.194.74.188:5228

  TCP 186.153.125.138:41426 192.168.0.2:41426 216.115.101.179:443 216.115.101.179:443

  TCP 200.122.102.74:41484 192.168.0.2:41484 216.115.101.179:443 216.115.101.179:443

  TCP 200.122.102.74:42381 192.168.0.2:42381 181.30.241.31:80 181.30.241.31:80

  TCP 186.153.125.138:42553 192.168.0.2:42553 98.136.223.39:8996 98.136.223.39:8996

  and I see they're going through the two connections.

  Buuuuuuuuuuuuut, when I check the interfaces...

  ROUTER1 #show int g0/0

  GigabitEthernet0/0 is up, line protocol is up

  Material is CN Gigabit Ethernet, the address is c464.1354.b8c0 (BIA c464.1354.b8c0

  )

  Description: Fibertel

  The Internet address is 200.122.102.74/24

  MTU 1500 bytes, BW 100000 Kbit/s, DLY 100 usec,

  reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  KeepAlive set (10 sec)

  Full-Duplex, 100 Mbps, media type is RJ45

  control output stream is XON, control of input stream is XON

  Type of the ARP: ARPA, ARP Timeout 04:00

  Last entry of 00:00:00, 00:00:00 exit, exit hang never

  Final cleaning of "show interface" counters never

  Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 0

  Strategy of queues: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 774000 bps, 161 packets/s

  5 minute output rate 423000 bps, 102 packets/s

  2133521 package, 1223904205 bytes, 0 no buffer entry

  Received 615778 broadcasts (0 of IP multicasts)

  0 Runts, 0 giants, 0 shifters

  entry 0, 0 CRC errors, frame 0, saturation 0, 0 ignored

  Watchdog 0, multicast 0, break 0 comments

  1065308 packets output, 214203455 bytes, 0 underruns

  0 output errors, 0 collisions, 1 interface resets

  unknown protocol 0 drops

  0 babbles, collision end 0, 0 deferred

  1 lost carrier, 0 no carrier, interrupt the output of 0

  output buffer, the output buffers 0 permuted 0 failures

  ROUTER1 #show int g0/1

  GigabitEthernet0/1 is up, line protocol is up

  Material is CN Gigabit Ethernet, the address is c464.1354.b8c1 (BIA c464.1354.b8c1

  )

  Description: arnet

  The Internet address is 186.153.125.138/29

  MTU 1500 bytes, BW 100000 Kbit/s, DLY 100 usec,

  reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  KeepAlive set (10 sec)

  Full-Duplex, 100 Mbps, media type is RJ45

  control output stream is XON, control of input stream is XON

  Type of the ARP: ARPA, ARP Timeout 04:00

  Last entry 00:04:01, 00:00:06 exit, exit hang never

  Final cleaning of "show interface" counters never

  Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 0

  Strategy of queues: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 0 bps, 0 packets/s

  5 minute output rate 0 bps, 0 packets/s

  208948 packages, 153515983 bytes, 0 no buffer entry

  Received 1236 broadcasts (0 of IP multicasts)

  0 Runts, 0 giants, 0 shifters

  entry 0, 0 CRC errors, frame 0, saturation 0, 0 ignored

  Watchdog 0, multicast 0, break 0 comments

  190283 packets output, 45657373 bytes, 0 underruns

  0 output errors, 0 collisions, 0 resets interface

  unknown protocol 0 drops

  0 babbles, collision end 0, 0 deferred

  carrier, 0 no carrier, lost 0 0 interrupt output

  output buffer, the output buffers 0 permuted 0 failures

  Everything happens through G0/0 and nothing in G0/1!

  Any ideas on why this is happening?

  Thank you in advance for your help!

  Kind regards

  Alan

  Hello

  Yes here you only have a single default route installed (one from the DHCP server) so it can't NAT on the other interface as it can route on this one.

  Change your configuration like this:

  no ip route 0.0.0.0 0.0.0.0 track GigabitEthernet0/0 123

  no ip route 0.0.0.0 0.0.0.0 200.122.102.1 254

  IP route 0.0.0.0 0.0.0.0 dhcp

  IP route 0.0.0.0 0.0.0.0 200.122.102.1 254

  Now if you want to follow the first route look at this document:

  http://www.Cisco.com/en/us/docs/iOS/dial/configuration/guide/dia_rel_stc_rtg_bckup.html#wp1065528

  Concerning

  Alain

  Remember messages useful rate.

• VPN load balancing

  Hello

  for Concentrators VPN load-balancing, a similar configuration must be to both devices. The master of the cluster config VPN concentrator push. for other members of the cluster, or must be manually?

  Thanks in advance

  Hi Abu Alqader,

  The decision to use load balancing or VRRP is a lot depends on your VPN environment.

  Personally, I think that load balancing is good/ideal if you have a lot of clients VPN, for example > 500 users. With 2 VPN3K of load balancing, you can share VPN connectivity between the boxes and will not weigh 1 VPN unit at any time. Also, if one of these boxes is down, affected vpn clients can still connect to the other device. But you must configure the VPN backup server in all the software VPN Client to achieve configuration.

  VRRP, however, has its own advantages. If the primary VPN device, all VPN Clients can still connect to a 1 modem router VPN, VRRP, allowing practically to the backup device to inherit/use primary/active VPN public IP (as the gateway). With regard to non max users, VRRP probably appropriate for the low-end model like 3005 (IPsec-200/50 clientless) & 3015 (IPSec 100/75 without client).

  http://www.Cisco.com/en/us/partner/products/HW/vpndevc/ps2284/products_data_sheet09186a00801d3b56.html

  However, the final decision depends on what option you feel better suite your environment. There is no right or wrong.

  Pls rate if find you this post will help you.

  Rgds,

  AK

• FDMEE with LCMS migration on load balancer

  Hello

  When I click on FDMEE in shared Service, I get "EPMLCM-13000: Service not available"error. "  I don't know if this is the case only because we use a load balancer.

  Some that I am not able to run in one of the environments - 11.1.2.4. Features of FDMEE are very good.

  Is just me or everyone sailing in the same boat?

  Thank you

  AA

  So if SSL is discharged then communication LWA will be on by default http and not the LB will accept that.

  Similar to the Standard deployment topology

  See you soon

  John

• DRS load balancing

  Hi people,

  Based on a few blogs now I understand now DRS load balancing based on active memory used on ESXi individual cluster nodes. Yesterday, we migrated VM to an ESXi node which pushed the memory consumed 99% but DRS seems never disturbed. I assumed that justification as the memory usage active only 11 GB of 160 GB.

  But my query is that what happens when I migrate several virtual machines to hosts that already shows alarm for 99% of the consumption of memory? If the DRS was examined only active use so why he throws alarms based on consumption, creating panic with the customer?

  Please have helped to understand the same.

  Thank you!

  Best regards

  Hari.

  Hi Hari,

  Good point.

  DRS behavior can be changed in order to study the memory consumed as well. U2c 5.5 and above, DRS considers the memory consumed as well. How much he believes is below specified KBs.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2059868

  There is a KB linked to top Ko. Please throw in that as well.

  According to me, the alarm is little generic, it works even without the DRS, it seems, the alarm is designed in a way that it is not aware of this host belongs to active DRS cluster. DRS comes with the license of the company and alarm will work with basic licenses as well.

  are you suggesting that alarm should be aware of the hosts that are part of the active DRS cluster and give only the alarm according to the metric memory configured on DRS?

• For vRA 7.0 load balancer

  If one wants to set up vRA 7.0 as average deployment and use a load balancer, can configure us what with the NSX without another like F5 load balancer?

  Yes, it's OK - that ONE type of software load balancing is necessary.

  It is not that you need both F5 and NSX, one who will do it.

• Network Load Balancing

  Hello

  I have some difficulty of implementation, network load balancing in VMware - I'm not sure what mode of load balancing that I use.

  I have an ESXi 5.5 - host connected to a HP Procurve switch I have configured for 2 VLANS (40,41).

  On the switch, I created 2 trunks (Trk10, Trk20) I scored on two VLANs:

  trunk Trk10 trunk 23,47

  24,48 trunk Trk20 trunk

  VLAN 40

  name of "trial".

  untagged 1-22

  Tagged 50, Trk10, Trk20

  no ip address

  output

  VLAN 41

  name "PLC".

  tagless 25-46

  Tagged Trk10, Trk20

  no ip address

  output

  Port 23 and 47 will ESXi-host1 and port 24.48 will ESXi-host2.

  40 of VLAN is to have the network 192.168.40.0/24.

  41 of VLAN is to have the network 192.168.41.0/24.

  I created a virtual switch that has 2 NICs in it, but how do I set the load balancing mode?

  The virtual machine is slow on the internet right now, and I suspect the packets going to the VLAN evil.

  (Time of balancing mode is set to 'Route based on the original virtual port code').

  Kind regards

  Soren

  Let me know if you need more information.

  Could you do a 'show interface memory' and 'show interface' on the HP switch and paste it here?

  I would remove the trunks as I don't see why this is necessary in your configuration...

  Make sure the road based on virtual port ID what origin is selected on vSwitch1 and both exchanges configured (PLC and trial).

  Remove the trunks on the HP switch and tag/UNTAG required VLANS on individual ports that were previously used in these trunks...

  Quick config necessary for HP...

  conf t

  without trunk 23,47 Trk10 trunk

  without trunk Trk10 trunk 24.48

  VLAN 1

  23,24,47,48 not marked

  VLAN 40

  Tagged 23,24,47,48

  VLAN 41

  Tagged 23,24,47,48

  WARNING: You may have a few hickups network when you do...

  What model switch you use...?

  / Rubeck