Rick Donato Purpose The purpose of this document is to explain the role and functions of the CSW Pseudo Stack. Summary Within the Brocade ADX feature set is the ability to forward traffic based on layer 7 attributes (such as host header, URI etc.). This is achieved by enabling content switching (CSW). In order for the the … Read more
Purpose The purpose of this document is to explain the various steps required in configuring a remote access VPN on a Vyatta appliance. Vyatta Configuration The Vyatta configuration steps are pretty straight forward. You enable the outside interface with IPSEC, the IP pool, along with the secret passphrase and usernames and passwords, then your good … Read more
Question How do I show the CPU usage for the management processor ? Answer To see the CPU usage on the MP (Management Processor) the following command is used, SSH@adx# show cpu-utilization peak: 41.4 percent busy at 5520 seconds ago 7243 sec avg: 10.3 percent busy 1 sec avg: 1.0 percent busy 5 … Read more
Content-Length The content-length header informs the client of the byte length of the HTTP body. This is typically used for HTTP 1.1 (i.e persistent connections) to ensure the client knows when the current response/request is complete so that the connection can be reused for further requests. Transfer-Encoding Chunked However in certain cirucumstances the server may … Read more
Issue This is a nasty little big I found the other day which hopefully you can avoid after reading this article. When using SCP to copy a file to/from the ASA that is over 100k the transfer stalls and then fails. This results in an orphaned ssh_init process. Each ssh_init process then still occupies a … Read more
Problem When using the command “persist uie add” in conjunction with the “node” command within an iRule the F5 issues a RST back to both the client and server. Background Lets look at an example. First we`ll look at the configuration and then the resulting behaviour. Configuration You have the following configured, You have persistence … Read more
Issue Within the vSphere client or vCentre your virtual machine(s) are named as ‘Unknown VM’ and are inaccessible. Solution This can be caused by connectivity issues between the hypervisor and its datastore. To resolve the issue follow these steps, Log into the virtual machines host via SSH. Then change directory via the command ‘cd /var/lib/vmware/hostd/stats‘. … Read more
Introduction Within this article we will look at the various way to configure NAT on a Vyatta appliance. To configure NAT source and destination rules are defined using the ‘set nat source’ and ‘set nat destination’ commands. The source rules relate to the translation of the source address, and the destination rules relate to the … Read more
Purpose The purpose of this article is to explain the configuration steps required in configuring a hairpinned VPN with double NAT on a Cisco ASA firewall (running 8.0). Terms Within this article there are 2 key terms that you will need to know. They are, Hairpinning (U-turn Traffic) – Hairpinning is a term to … Read more
The auto last hop feature ensures that traffic is sent back via the same hop from which it was sent. This is done by the F5 forwarding traffic to the MAC address of the last hop. The last hop MAC address is recorded within the connection table along with the source and destination addresses.