<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Load Balancing FTP Server thru CSM using a single Client IP in Application Networking</title>
    <link>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734507#M14062</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;We have a need to load balance 3 FTP servers.  These servers are reached only from a single client IP which is a database server.   The FTP method that is being used is currently passive.  Our configuration is currently unidirectional, ie, the FTP client (the one database server) sends to the VIP and the FTP Servers then talk directly back to the FTP client and the traffic does not go back through the CSM.  The problem is that because FTP negotiates another port to talk on, we have to use sticky so that the connection is sent back to the original FTP server that sent the FTP data port to talk on.  But, since we only have a single client IP that is ever used we are not load balancing appropriately across the FTP servers.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Traffic flow goes something like this, tcp port followed after colon as an example&lt;/P&gt;&lt;P&gt;1. FTP Client ----&amp;gt; VIP:21&lt;/P&gt;&lt;P&gt;2. CSM ---------&amp;gt; FTP Server:21&lt;/P&gt;&lt;P&gt;3. FTP Server --------&amp;gt; FTP Client(FTP server says come talk to me on port 1700)&lt;/P&gt;&lt;P&gt;4. FTP Client ---------&amp;gt; VIP:1700&lt;/P&gt;&lt;P&gt;5. CSM ---------&amp;gt; FTP Server:1700&lt;/P&gt;&lt;P&gt;6. FTP Server:1700 ---------&amp;gt; FTP Client&lt;/P&gt;&lt;P&gt;repeat steps 4 thru 6&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here's our hardware and software:&lt;/P&gt;&lt;P&gt;WS-X6066-SLB-APC running  4.2(2)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Config is as follows&lt;/P&gt;&lt;P&gt;module ContentSwitchingModule 9&lt;/P&gt;&lt;P&gt; ft group 101 vlan 9&lt;/P&gt;&lt;P&gt;  priority 10&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt; vlan 216 client&lt;/P&gt;&lt;P&gt;  ip address 10.209.16.31 255.255.252.0&lt;/P&gt;&lt;P&gt;  gateway 10.209.16.1&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt; vlan 20 server&lt;/P&gt;&lt;P&gt;  ip address 10.209.0.31 255.255.252.0&lt;/P&gt;&lt;P&gt;  alias 10.209.0.11 255.255.252.0&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;probe ICMP1 icmp&lt;/P&gt;&lt;P&gt;  interval 3&lt;/P&gt;&lt;P&gt;  failed 3&lt;/P&gt;&lt;P&gt;  receive 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;  no nat server&lt;/P&gt;&lt;P&gt;  no nat client&lt;/P&gt;&lt;P&gt;  real 10.209.0.72&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  real 10.209.0.73&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  real 10.209.0.71&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  probe ICMP1&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; sticky 106 netmask 255.255.255.255 address source timeout 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; policy FHEPRT_POL1&lt;/P&gt;&lt;P&gt;  sticky-group 106&lt;/P&gt;&lt;P&gt;  serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; vserver FHEPRT1&lt;/P&gt;&lt;P&gt;  virtual 10.209.16.71 any&lt;/P&gt;&lt;P&gt;  vlan 216&lt;/P&gt;&lt;P&gt;  unidirectional&lt;/P&gt;&lt;P&gt;  serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;  replicate csrp connection&lt;/P&gt;&lt;P&gt;  no persistent rebalance&lt;/P&gt;&lt;P&gt;  slb-policy FHEPRT_POL1&lt;/P&gt;&lt;P&gt;  inservice&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
    <pubDate>Tue, 27 Mar 2007 01:33:04 GMT</pubDate>
    <dc:creator>hoelpf1</dc:creator>
    <dc:date>2007-03-27T01:33:04Z</dc:date>
    <item>
      <title>Load Balancing FTP Server thru CSM using a single Client IP</title>
      <link>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734507#M14062</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;We have a need to load balance 3 FTP servers.  These servers are reached only from a single client IP which is a database server.   The FTP method that is being used is currently passive.  Our configuration is currently unidirectional, ie, the FTP client (the one database server) sends to the VIP and the FTP Servers then talk directly back to the FTP client and the traffic does not go back through the CSM.  The problem is that because FTP negotiates another port to talk on, we have to use sticky so that the connection is sent back to the original FTP server that sent the FTP data port to talk on.  But, since we only have a single client IP that is ever used we are not load balancing appropriately across the FTP servers.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Traffic flow goes something like this, tcp port followed after colon as an example&lt;/P&gt;&lt;P&gt;1. FTP Client ----&amp;gt; VIP:21&lt;/P&gt;&lt;P&gt;2. CSM ---------&amp;gt; FTP Server:21&lt;/P&gt;&lt;P&gt;3. FTP Server --------&amp;gt; FTP Client(FTP server says come talk to me on port 1700)&lt;/P&gt;&lt;P&gt;4. FTP Client ---------&amp;gt; VIP:1700&lt;/P&gt;&lt;P&gt;5. CSM ---------&amp;gt; FTP Server:1700&lt;/P&gt;&lt;P&gt;6. FTP Server:1700 ---------&amp;gt; FTP Client&lt;/P&gt;&lt;P&gt;repeat steps 4 thru 6&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here's our hardware and software:&lt;/P&gt;&lt;P&gt;WS-X6066-SLB-APC running  4.2(2)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Config is as follows&lt;/P&gt;&lt;P&gt;module ContentSwitchingModule 9&lt;/P&gt;&lt;P&gt; ft group 101 vlan 9&lt;/P&gt;&lt;P&gt;  priority 10&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt; vlan 216 client&lt;/P&gt;&lt;P&gt;  ip address 10.209.16.31 255.255.252.0&lt;/P&gt;&lt;P&gt;  gateway 10.209.16.1&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt; vlan 20 server&lt;/P&gt;&lt;P&gt;  ip address 10.209.0.31 255.255.252.0&lt;/P&gt;&lt;P&gt;  alias 10.209.0.11 255.255.252.0&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;probe ICMP1 icmp&lt;/P&gt;&lt;P&gt;  interval 3&lt;/P&gt;&lt;P&gt;  failed 3&lt;/P&gt;&lt;P&gt;  receive 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;  no nat server&lt;/P&gt;&lt;P&gt;  no nat client&lt;/P&gt;&lt;P&gt;  real 10.209.0.72&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  real 10.209.0.73&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  real 10.209.0.71&lt;/P&gt;&lt;P&gt;   inservice&lt;/P&gt;&lt;P&gt;  probe ICMP1&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; sticky 106 netmask 255.255.255.255 address source timeout 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; policy FHEPRT_POL1&lt;/P&gt;&lt;P&gt;  sticky-group 106&lt;/P&gt;&lt;P&gt;  serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; vserver FHEPRT1&lt;/P&gt;&lt;P&gt;  virtual 10.209.16.71 any&lt;/P&gt;&lt;P&gt;  vlan 216&lt;/P&gt;&lt;P&gt;  unidirectional&lt;/P&gt;&lt;P&gt;  serverfarm FHEPRT&lt;/P&gt;&lt;P&gt;  replicate csrp connection&lt;/P&gt;&lt;P&gt;  no persistent rebalance&lt;/P&gt;&lt;P&gt;  slb-policy FHEPRT_POL1&lt;/P&gt;&lt;P&gt;  inservice&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 27 Mar 2007 01:33:04 GMT</pubDate>
      <guid>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734507#M14062</guid>
      <dc:creator>hoelpf1</dc:creator>
      <dc:date>2007-03-27T01:33:04Z</dc:date>
    </item>
    <item>
      <title>Re: Load Balancing FTP Server thru CSM using a single Client IP</title>
      <link>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734508#M14063</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You are missing "service ftp" config in the Vip definition. Try the following&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;vserver FHEPRT1&lt;/P&gt;&lt;P&gt;virtual 10.209.16.71 tcp ftp service ftp&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Syed Iftekhar Ahmed&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 27 Mar 2007 08:59:40 GMT</pubDate>
      <guid>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734508#M14063</guid>
      <dc:creator>Syed Iftekhar Ahmed</dc:creator>
      <dc:date>2007-03-27T08:59:40Z</dc:date>
    </item>
    <item>
      <title>Re: Load Balancing FTP Server thru CSM using a single Client IP</title>
      <link>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734509#M14064</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Thanks.  That will work, but we have to take out of dispatch mode or make it non unidirectional.  The traffic has to go back through the CSM for this to function and we are looking at that.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 27 Mar 2007 16:11:34 GMT</pubDate>
      <guid>https://community.cisco.com/t5/application-networking/load-balancing-ftp-server-thru-csm-using-a-single-client-ip/m-p/734509#M14064</guid>
      <dc:creator>hoelpf1</dc:creator>
      <dc:date>2007-03-27T16:11:34Z</dc:date>
    </item>
  </channel>
</rss>

