topic Re: Cannot ping VIP in Application Networking

Cannot ping VIP

danger_mousie — Tue, 16 Oct 2007 13:25:57 GMT

Routing is OK. I can ping from Context out to local and learned subnets, but cannot ping vlan interface on the ACE or the VIP from the sup. So, this means a layer 4-7 issue.

Config is as follows:

class-map match-any VIP-A_Class

6 match virtual-address 1.1.1.3 tcp eq xxx

8 match virtual-address 1.1.1.3 tcp eq yyy

policy-map multi-match VIP-A

class VIP-A_Class

loadbalance vip inservice

loadbalance vip icmp-reply active

loadbalance vip advertise active

interface vlan 3

ip address 1.1.1.2 255.255.255.248

service-policy input VIP-A

no shutdown

Other info:

There is an operational reachable server in the group.

The Admin context does not have an interface on VLAN 3, only allocates it to the context.

I have looked into route health injection but don't think it is relevant to this, correct me if i'm wrong?

If you require more info, please let me know.

Re: Cannot ping VIP

Gilles Dufour — Wed, 17 Oct 2007 06:27:00 GMT

you do not have a 'loadbalance policy ' in your multimatch policy. So I don't see how this policy can be up.

Except that your config is ok.

I'm using the same in the lab and it works.

Gilles.

Re: Cannot ping VIP

danger_mousie — Wed, 17 Oct 2007 08:32:06 GMT

I don't really need an L7 policy for this particular group, so wasn't going to add it in. I can add a dummy one in if necessary. This is the reason I cannot ping it?

Re: Cannot ping VIP

Gilles Dufour — Wed, 17 Oct 2007 09:47:37 GMT

yes you need it.

This is how you assign the serverfarm to the vip.

switch/User1(config)# policy-map multi-match SLB1

switch/User1(config-pmap)# class VIP-250-81

switch/User1(config-pmap-c)# no loadbalance policy SF_Linux4

switch/User1(config-pmap-c)#

gdufour-cat6k1#ping 192.168.100.250

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

gdufour-cat6k1#

[Resuming connection 1 to 127.0.0.30 ... ]

switch/User1(config-pmap-c)# loadbalance policy SF_Linux4

switch/User1(config-pmap-c)#

gdufour-cat6k1#ping 192.168.100.250

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:

.!!!!

Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms

gdufour-cat6k1#

Re: Cannot ping VIP

danger_mousie — Wed, 17 Oct 2007 09:52:00 GMT

It's working thanks, just applied it as you were answering. I just put the default class into it.

Yay! Now it's testing time 🙂