topic ACE new rserver in Application Networking

ACE new rserver

mj11 — Wed, 20 Feb 2013 22:53:25 GMT

Hi All

I am trying to move to real server's from the current configuration and adding to a new VIP, does anyone know what changes I would need to make.

I am trying to move the 2 proxies BCPROXY1 and BCPROXY2.

Any help much appreciated

Regards MJ

ACE new rserver

Jorge Bejarano — Thu, 21 Feb 2013 00:03:01 GMT

MJ;

I tried to open your txt file but I could not.

Could you paste the configuration in question?

Anyway, if you just have 2 rservers currently in use and you want to remove them to add them under another serverfarm, that´s possible.

You need to go to the serverfarm and do the following:

host1/Admin(config)# serverfarm SFARM1
host1/Admin(config-sfarm-host)# no rserver server1
host1/Admin(config-sfarm-host)# no rserver server1

host1/Admin(config)# serverfarm SFARM2
host1/Admin(config-sfarm-host)# rserver server1
host1/Admin(config-sfarm-host-rs)# inservice
host1/Admin(config-sfarm-host-rs)# exit
host1/Admin(config-sfarm-host)# rserver SERVER2
host1/Admin(config-sfarm-host-rs)# inservice
host1/Admin(config-sfarm-host-rs)# exit

Additionally, you can just remove the serverfarm from the VIP which you do not want to use anymore and just configure the serverfarm under the new VIP.

Please specify what you are looking and the configuration and I can do it for you.

Jorge

ACE new rserver

mj11 — Thu, 21 Feb 2013 00:13:36 GMT

Hi Jorge

Thanks for the response, please see the configuration.

access-list ALL line 1 extended permit ip any any

probe icmp icmp_probe
interval 5
passdetect interval 60

rserver host BCPROXY1
description NEW HBC WEB PROXY 1
ip address 10.100.102.22
probe icmp_probe
inservice
rserver host BCPROXY2
description NEW HBC WEB PROXY 2
ip address 10.100.102.23
probe icmp_probe
inservice
rserver host PROXY1
description WEB PROXY 1
ip address 10.100.102.20
probe icmp_probe
inservice
rserver host PROXY2
description WEB PROXY 2
ip address 10.100.102.21
probe icmp_probe
inservice

serverfarm host PROXY-PRODUCTION
description PRODUCTION WEB PROXY
predictor response app-req-to-resp
rserver BCPROXY1
    inservice
rserver BCPROXY2
    inservice
rserver PROXY1
    inservice
rserver PROXY2
    inservice

class-map match-all CLASSIFY-INCOMING-TRAFFIC
2 match virtual-address 10.100.101.10 tcp eq 8080

policy-map type loadbalance first-match WEB-POLICY-L7
class class-default
serverfarm PROXY-PRODUCTION

policy-map multi-match INCOMING-WEB-TRAFFIC
class CLASSIFY-INCOMING-TRAFFIC
    loadbalance vip inservice
    loadbalance policy WEB-POLICY-L7
    loadbalance vip icmp-reply
interface vlan 1111
description ACE-VIPS-MAIL - Incoming Traffic
ip address 10.100.101.253 255.255.255.0
alias 10.100.101.254 255.255.255.0
peer ip address 10.100.101.252 255.255.255.0
access-group input ALL
service-policy input remote_management_access
service-policy input INCOMING-WEB-TRAFFIC
no shutdown
interface vlan 1112
description ACE-SERVER-VLAN
ip address 10.100.102.3 255.255.255.0
alias 10.100.102.1 255.255.255.0
peer ip address 10.100.102.2 255.255.255.0
access-group input ALL
service-policy input remote_management_access
no shutdown

ip route 0.0.0.0 0.0.0.0 10.100.101.1

All I am wanting to do is remove the to test proxy servers to a new VIP for (for test before putting back into production)

will I need a new service policy or can I use the existing one (INCOMING-WEB-TRAFFIC)

Regards MJ

ACE new rserver

Shirshendu Nandi — Thu, 21 Feb 2013 01:16:43 GMT

conf t

serverfarm host PROXY-PRODUCTION

rserver BCPROXY1

no inservice

rserver BCPROXY2

no inservice

no rserver BCPROXY1

no rserver BCPROXY2

Create a new server farm

serverfarm host BCPROXY

rserver BCPROXY1

inservice

rserver BCPROXY2

inservice

! Create a new classmap with new VIP address

class-map match-all BCPROXY-VIP

2 match virtual-address tcp eq 8080

policy-map type loadbalance first-match BCPROXY-POLICY-L7

class class-default

serverfarm BCPROXY

Create a new class instance under existing policy map

policy-map multi-match INCOMING-WEB-TRAFFIC

class BCPROXY-VIP

loadbalance vip inservice

loadbalance policy BCPROXY-POLICY-L7

loadbalance vip icmp-reply

ACE new rserver

Jorge Bejarano — Thu, 21 Feb 2013 02:05:43 GMT

MJ,

***This is how you should remove the rservers:

host1/Admin(config)# serverfarm PROXY-PRODUCTION

host1/Admin(config-sfarm-host)# no rserver BCPROXY1

host1/Admin(config-sfarm-host)# no rserver BCPROXY2

Once you have done that, you can create the new serverfarm, but there are some scenarios where you can have

different serverfarms configured with the same rservers but different VIPs(class-maps) hearing on another ports.

Then you may have something like this after configuring that.

class-map match-all NEW-VIP

2 match virtual-address 10.100.101.X tcp eq 8080

policy-map type loadbalance first-match WEB-POLICY-L7-NEW

class class-default

serverfarm PROXY-PRODUCTION-NEW

policy-map multi-match INCOMING-WEB-TRAFFIC

class CLASSIFY-INCOMING-TRAFFIC

loadbalance vip inservice

loadbalance policy WEB-POLICY-L7

loadbalance vip icmp-reply

class NEW-VIP

loadbalance vip inservice

loadbalance policy WEB-POLICY-L7-NEW

loadbalance vip icmp-reply

As you can see the policy multimatch called: INCOMING-WEB-TRAFFIC can have the old class-map:CLASSIFY-INCOMING-TRAFFIC and the new one which I called: NEW-VIP.

It is not required that you configure a new policy-map multi-match, you can just "reuse" it, and the ACE will match class by class analyzing if what it matches is what it looks for and will continue doing that until it finally finds what configuration related to what it is supposed to do.

Do not hesitate to let me know any query you have!

Hope this helps!

Jorge