topic Re: IOS SLB - Bet I'm doing something stupid - pls enlighten in Application Networking

topic Re: IOS SLB - Bet I'm doing something stupid - pls enlighten in Application Networking https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471730#M8809 <HTML><HEAD></HEAD><BODY><P>Mike,</P><P></P><P>could you try to do the following :</P><P></P><P>conf t</P><P>ip slb serverfarm FARM.100</P><P> nat server</P><P></P><P>this will tell the MSFC to nat the vip address into the server ip address.</P><P></P><P>Regards,</P><P></P><P>Gilles.</P><P>Thanks for rating this answer.</P></BODY></HTML> Wed, 05 Oct 2005 10:25:39 GMT Gilles Dufour 2005-10-05T10:25:39Z IOS SLB - Bet I'm doing something stupid - pls enlighten https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471729#M8808 <P>Hi,</P><P>In trying to get SLB to work I believe I'm missing something I imagine is quite basic but i don't know what it is. The short description of my problem is that traffic is not sent back to the client when establishing a connection via the VIP. </P><P></P><P>I'm using base equipment: a Cat6509 with a Sup-1a, PFC, and MSFC. It's running 12.1(23) so it should be okay. I have a plain vanilla config:</P><P></P><P> <...snip...></P><P></P><P>ip slb serverfarm FARM.100</P><P> real 10.33.10.105</P><P> inservice</P><P> !</P><P> real 10.33.10.106</P><P> inservice</P><P>!</P><P>ip slb vserver EBUSINESSCRP</P><P> virtual 111.222.222.111 tcp 0</P><P> serverfarm FARM.100</P><P> inservice</P><P> </P><P> <...snip...></P><P></P><P>I have not defined a Vlan for the VIP - didn't work when i did, and can't see why it is necessary(?)</P><P></P><P>All the show cmds look good except the sh ip slb reals which has the .106 server in READY_TO_TEST state. </P><P></P><P>I can ping the VIP</P><P>I can telnet (on the required port) to the reals</P><P>I cannot telnet to the VIP</P><P></P><P>- sh ip slb conns tells me there is a connection</P><P>- tcpdump on the real servers shows the inbound but no outbound traffic, unlike when I tcpdump while connecting to the real. It leads me to think there might be some issue with the RedHat servers but saying so just results in multilateral finger pointing. The svrs have NICs on several VLANs but their default gateways are on the real srvrs VLAN - 10.33.10.x</P><P></P><P>- debug ip slb all ... well here's a snippit:</P><P></P><P> <...snip...></P><P></P><P>Oct 5 18:20:15: client= 10.0.0.49:1894</P><P>Oct 5 18:20:16: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= INIT -> SYNCLIENT</P><P>Oct 5 18:20:16: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:16: client= 10.0.0.49:1895</P><P>Oct 5 18:20:16: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:16: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:16: client= 10.0.0.49:1895</P><P>Oct 5 18:20:16: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:16: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:16: client= 10.0.0.49:1895</P><P>Oct 5 18:20:16: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:16: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:16: client= 10.0.0.49:1895</P><P>Oct 5 18:20:16: SLB_REAL_DEBUG: 10.33.10.105 (FARM.DBCRP-31) event = SLB_CONN_FAIL state= OPERATIONAL -> OPERATIONAL</P><P>Oct 5 18:20:16: SLB_CONN_DEBUG: TCP event= DESTROY, state= SYNCLIENT -> ZOMBIE</P><P>Oct 5 18:20:16: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:16: client= 10.0.0.49:1895</P><P>Oct 5 18:20:19: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= INIT -> SYNCLIENT</P><P>Oct 5 18:20:19: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:19: client= 10.0.0.49:1895</P><P>Oct 5 18:20:19: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:19: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:19: client= 10.0.0.49:1895</P><P>Oct 5 18:20:19: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:19: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:19: client= 10.0.0.49:1895</P><P>Oct 5 18:20:19: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= SYNCLIENT -> SYNCLIENT</P><P>Oct 5 18:20:19: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:19: client= 10.0.0.49:1895</P><P>Oct 5 18:20:19: SLB_REAL_DEBUG: 10.33.10.105 (FARM.DBCRP-31) event = SLB_CONN_FAIL state= OPERATIONAL -> OPERATIONAL</P><P>Oct 5 18:20:19: SLB_CONN_DEBUG: TCP event= DESTROY, state= SYNCLIENT -> ZOMBIE</P><P>Oct 5 18:20:19: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P>Oct 5 18:20:19: client= 10.0.0.49:1895</P><P>Oct 5 18:20:25: SLB_CONN_DEBUG: TCP event= SYN_CLIENT, state= INIT -> SYNCLIENT</P><P>Oct 5 18:20:25: v_ip= 111.222.222.111:13515 ( 8), real= 10.33.10.105</P><P></P><P> <...snip...></P><P></P><P>Thx for any help given</P><P>Mike</P><P></P> Wed, 05 Oct 2005 09:58:37 GMT https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471729#M8808 m.surtees 2005-10-05T09:58:37Z Re: IOS SLB - Bet I'm doing something stupid - pls enlighten https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471730#M8809 <HTML><HEAD></HEAD><BODY><P>Mike,</P><P></P><P>could you try to do the following :</P><P></P><P>conf t</P><P>ip slb serverfarm FARM.100</P><P> nat server</P><P></P><P>this will tell the MSFC to nat the vip address into the server ip address.</P><P></P><P>Regards,</P><P></P><P>Gilles.</P><P>Thanks for rating this answer.</P></BODY></HTML> Wed, 05 Oct 2005 10:25:39 GMT https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471730#M8809 Gilles Dufour 2005-10-05T10:25:39Z Re: IOS SLB - Bet I'm doing something stupid - pls enlighten https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471731#M8810 <HTML><HEAD></HEAD><BODY><P>Thanks Gilles - that seems to have done the trick, I can now telnet to the VIP on the required port and connections are established with the round robin working and all.</P><P></P><P>I was right ... i was had missed something basic!</P><P></P><P>Thanks again, problem solved</P></BODY></HTML> Thu, 06 Oct 2005 02:16:47 GMT https://community.cisco.com/t5/application-networking/ios-slb-bet-i-m-doing-something-stupid-pls-enlighten/m-p/471731#M8810 m.surtees 2005-10-06T02:16:47Z