ACE Service Module. No hit counts on VIP´s ICMP but VIP answers OK

[rogelioalvez]

Hello team:

I managed to build a simple policy that calls a class-map to answer if ICMPv6 is requested on the VIP:

class-map match-all VIP_ICMP

  2 match virtual-address 2001:1388:7ac0:3::aaaa 1

policy-map multi-match VIP_Policy

  class VIP_ICMP

    loadbalance vip inservice

    loadbalance policy Farm_Policy

    loadbalance vip icmp-reply active

    loadbalance vip advertise active

Clients are able to "ping" the VIP when at least a real server is available, but I do not see any hits on the statistics:

ACE132/DNS# show service-policy VIP_Policy class VIP_ICMP summary

service-policy: VIP_Policy
Class                            VIP                                      Prot        Port        VLAN          State      Curr Conns   Hit Count  Conns Drop
VIP_ICMP          2001:1388:7ac0:3::aaaa                    1       any         610           IN-SRVC           0                    0                 0

¿Is this normal output? I should have expected as many hit counts as successful echo replies from the module to the clients...

Any help will be greatly appreciated.

Best regards,

Rogelio Alvez

Argentina

[Kanwaljeet Singh · Accepted solution]

Hi Rogelio,

It seems to be the normal behavior. You are getting replies because you are using  loadbalance vip icmp-reply active and not because of that class-map.

In show conn output you will see that ICMP request is not being forwarded to any server which means that ACE is responding to the ICMP request and that's why you don't see any counters.

Regards,

Kanwal

[rogelioalvez]

thanks a lot, Kanwaljeet.

Best regards, rogelio