Application timeout on ACE

[singhsaju]

Hi ,

I need some advice on how to start troubleshooting on one the issue on ACE. I am new to ACE/Load balancers.

The application if is bypassed ACE , it works fine . When it is accessed through the ACE the application timeouts.

Any help will be appreciated.

Please let me know what all things i can check on ACE.

[pablo.nxh]

Hi,

Your problem might be related to multiple factors, it would be great if you can share your configuration and let us know the VIP you're having problems with.

__ __

Pablo

[singhsaju]

Hi ,

How to find VIP in my configuration?

Is it in the 6509 switch's configuration or in ACE configuration?

Thanks,

[Surya ARBY]

in the ACE module.

[singhsaju]

Hi Surya,

What command indicate that this is VIP ip ?

how do i find it in the config?

In the following config , where is the VIP ip configured?

access-list ACL1 line 10 extended permit ip any any

probe udp UDP
  interval 5
  passdetect interval 10
  description THIS PROBE IS INTENDED FOR LOAD BALANCING DNS TRAFFIC
  port 53
  send-data UDP_TEST

rserver host SERVER1
  ip address 192.168.252.245
  inservice
rserver host SERVER2
  ip address 192.168.252.246
  inservice
rserver host SERVER3
  ip address 192.168.252.247
  inservice

serverfarm host SFARM1
  probe UDP
  rserver SERVER1
    inservice
  rserver SERVER2
    inservice
  rserver SERVER3
    inservice

class-map match-all L4UDP-VIP_114:UDP_CLASS
   2 match virtual-address 192.168.120.114 udp eq 53
policy-map type loadbalance first-match L7PLBSF_UDP_POLICY
  class class-default
    serverfarm SFARM1
policy-map multi-match L4SH-Gold-VIPs_POLICY
    class L4UDP-VIP_114:UDP_CLASS
    loadbalance vip inservice
    loadbalance policy L7PLBSF_UDP_POLICY
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 120
    connection advanced-options 1SECOND-IDLE
interface vlan 120
  description Upstream VLAN_120 - Clients and VIPs
  ip address 192.168.120.1 255.255.255.0
  fragment chain 20
  fragment min-mtu 68
  access-group input ACL1
  nat-pool 1 192.168.120.70 192.168.120.70 netmask 255.255.255.0 pat
  service-policy input L4SH-Gold-VIPs_POLICY
  no shutdown

ip route 10.1.0.0 255.255.255.0 192.168.120.254

[Surya ARBY]

the VIP is this one :

class-map match-all L4UDP-VIP_114:UDP_CLASS
   2 match virtual-address 192.168.120.114 udp eq 53

it's a VIP defined only for DNS traffic.

[Jorge Bejarano]

Hello,

Could you share with us  the configuration of your parameter as well:

connection advanced-options 1SECOND-IDLE? I think it might be related to that parameter