cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
427
Views
0
Helpful
1
Replies

CSM problem with ftp

olesvanherman
Level 1
Level 1

Hi,

I have the CMS module on my 6509 with sup1/msfc2. My problem is easy:

all works (http, smtp, pop3, ...), except ftp.

a easy example:

I have a server on ipA. And I want to load balance ipB to ipA.

I connect to ipA to ftp service (ftp works):

# ncftp ipA

ncftp / > ls -al

[...]

ncftp / > pas

passive off

ncftp / > ls -al

[...]

ncftp / > pas

passive on

ncftp / > ls -al

[...]

So, it works.

Now I want to use CMS to load balance ipB to ipA:

# ssh root@ipA

# ifconfig lo:0 ipB netmask 255.255.255.255

then:

# conf t

module ContentSwitchingModule 3

vlan XXX client

ip address ipC 255.255.255.0

vlan YYY server

ip address ipD 255.255.255.0

probe ICMP icmp

interval 30

retries 2

failed 60

receive 20

serverfarm TEST_WWW

no nat server

no nat client

real ipA

inservice

probe ICMP

vserver TEST_WWW

virtual ipB any

serverfarm TEST_WWW

persistent rebalance

inservice

end

I can ping ipB, I can use http, smtp, pop3 on ipB but:

# ncftp ipB

ncftp / > pas

passive on

ncftp / > ls -al

[...]

ncftp / > pas

passive off

ncftp / > ls

List failed.

I have no firewall.

Worst:

conf t

mod con 3

vserver TEST_WWW

no in

virtual ipB tcp ftp service ftp

in

and now, nothing works !

# ncftp ipB

NcFTP 3.1.5 (Oct 13, 2002) by Mike Gleason (ncftp@ncftp.com).

Connecting to ipB...

# telnet ipB 21

Trying ipB...

Connected to ipB.

Escape character is '^]'.

^]

telnet> q

Connection closed.

#

Any idea ?

Thanks in advance

Oles

#sh mod

Mod Ports Card Type Model Serial No.

--- ----- -------------------------------------- ------------------ -----------

1 2 Cat 6k sup 1 Enhanced QoS (Active) WS-X6K-SUP1A-2GE XXXXXXXXXXX

2 8 8 port 1000mb ethernet WS-X6408-GBIC XXXXXXXXXXX

3 0 SLB Application Processor Complex WS-X6066-SLB-APC XXXXXXXXXXX

Mod MAC addresses Hw Fw Sw Status

--- ---------------------------------- ------ ------------ ------------ -------

1 0002.fcbc.8f78 to 0002.fcbc.8f79 7.0 5.3(1) 12.1(22)E2 Ok

2 0030.a338.a638 to 0030.a338.a63f 2.3 4.2(0.24)VAI 8.3(0.111)TF Ok

3 0011.5ceb.5e5a to 0011.5ceb.5e61 1.7 4.1(1) Ok

Mod Sub-Module Model Serial Hw Status

--- --------------------------- --------------- --------------- ------- -------

1 Policy Feature Card WS-F6K-PFC SAD05050906 1.1 Ok

1 Cat6k MSFC 2 daughterboard WS-F6K-MSFC2 SAD05050KLM 1.2 Ok

Mod Online Diag Status

--- -------------------

1 Reply 1

jfoerster
Level 4
Level 4

HI,

are you trying to configure direct server return?

Is the default gateway of your server pointing to IPD?

Have you taken a sniffertrace infront and behind the CSS to verify what's going on?

The following link shows a standard setup for loadbalancing ftp services.

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00801a649f.shtml

Kind Regards,

Joerg

Review Cisco Networking for a $25 gift card