CSS - Simple configuration does not work

mp5766_2 · ‎10-26-2007

See configuration details and some show commands below:

Client PCs can ping the virtual ip address of 10.253.1.101, but can not http to it.

Client PCs can http to the individual web servers on their ip addresses:

http://10.253.10.108:8180/ and http://10.253.10.109:8180/ .

Any idea what I am missing here?

Thanks in advance for your help

Mohan

ip route 0.0.0.0 0.0.0.0 10.253.1.14 1

!************************* INTERFACE *************************

interface 1/1

bridge vlan 253

interface 1/2

bridge vlan 173

!************************** CIRCUIT **************************

circuit VLAN173

ip address 10.253.10.240 255.255.255.0

circuit VLAN253

ip address 10.253.1.240 255.255.255.0

!************************** SERVICE **************************

service LB_Test_1

ip address 10.253.10.108

active

service LB_Test_2

ip address 10.253.10.109

active

!*************************** OWNER ***************************

owner LBTest1

content Web_Servers_Test1

add service LB_Test_1

add service LB_Test_2

vip address 10.253.1.101

vip-ping-response local-remote

protocol tcp

port 8180

active

end of buffer.

CSS11503# sh interface 1/1

Name ifIndex Type Oper Admin Last Change

---- ------- ---- ---- ----- -----------

1/1 3 ge Up Enable 10/25/2007 07:36:08

CSS11503# sh interface 1/2

Name ifIndex Type Oper Admin Last Change

---- ------- ---- ---- ----- -----------

1/2 4 ge Up Enable 10/25/2007 07:36:08

CSS11503# sh service

Services (3 entries):

Name: LB_Test_1 Index: 1

Type: Local State: Alive

Rule ( 10.253.10.108 ANY ANY )

Session Redundancy: Disabled

Redirect Domain:

Redirect String:

Keepalive: (ICMP 5 3 5 )

Keepalive Encryption: Disabled

Last Clearing of Stats Counters: 10/25/2007 07:36:17

Mtu: 1500 State Transitions: 0

Total Local Connections: 2 Total Backup Connections: 0

Current Local Connections: 0 Current Backup Connections: 0

Total Connections: 2 Max Connections: 65534

Total Reused Conns: 0

Weight: 1 Load: 2

Weight Reporting: None

Name: LB_Test_2 Index: 2

Type: Local State: Alive

Rule ( 10.253.10.109 ANY ANY )

Session Redundancy: Disabled

Redirect Domain:

Redirect String:

Keepalive: (ICMP 5 3 5 )

Keepalive Encryption: Disabled

Last Clearing of Stats Counters: 10/25/2007 07:36:20

Mtu: 1500 State Transitions: 0

Total Local Connections: 3 Total Backup Connections: 0

Current Local Connections: 0 Current Backup Connections: 0

Total Connections: 3 Max Connections: 65534

Total Reused Conns: 0

Weight: 1 Load: 2

Weight Reporting: None

CSS11503#

Gilles Dufour · ‎10-26-2007

what's the default gateway of the servers ???

Make sure the response from the servers goes back to the CSS.

One trick is to configure client nat

ie:

group client

vip address 10.253.10.239

add destination service LB_Test_1

add destination service LB_Test_2

active

Gilles

sathappan · ‎10-27-2007

Hi,

In the services also, you need to add you port number 8180 .

with regards

sathappan.s

Gilles Dufour · ‎10-30-2007

the port number is not required.

You need it only if you want to do port translation and use a different port on the servers then on the vip.

Gilles.

mp5766_2 · ‎11-01-2007

Thanks Giles. That worked like a charm. I think you deserve a rating of 5 as you even provided the actual commands, in fact I did not even have to type them out, I just copied and pasted them line by line.

Sorry to get back to you this late. I was busy on another project and this was put on the backburner.

I have a related question, if I may ask:

Firstly when I attempt to run my application through the web interface, I can bring up the application login screen without a problem.

However I have to enter the details twice â€œenter the network password for site 10.253.1.101â€ (this is the content switch VIP). If I enter the User Name and Password a second time I can then login to the application.

(This is a Windows 2000 PC running IE 6.0.2800.1106).

For the purposes of Load Testing my application I have a number of machines installed within our test network (10.253.1.x)

These machines have Windows 2003 Server R2 with SP2 installed.

Again I can bring up the login screen for the application and I have to enter the User name and Password twice before getting any further.

Unfortunately at this point the application becomes unusable as required JSP files fail to be downloaded from the Server.

I'm currently looking at various settings within IE 6 (Security, Pop-Blockers, Proxy Server configuration.) to try and overcome this.

Do you have any thoughts on why I need to enter the User name and password twice?

Thanks

Mohan

Gilles Dufour · ‎11-01-2007

Mohan,

you probable need stickyness.

Try to add the following commands under the content rule.

url "/*"

advanced-babalnce arrowpoint

Gilles.

mp5766_2 · ‎11-01-2007

Right on target again Giles.

Thanks for your help.

Mohan

mp5766_2 · ‎11-23-2007

Now I am testing some advanced configurations and my following configuration is not working.

Relevant configuration of 1 one of the CSS as follows:

!************************** SERVICE **************************

service LB_Test_1

ip address 10.253.10.108

active

service LB_Test_2

ip address 10.253.10.109

active

!*************************** OWNER ***************************

owner LBTest1

content Web_Server_Test1

add service LB_Test_1

add service LB_Test_2

vip address 10.253.1.101

vip-ping-response local-remote

advanced-balance arrowpoint-cookie

protocol tcp

port 8180

url "/prweb/PRServlet/*"

active

content Web_Server_Test2

add service LB_Test_1

add service LB_Test_2

vip-ping-response local-remote

vip address 10.253.1.102

advanced-balance arrowpoint-cookie

protocol tcp

port 8280

url "/prweb/PRServlet/*"

active

CSS11503# show rule

Content Rules:

/////

\\\///

///\\\ The Duke of Url.

{ O--O }

/ /\ \

\ -- /

[||]

>>>>>>>>

Name: Web_Server_Test1 Owner: LBTest1

State: Active Type: HTTP

Balance: Round Robin Failover: N/A

Persistence: Enabled Param-Bypass: Disabled

Session Redundancy: Disabled

IP Redundancy: Master

L3: 10.253.1.101

L4: TCP/8180

Url: /prweb/PRServlet/*

Redirect: ""

TCP RST client if service unreachable: Disabled

Rule Services & Weights:

1: LB_Test_1-Alive, S-1

2: LB_Test_2-Alive, S-1

>>>>>>>>

Name: Web_Server_Test2 Owner: LBTest1

State: Active Type: HTTP

Balance: Round Robin Failover: N/A

Persistence: Enabled Param-Bypass: Disabled

Session Redundancy: Disabled

IP Redundancy: Master

L3: 10.253.1.102

L4: TCP/8280

Url: /prweb/PRServlet/*

Redirect: ""

TCP RST client if service unreachable: Disabled

Rule Services & Weights:

1: LB_Test_1-Alive, S-1

end of buffer.

CSS11503#

CSS11503# show rule-summary

VIP Address Port Prot Url CntRuleName OwnerName Stat Idx

--------------- ----- ---- ------------------ -------------- --------- ---- ---

10.253.1.101 8180 TCP /prweb/PRServlet/* Web_Server_Tes LBTest1 Act 0

10.253.1.102 8280 TCP /prweb/PRServlet/* Web_Server_Tes LBTest1 Act 1

CSS11503#

I have tried launching a browser and connecting via the two load balanced URL's

http://10.253.1.101:8180/prweb/PRservlet

http://10.253.1.102:8280/prweb/PRServlet

Neither of these links currently work - I get a 'The page cannot be displayed' error message

However, I know that all four Tomcat nodes are up and working as I can login to the PRPC application via any of the direct links;

http://10.253.10.108:8180/prweb/PRServlet

http://10.253.10.108:8280/prweb/PRServlet

http://10.253.10.109:8180/prweb/PRServlet

http://10.253.10.109:8280/prweb/PRServlet

The above configuration works by modifying the url statement from

url "/prweb/PRServlet/*"

to

url "/*"

Thanks in advance for your help

Mohan