08-17-2005 05:25 AM
Hello all,
I have a strange problem.
many remote connection to VIP have timeout. However local connection to VIP works.
#sh mod csm 9 stats
Connections Created: 69
Connections Destroyed: 14
Connections Current: 55
Connections Timed-Out: 47
Connections Failed: 33
Server initiated Connections:
Created: 0, Current: 0, Failed: 0
L4 Load-Balanced Decisions: 69
L4 Rejected Connections: 0
L7 Load-Balanced Decisions: 0
L7 Rejected Connections:
Total: 0, Parser: 0,
Reached max parse len: 0, Cookie out of mem: 0,
Cfg version mismatch: 0, Bad SSL2 format: 0
L4/L7 Rejected Connections:
No policy: 0, No policy match 0,
No real: 0, ACL denied 0,
Server initiated: 0
Checksum Failures: IP: 0, TCP: 0
Redirect Connections: 0, Redirect Dropped: 0
FTP Connections: 0
MAC Frames:
Tx: Unicast: 4636, Multicast: 108, Broadcast: 736,
Underflow Errors: 0
Rx: Unicast: 27655, Multicast: 19800, Broadcast: 4629,
Overflow Errors: 0, CRC Errors: 0
Any ideas about connections timeout?
08-17-2005 02:44 PM
is your server forwarding the traffic back to the CSM ?
Verify that the server is not bypassing the csm when forwarind the response to the client.
Make sure traffic comes in on 1 vlan and that the response goes out through the same vlan.
If that does not explain the problem, sniff the traffic on the CSM portchannel so we can see everything going in and out.
Regards,
Gilles.
08-17-2005 11:57 PM
Hi Gilles,
Yes. I have analyzed the traffic, and when remote user try to connect to the VIP through a GRE tunnel, the last router send a "fragmentation needed" (ICMP 3/4) to the CSM. So how specify the max length of the packet from the CSM.?
For example, i would like that the CSM send a packet of 1300 bit max instead of 1460.
08-18-2005 01:10 AM
As mentioned in another response, the CSM will forward the icmp packet to the corresponding real server which should then adjust the packet size.
Gilles.
01-23-2007 12:03 AM
Hi,
Sorry to bring up this old thread. Is there a "hidden" port-channel from switch bus to CSM that can be referenced? Similar to ports 15/1 and 16/1 in Hybrid IOS for MSFC module from Supervisor...
Thanks,
David
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide