Hi All
Still cant get the basic loadbalancing functon to work for some reason .- even when i do the 'sho service-policy CLIENT-VIPS' detail its not incrementing.
Dont know why but its just not working -
Also should i be able to connect to the other vlan 122 from a vlan 121 on the client side - i cant see anything in the manual about enabling routing
So any ideas anyone as i cant seem to get this to work - heres the non admin context config -
access-list EVERYONE line 8 extended permit tcp any any
access-list INBOUND line 1 extended permit tcp host 10.14.253.4 any
rserver host TEST-1
ip address xx.xx.122.200
inservice
rserver host TEST-2
ip address xx.xx.122.201
inservice
rserver host TEST-3
ip address xx.xx.122.3
inservice
serverfarm host TESTFARM
rserver TEST-1
inservice
rserver TEST-2
inservice
class-map type management match-any REMOTE-ACCESS
2 match protocol icmp any
3 match protocol telnet any
4 match protocol ssh any
5 match protocol https any
6 match protocol http any
7 match protocol xml-https any
class-map match-all VIP-150
2 match virtual-address xx.xx.121.150 any
policy-map type management first-match MGMT_TEST
class REMOTE-ACCESS
permit
policy-map type loadbalance first-match lb-logic
class class-default
serverfarm TESTFARM
policy-map multi-match CLIENT-VIPS
class VIP-150
loadbalance vip inservice
loadbalance policy lb-logic
interface vlan 121
description Clients
ip address xx.xx.121.10 255.255.255.0
access-group input EVERYONE
service-policy input CLIENT-VIPS
service-policy input MGMT_TEST
no shutdown
interface vlan 122
description Servers Vlan
ip address xx.xx.122.10 255.255.255.0
no shutdown
ip route 0.0.0.0 0.0.0.0 xx.xx.121.1
xx.xx.121.1 is the switch off which i have the client xx.xx.121.4
This is my admin context -
interface gigabitEthernet 1/1
switchport trunk allowed vlan 121
no shutdown
interface gigabitEthernet 1/2
switchport access vlan 1000
no shutdown
interface gigabitEthernet 1/3
switchport trunk allowed vlan 122
no shutdown
interface gigabitEthernet 1/4
shutdown
access-list ALL line 8 extended permit ip any any
class-map type management match-any remote_access
2 match protocol xml-https any
3 match protocol icmp any
4 match protocol telnet any
5 match protocol ssh any
6 match protocol http any
O 7 match protocol https any
8 match protocol snmp any
policy-map type management first-match remote_mgmt_allow_policy
class remote_access
permit
interface vlan 121
ip address xx.xx.121.171 255.255.255.0
access-group input ALLly
service-policy input remote_mgmt_allow_policy
no shutdown
interface vlan 122
ip address xx.xx.122.171 255.255.255.0
access-group input ALL
service-policy input remote_mgmt_allow_policy
no shutdown
interface vlan 1000
ip address xx.xx.253.20 255.255.255.0
access-group input ALL
service-policy input remote_mgmt_allow_policy
no shutdown
context Testing-11
description Testing Context
allocate-interface vlan 121-122
allocate-interface vlan 1000
All the interfaces are up - except vlan 1000 which is not used.
Couple of (probably obvious) questions -
1. Do i need to create the 122 Server vlan in the admin context - i have assumed you must so you can allocate them to the other contexts.
2. On the physical interfaces - if you use a vlan in one you cant use it in another- do they automatically trunk ?
Currently i can ping from my client pc to the context vlan on the same vlan = xx.xx.121.10
I am using the manual from the course but it was done on a virtual appliance so i didnt really see much of the admin contexts
Maurice thanks for your help so far and if you can see anything wrong let me know.
Steve
