Cannot get my VIP to work (New To ACE)

MICHAEL CICCONE · ‎06-01-2007

Hello,

I am trying to configure my new ACE blade with a test. I've created two VIPs and they are active. But when I try to telnet to the VIP IP and port it fails. I do get this message in my syslog:

Jun 1 08:08:49 10.7.1.250 Jun 1 2007 08:08:49 : %ACE-6-302022: Built TCP connection 0x18 for vlan21:172.16.14.18/1508 (172.16.14.18/1032) to vlan21:10.7.1.244/9000 (10.3.19.1/9003)

So it looks like it should work.

I can ping the VIP IP from the pc I am trying to telnet from. But from the ACE Blade itself I cannot ping the VIP IP. I can ping the rserver IP from the ACE.

I have the VIP applied to the VLANs with Service-policy input

show service-policy

Policy-map : L4_LB_VIP_COSRCVIP1

Status : ACTIVE

-----------------------------------------

Interface: vlan 21

service-policy: L4_LB_VIP_COSRCVIP1

loadbalance:

L7 loadbalance policy: L7_VIP_LB_COSRCVIP1-9000

VIP Route Metric : 77

VIP Route Advertise : ENABLED

VIP ICMP Reply : ENABLED

VIP State: INSERVICE

curr conns : 3 , hit count : 5

dropped conns : 0

client pkt count : 6 , client byte count: 384

server pkt count : 0 , server byte count: 0

loadbalance:

L7 loadbalance policy: L7_VIP_LB_COSRCVIP1-9100

VIP Route Metric : 77

VIP Route Advertise : ENABLED

VIP ICMP Reply : ENABLED

VIP State: INSERVICE

curr conns : 0 , hit count : 0

dropped conns : 0

client pkt count : 0 , client byte count: 0

server pkt count : 0 , server byte count: 0

Policy-map : L4_LB_VIP_TESTDBPVIP1

Status : ACTIVE

-----------------------------------------

Interface: vlan 21

service-policy: L4_LB_VIP_TESTDBPVIP1

loadbalance:

L7 loadbalance policy: L7_VIP_LB_TESTDBPVIP1-11900

VIP Route Metric : 77

VIP Route Advertise : ENABLED

VIP ICMP Reply : ENABLED

VIP State: INSERVICE

curr conns : 1 , hit count : 2

dropped conns : 0

client pkt count : 6 , client byte count: 328

server pkt count : 0 , server byte count: 0

If anyone knows why this isn't working... Please let me know...

Thanks

Mike

Gilles Dufour · ‎06-04-2007

Mike,

I would suggest to verify that the server response goes back through the ACE module.

curr conns : 3 , hit count : 5

dropped conns : 0

client pkt count : 6 , client byte count: 384

server pkt count : 0 , server byte count: 0 <===

As you can see, ACE sees no response from the server itself.

Gilles.

MICHAEL CICCONE · ‎06-04-2007

I may have found my problem. Currently I have Layer 3 VLANS on the mfsc. I was talking to Cisco TAC and they told me I neecd to change those VLANS to layer2 and assign the IP's to the ACE (same VLANS) and use the ACE as the default gateway. I going to try and see what happens.

Thanks

Mike C.