Cannot ping VIP

Answered Question
Oct 16th, 2007

Routing is OK. I can ping from Context out to local and learned subnets, but cannot ping vlan interface on the ACE or the VIP from the sup. So, this means a layer 4-7 issue.

Config is as follows:


class-map match-any VIP-A_Class

6 match virtual-address 1.1.1.3 tcp eq xxx

8 match virtual-address 1.1.1.3 tcp eq yyy


policy-map multi-match VIP-A

class VIP-A_Class

loadbalance vip inservice

loadbalance vip icmp-reply active

loadbalance vip advertise active

interface vlan 3

ip address 1.1.1.2 255.255.255.248

service-policy input VIP-A

no shutdown


Other info:

There is an operational reachable server in the group.

The Admin context does not have an interface on VLAN 3, only allocates it to the context.

I have looked into route health injection but don't think it is relevant to this, correct me if i'm wrong?


If you require more info, please let me know.

Correct Answer by Gilles Dufour about 9 years 4 months ago

you do not have a 'loadbalance policy ' in your multimatch policy. So I don't see how this policy can be up.


Except that your config is ok.

I'm using the same in the lab and it works.


Gilles.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Gilles Dufour Tue, 10/16/2007 - 23:27

you do not have a 'loadbalance policy ' in your multimatch policy. So I don't see how this policy can be up.


Except that your config is ok.

I'm using the same in the lab and it works.


Gilles.

danger_mousie Wed, 10/17/2007 - 01:32

I don't really need an L7 policy for this particular group, so wasn't going to add it in. I can add a dummy one in if necessary. This is the reason I cannot ping it?

Gilles Dufour Wed, 10/17/2007 - 02:47

yes you need it.

This is how you assign the serverfarm to the vip.


switch/User1(config)# policy-map multi-match SLB1

switch/User1(config-pmap)# class VIP-250-81

switch/User1(config-pmap-c)# no loadbalance policy SF_Linux4

switch/User1(config-pmap-c)#

gdufour-cat6k1#ping 192.168.100.250


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

gdufour-cat6k1#

[Resuming connection 1 to 127.0.0.30 ... ]

switch/User1(config-pmap-c)# loadbalance policy SF_Linux4

switch/User1(config-pmap-c)#

gdufour-cat6k1#ping 192.168.100.250


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:

.!!!!

Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms

gdufour-cat6k1#




danger_mousie Wed, 10/17/2007 - 02:52

It's working thanks, just applied it as you were answering. I just put the default class into it.

Yay! Now it's testing time :)

Actions

This Discussion