10-16-2007 06:25 AM
Routing is OK. I can ping from Context out to local and learned subnets, but cannot ping vlan interface on the ACE or the VIP from the sup. So, this means a layer 4-7 issue.
Config is as follows:
class-map match-any VIP-A_Class
6 match virtual-address 1.1.1.3 tcp eq xxx
8 match virtual-address 1.1.1.3 tcp eq yyy
policy-map multi-match VIP-A
class VIP-A_Class
loadbalance vip inservice
loadbalance vip icmp-reply active
loadbalance vip advertise active
interface vlan 3
ip address 1.1.1.2 255.255.255.248
service-policy input VIP-A
no shutdown
Other info:
There is an operational reachable server in the group.
The Admin context does not have an interface on VLAN 3, only allocates it to the context.
I have looked into route health injection but don't think it is relevant to this, correct me if i'm wrong?
If you require more info, please let me know.
Solved! Go to Solution.
10-16-2007 11:27 PM
you do not have a 'loadbalance policy
Except that your config is ok.
I'm using the same in the lab and it works.
Gilles.
10-16-2007 11:27 PM
you do not have a 'loadbalance policy
Except that your config is ok.
I'm using the same in the lab and it works.
Gilles.
10-17-2007 01:32 AM
I don't really need an L7 policy for this particular group, so wasn't going to add it in. I can add a dummy one in if necessary. This is the reason I cannot ping it?
10-17-2007 02:47 AM
yes you need it.
This is how you assign the serverfarm to the vip.
switch/User1(config)# policy-map multi-match SLB1
switch/User1(config-pmap)# class VIP-250-81
switch/User1(config-pmap-c)# no loadbalance policy SF_Linux4
switch/User1(config-pmap-c)#
gdufour-cat6k1#ping 192.168.100.250
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
gdufour-cat6k1#
[Resuming connection 1 to 127.0.0.30 ... ]
switch/User1(config-pmap-c)# loadbalance policy SF_Linux4
switch/User1(config-pmap-c)#
gdufour-cat6k1#ping 192.168.100.250
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.100.250, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms
gdufour-cat6k1#
10-17-2007 02:52 AM
It's working thanks, just applied it as you were answering. I just put the default class into it.
Yay! Now it's testing time :)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide