We are using rule-based GSLB. If I direct DNS queries to the VLAN ip address, I receive an answer. But if I query the VRRP ip (redundant-interface IP), then I get no response.

The documentation for "show redundant-interfaces" mentions that I should see the status of the DNS server but I do not.

DXX-CSS-PR1# sh redundant-interfaces 10.1.60.13 60

Redundant-Interfaces:

Interface Address: 10.1.60.13 VRID: 60

Redundant Address: 10.1.60.12 Range: 1

State: Master Master IP: 10.1.60.13

State Changes: 1 Last Change: 03/27/2008 03:11:36

DXX-CSS-PR1#

Because of the recent puchase of the enhanced license, I did enable "dns-server" after the VRRP redundant interfaces had been configured. Should move the config and re-apply it perhaps?

Many thanks for your assistance,

Dan

Ok, so this is your problem right:

A client need to access a web page. It sends his request to a CSS asking to resolve

a DNS query. The goal of the CSS is to catch the request, reply to the clients with it's own IP and act as a proxy for all DNS queries. Everythings works fine if the request is sent to the physical IP address of

the CSS and it doesn't works if it is sent to the virtual IP address (the address shared between the two

CSS in failover).

Proper configuration explain here, but you are running 8.20 and I think there are some restrictions, please let me double-check.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11000series/v6.10/configuration/advanced/guide/VIPRedun.html#wp1052113

Diego

This is exactly it. 7.20 documentation (http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.20/configuration/advanced/guide/VIPRedun.html#wp1067528) shows "dns-server" variable at the end of "ip redundant-interface 1

10.1.1.254" but it's not longer in 8.20.

Any suggestions or work arounds welcome.

Thanks,

Dan

Dan doing some research I can see that the option to configure redundant-interface to resolve dns queries is not included on CSS 11500 series, this from the documentation.

On the document for CSS 11000 series that I provided before shows:

Configuration Requirements and Restrictions

The following requirements and restrictions apply to the configuration of this feature.

•You can configure this feature only on Cisco 11000 series CSSs (not 11500)

If I look at the redundant-interface configuration on old CSS 11000 series I see the option for dns:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11000series/v6.10/configuration/advanced/guide/VIPRedun.html#wp1067528

Look at this line:

dns-server - Keyword that enables the CSS to respond to DNS queries destined for the redundant interface IP address. For more information, see the "Configuring a Redundant Virtual Interface to Respond to DNS Requests" section.

On new CSS 11500 series this option is not available:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20_v8.10/configuration/redundancy/guide/VIPRedun.html#wp1067528

I am trying to find if there is any workaround but so far semms that is expected to miss this feature on CSS11500.

Dan I have confirmed this is not supported on newer versions, it seems like it was considered to be added but were not.

I guess reason is that most people migrated the DNS functionality to GSS which is much more capable in terms of GSLB than the CSS alone.

Well, not the answer I was hoping for but many thanks for confirming this. I will look into the GSS as well.

best regards,

Dan