C6500 + VRF-aware SLB

Bela Mareczky · ‎08-29-2009

Hi All!

I am trying to deploy some SLB-based services in multi-VRF environment.

There is no any VRF-related configuration parameters, and there is no any VRF-awareness mentions.

Does anyone have any other information concerning SLB functionality inside VRF?

Device details:

- Catalyst 6509-E

- Modular IOS 12.2(18)SXF14

- SUP720-MSFC3

- FWSM v4.0.6

Thanks in advance!

Regards,

Belabacsi

Laurent Aubert · ‎08-30-2009

Hi,

It's supported since 12.2(18)SXF. Here is a configuration example:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122limit/122sx/122sxf18/slbsxf5.htm#wp4018895

Basicaly, there is no special configuration on SLB side. The virtual server and its associated server farm interfaces must be in the same Virtual Private Network (VPN) routing and forwarding (VRF).

HTH

Laurent.

Bela Mareczky · ‎08-30-2009

Hi Laurent!

Thanks for Your reply and the doc link. I wonder if it can work with a VLAN interface routed by an FWSM. What do You think?

BR

Belabacsi

Bela Mareczky · ‎08-31-2009

Hi All!

Update:

The per-VRF SLB seems to be OK, but I have a problem with TCP probes.

I have defined two TCP probes, one for each real servers. However, when one of the real servers fails, the TCP probe marks both of them as FAILED. I defined TCP probes as routed, because without "routed" keyword, the TCP probe was unable to reach real servers. (I think, because of the VRF... ?)

Please refer to the configuration below:

!

ip slb probe TCP_PROBE_1 tcp

address 172.24.250.1 routed

port 80

interval 11

!

ip slb probe TCP_PROBE_2 tcp

address 172.24.250.2 routed

port 80

interval 11

!

ip slb serverfarm HCLNET_HOMOKOZO

nat server

predictor leastconns

probe TCP_PROBE_1

probe TCP_PROBE_2

!

real 172.24.250.1

reassign 2

faildetect numconns 1 numclients 1

retry 20

inservice

!

real 172.24.250.2

reassign 2

faildetect numconns 1 numclients 1

retry 20

inservice

!

ip slb replicate slave rate 300

!

ip slb vserver HCLNET_HOMOKOZO

virtual 172.24.250.10 tcp 0

serverfarm HCLNET_HOMOKOZO

sticky 30 group 1

replicate interval 20

replicate slave

inservice

!

Any idea?

Thanks and BR

Belabacsi