cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
648
Views
5
Helpful
2
Replies

error message Servfail

manjeetsmahi
Level 1
Level 1

Hi Experts,

If i try to nslookup directly with GSS ip address. I do get a responce with vip ip address.

When i use my local dns server.. where i have an entry to saying my authorative server for domain x.com is GSS.

If use the dns server ip address ..it is not resolving. I see the following message in tcp dump of GSS.

12:58:42.183691 IP (tos 0x20, ttl 55, id 0, offset 0, flags [DF], proto 17, length: 65) y.y.y.y.24275 > 10.71.200.10.domain: [udp sum ok] 27757 A? x.com. (37)

12:58:42.184066 IP (tos 0x0, ttl 64, id 343, offset 0, flags [DF], proto 17, length: 65) 10.71.200.10.domain > y.y.y.y.24275: [bad udp cksum 36e!] 27757 ServFail- q: A? x.com. 0/0/0 (37)

Request is coming to GSS but it is not sending out vip ip address..

Gss working on Version 3.0(2)

Any idea ?

2 Replies 2

Gilles Dufour
Cisco Employee
Cisco Employee

Did you define proximity constraints ?

CSCsi08784 GSS should send SERVFAIL rcode if proximity constraints are not met

Or does it match the same rule from the dns server and from a client directly ?

G.

The bug was internal one .. but information was usful

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: