Cisco Systems IP SLB on 6500 series

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
IP SLB on 6500 series BernieM 04-18-06
Posted by BernieM on April 18, 2006, 5:45 am
Please log in for more thread options
Hello all,

Having trouble with slb. A server keeps cycling from operational to failed
and back again ... over and over ...

Apr 18 19:22:48: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
to FAILED
Apr 18 19:22:51: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
to OPERATIONAL
Apr 18 19:22:56: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
to FAILED

But the probe never shows any misses:

wcq15-core-6513#sh ip slb probe name vprdns detail
VPRDNS, dns, address = 0.0.0.0, interval = 15, faildetect = 3
VPRDNS, type = server
target = 172.22.247.1:53, real = 172.22.2.125:0, virtual =
172.22.247.1:53 TCP
state = OPERATIONAL, status = 1, operation id = 170 Server NAT
outages = 0, failures = 0, successes = 208, tests = 0
current = never, cumulative = 00:00:00
target = 172.22.247.1:53, real = 172.22.2.125:0, virtual =
172.22.247.1:53 UDP
state = OPERATIONAL, status = 1, operation id = 169 Server NAT
outages = 0, failures = 0, successes = 208, tests = 0
current = never, cumulative = 00:00:00


Here's the config:

ip slb vserver VPRDNS
virtual 172.22.247.1 udp dns
serverfarm VPRDNS
idle 5
replicate casa 172.22.31.253 172.22.31.252 1029
synguard 200
inservice standby VPRDNS-HSRP
!
ip slb serverfarm VPRDNS
nat server
nat client CLIENTS
probe VPRDNS
!
real 172.22.2.125
weight 1
inservice
!
real 172.22.9.50
weight 1
inservice
!
real 172.22.16.207
weight 1
inservice
!
ip slb probe VPRDNS dns
lookup prproxy.ourdomain.com
interval 15


Also, the VIP only forwards UDP but the probe is testing both UDP and TCP.
Can I control this?

Thanks,

BernieM



Posted by BernieM on April 19, 2006, 3:04 am
Please log in for more thread options
> Hello all,
>
> Having trouble with slb. A server keeps cycling from operational to
> failed and back again ... over and over ...
>
> Apr 18 19:22:48: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
> to FAILED
> Apr 18 19:22:51: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
> to OPERATIONAL
> Apr 18 19:22:56: %SLB-6-REAL: Real 172.22.2.125 (VPRDNS) has changed state
> to FAILED
>
> But the probe never shows any misses:
>
> wcq15-core-6513#sh ip slb probe name vprdns detail
> VPRDNS, dns, address = 0.0.0.0, interval = 15, faildetect = 3
> VPRDNS, type = server
> target = 172.22.247.1:53, real = 172.22.2.125:0, virtual =
> 172.22.247.1:53 TCP
> state = OPERATIONAL, status = 1, operation id = 170 Server NAT
> outages = 0, failures = 0, successes = 208, tests = 0
> current = never, cumulative = 00:00:00
> target = 172.22.247.1:53, real = 172.22.2.125:0, virtual =
> 172.22.247.1:53 UDP
> state = OPERATIONAL, status = 1, operation id = 169 Server NAT
> outages = 0, failures = 0, successes = 208, tests = 0
> current = never, cumulative = 00:00:00
>
>
> Here's the config:
>
> ip slb vserver VPRDNS
> virtual 172.22.247.1 udp dns
> serverfarm VPRDNS
> idle 5
> replicate casa 172.22.31.253 172.22.31.252 1029
> synguard 200
> inservice standby VPRDNS-HSRP
> !
> ip slb serverfarm VPRDNS
> nat server
> nat client CLIENTS
> probe VPRDNS
> !
> real 172.22.2.125
> weight 1
> inservice
> !
> real 172.22.9.50
> weight 1
> inservice
> !
> real 172.22.16.207
> weight 1
> inservice
> !
> ip slb probe VPRDNS dns
> lookup prproxy.ourdomain.com
> interval 15
>
>
> Also, the VIP only forwards UDP but the probe is testing both UDP and TCP.
> Can I control this?
>
> Thanks,
>
> BernieM
>

Forget the question about the probe testing both UDP and TCP. We have
another (tcp) vip configured using the same server farm and probe so it's
expected.

I did discover today though that although the probe shows no misses, "show
ip slb real name vprdns detail" does show some 'connection failures' which
increment in parallel with the server becoming 'failed'. Ethereal tracing
shows all connection attempts successful though.

BernieM



Similar ThreadsPosted
3-way SLB on 6500 series March 13, 2006, 2:48 am
IP SLB on 6500 series April 18, 2006, 5:45 am
Frame Relay for 6500 series switch January 26, 2006, 9:45 am
6500 series ... not populating mac-address table March 24, 2006, 10:02 pm
Anyone clustering ASA5000-series boxes with 3000-series VPN concentrators October 27, 2006, 10:45 am
Cat 6500 to Cat 6500 and VLANs December 1, 2005, 6:01 pm
6500 and DOS August 18, 2006, 1:50 pm
6500 cat os November 2, 2006, 3:22 pm
6500 May 29, 2007, 4:37 am
6500 IOS Upgrade September 28, 2006, 4:55 pm
vpdn 6500 May 30, 2007, 10:14 am
PAK for IDSM2 on Cat 6500 July 21, 2007, 11:30 pm
Catalyst 6500 help October 9, 2007, 2:42 pm
Cat 6500 with E1 controller module July 19, 2005, 2:27 am
How to configure Multicast on a 6500? December 6, 2005, 10:40 am