Hello, I also have the exact same problem with my 2 SI 4G. I'm unable to setup SLB with V-IP on a VLAN different than the management VLAN. It's quite normal as we cannot define the SI's gateway, except for the management VLAN.
Does anyone found a way to do it ? Any help would be very appreciated. @Jeff: have you succeeded in your setup ? Thank you. Best reagards, Joffrey Agoutin -----Message d'origine----- De?: foundry-nsp-bounces at puck.nether.net [mailto:foundry-nsp-bounces at puck.nether.net] De la part de Jeff Envoy??: samedi 5 avril 2008 21:13 ??: foundry-nsp at puck.nether.net Objet?: [f-nsp] Serveriron VLAN question Hello, We're currently experimenting with a SI 4G as a replacement for another vendor's SLB box. The unit I have does not have a PREM license. I believe the configuration is fairly simple. The 4 ports on the SI are split into 2 LACP groups. One LACP group goes to our L3 switch handling routing for the server farm, the other LACP group connects to an L2 switch which serves a VMware cluster where the servers are located. The links are tagged, with several VLANs passing traffic through the SI to the server farm. We have been able to successfully configure SLB for serveral servers located on the same VLAN as the management interface of the SI. My problem/question is that if the SI's management interface is on the VLAN tagged 80, how can I have it also do SLB for hosts on (say) VLAN 7? I can see how that would be done with the PREM license by using the SI as a L3 router, but is there a way to accomplish this without configuring the SI as a router? The docs are kind of sparse in that area and I don't see any way to tell the SI what VLAN a particular server (real or virtual) is on, which makes me think that it's not possible, but I'm hoping I'm incorrect.. I'd also like to avoid source nat, if I can help it. Thanks.. Here's a snip of the current config on the box in our lab, if it helps. vlan 80 carries 10.1.163.224/27 vlan 7 carries 10.1.163.64/27 vlan 80 has the management interface for the SI ver 10.2.01TI2 ! server force-delete server reassign-threshold 200 no server no-reassign-count server l7-dont-use-gateway-mac server source-ip 10.1.163.253 255.255.255.224 10.1.163.225 server router-ports ethernet 1 server router-ports ethernet 2 ! context default ! server real wc4 10.1.163.230 port http port http url "HEAD /" ! server real wc5 10.1.163.231 port http port http url "HEAD /" ! server real ns1a 10.1.163.67 source-nat source-ip 10.1.163.253 port dns port dns l4-check-only ! server real ns1b 10.1.163.68 port dns ! ! server virtual testwww 10.1.163.252 port http bind http wc4 http wc5 http ! server virtual testdns 10.1.163.70 predictor response-time port dns bind dns ns1a dns ns1b dns ! source-ip-debug source-ip-log vlan 1 name DEFAULT-VLAN by port ! vlan 7 name DNS by port tagged ethe 1 to 4 ! vlan 80 name WEB by port tagged ethe 1 to 4 no spanning-tree management-vlan default-gateway 10.1.163.225 1 ! ip address 10.1.163.226 255.255.255.224 ! interface ethernet 1 link-aggregate active ! interface ethernet 2 link-aggregate active ! interface ethernet 3 link-aggregate active ! interface ethernet 4 link-aggregate active ! Jeff _______________________________________________ foundry-nsp mailing list foundry-nsp at puck.nether.net http://puck.nether.net/mailman/listinfo/foundry-nsp
