Hi Mischa, Thanks for the reply. The config. is attached. All servers point to the LB as the default router.
I will try to upgrade later in the evening today. Thanks, Gaurav On Mon, Dec 22, 2008 at 9:24 AM, Mischa Peters <[email protected]> wrote: > Hi Gaurav, > > Do you have a network setup and config for us? > One other suggestion, see if you can upgrade to 7.4.01m. > > Mischa > > >> Hi, >> >> Yes. The traffic is routed via the ServerIron. >> >> Thanks, >> Gaurav >> >> On Dec 22, 2008 9:09am, Wouter Prins <[email protected]> wrote: >> > Hi Guarav, >> > >> > >> > >> > Are the flows send from the server to the client going through the >> > >> > ServerIron somehow? >> > >> > >> > >> > 2008/12/22 Gaurav Sabharwal [email protected]>: >> > >> > > Some time ago, we had to enable source-nat on the LB. Now we are >> > >> > > trying to disable source-nat on the LB. When we disable the source-nat >> > >> > > on the load balancer, the VIP does not responds to the HTTP >> > >> > > connections. >> > >> > > >> > >> > > tcpdump on the server confirms that the packets are reaching the >> > >> > > server and are being sent back. However nothing reaches the web >> > >> > > browser. >> > >> > > >> > >> > > show version output: >> > >> > > >> > >> > > SW: Version 07.3.05T12 Copyright (c) 1996-2002 Foundry Networks, Inc. >> > >> > > Compiled on Jul 18 2002 at 17:20:18 labeled as SLB07305 >> > >> > > HW: ServerIron Switch, serial number 157b24 >> > >> > > 400 MHz Power PC processor 740 (revision 8) with 32756K bytes of DRAM >> > >> > > 8 100BaseT interfaces with Level 1 Transceiver LXT975 >> > >> > > 0 uplink interfaces >> > >> > > 256 KB PRAM and 8*2048 CAM entries for DMA 2, version 0807 >> > >> > > 128 KB boot flash memory >> > >> > > 4096 KB code flash memory >> > >> > > 2048 KB BRAM, BM version 02 >> > >> > > 128 KB QRAM >> > >> > > 512 KB SRAM >> > >> > > Octal System, Maximum Code Image Size Supported: 1965568 (0x001dfe00) >> > >> > > The system uptime is 2 days 21 hours 28 minutes 32 seconds >> > >> > > The system : started=warm start reloaded=by "reload" >> > >> > > >> > >> > > The configuration is attached. Any help is highly appreciated. >> > >> > > >> > >> > > Thanks, >> > >> > > Gaurav >> > >> > > >> > >> > > _______________________________________________ >> > >> > > foundry-nsp mailing list >> > >> > > [email protected] >> > >> > > http://puck.nether.net/mailman/listinfo/foundry-nsp >> > >> > > >> >_______________________________________________ >> foundry-nsp mailing list >> [email protected] >> http://puck.nether.net/mailman/listinfo/foundry-nsp > >
Current configuration: ! ver 07.3.05T12 ! ! server port 80 tcp keepalive 10 2 server port 443 tcp keepalive 10 2 server port 21 tcp keepalive 10 2 server port 3306 tcp keepalive 99 2 server source-nat-ip 50.1.1.157 255.255.255.224 0.0.0.0 server router-ports 1 ! ! ! ! ! ! ! ! ! ! ! ! server real server1.test.co.uk 50.1.1.133 source-nat port http port http url "HEAD /" ! server real server2.test.co.uk 50.1.1.134 source-nat port ssl port http port http url "HEAD /" ! server real server1.test.de 50.1.1.140 source-nat port http port http url "HEAD /" port http status-code 200 200 ! server real server2.test.de 50.1.1.141 source-nat port http port http url "HEAD /" port http status-code 200 200 ! server real server1.test.se 50.1.1.143 source-nat port http port http url "HEAD /" ! server real server2.test.se 50.1.1.144 source-nat port http port http url "HEAD /" ! server real server1.test.nl 50.1.1.149 source-nat port http port http url "HEAD /" ! server real server2.test.nl 50.1.1.150 source-nat port http port http url "HEAD /" ! server real server1.test.fr 74.53.217.72 source-nat port http port http url "HEAD /" ! server real server2.test.fr 74.53.217.73 source-nat port http port http url "HEAD /" ! server real server1.test.es 74.53.217.75 source-nat port http port http url "HEAD /" ! server real server2.test.es 74.53.217.76 source-nat port http port http url "HEAD /" ! server real server1.test.it 74.53.217.69 source-nat port http port http url "HEAD /" ! server real server2.test.it 74.53.217.70 source-nat port http port http url "HEAD /" ! server real server1.test.com 74.53.217.77 source-nat port http port http url "HEAD /" port http status-code 200 200 ! server real server2.test.com 74.53.217.78 source-nat port http port http url "HEAD /" port http status-code 200 200 ! server real site1.test.co.uk 74.53.217.83 source-nat port http port http url "HEAD /" port http status-code 200 200 port ssl ! server real site2.test.co.uk 74.53.217.84 source-nat port http port http url "HEAD /" port http status-code 200 200 port ssl ! server real server1.test.dk 50.1.1.146 source-nat port http port http url "HEAD /" ! server real server2.test.dk 50.1.1.147 source-nat port http port http url "HEAD /" ! server virtual www.test.co.uk 50.1.1.139 predictor least-conn port http sticky bind http server1.test.co.uk http server2.test.co.uk http ! server virtual www.test.de 50.1.1.142 predictor least-conn port http sticky no port http translate bind http server2.test.de http server1.test.de http ! server virtual www.test.nl 50.1.1.151 predictor least-conn port http sticky bind http server1.test.nl http server2.test.nl http ! server virtual www.test.fr 74.53.217.74 predictor least-conn port http sticky bind http server1.test.fr http server2.test.fr http ! server virtual www.test.es 74.53.217.68 predictor least-conn port http sticky bind http server1.test.es http server2.test.es http ! server virtual www.test.it 74.53.217.71 predictor least-conn port http sticky bind http server1.test.it http server2.test.it http ! server virtual www.test.com 74.53.217.79 predictor least-conn port http sticky bind http server1.test.com http server2.test.com http ! server virtual cluster.test.co.uk 74.53.217.85 predictor least-conn port http sticky port ssl sticky bind http site1.test.co.uk http site2.test.co.uk http bind ssl site1.test.co.uk ssl site2.test.co.uk ssl ! server virtual www.test.dk 50.1.1.148 predictor least-conn port http sticky bind http server1.test.dk http server2.test.dk http ! server virtual www.test.se 50.1.1.145 predictor least-conn port http sticky bind http server1.test.se http server2.test.se http ! ! vlan 1 name DEFAULT-VLAN by port no spanning-tree ! aaa authentication web-server default local aaa authentication enable default enable aaa authentication login default local line tacacs+ aaa authorization exec default none enable telnet authentication enable telnet password ..... enable super-user-password ..... hostname C31657.lb01.ah34c.02.dllstx6 ip icmp burst-normal 10000 burst-max 20000 lockup 300 ip address 50.1.1.157 255.255.255.224 ip default-gateway 50.1.1.129 ip dns domain-name test.com logging console username admin password ..... interface e 1 port-name uplink ! end
_______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
