[f-nsp] Centralized Load balancing via 802.1q?

[Matt Stockdale]

Maybe I should have mentioned that the serveriron XL's have a single
ethernet connection to our core switch. We cannot use them as access
switches. We already do exclusively DSR, and this works fine for
balancing real servers on the same vlan and layer3 space as the XL.

Let me whip up a quick diagram of what we'd like to do (don't know how
well it will render for you)

    ServerIron
         |
         |
  (dot1q trunk)
  (vlans 1-100)
         |
         |
     Cat6500-----------------
         |                         |
         |                         |
 (dot1q trunk)       (dot1q trunk)
 (vlans 1-100)       (vlans 1-100)
         |                         |
         |                         |
     Cat2950                Cat2950
         |                         |
         |                         |
 (access port)          (access port)
   (vlan 20)               (vlan 21)
         |                         |
         |                         |
  Real Server A         Real Server B
(192.168.20.101)      (102.168.21.101)

I'd like to be able to have the ServerIron create a VIP on vlan 20,
192.168.20.100 for example, and balance across 192.168.20.10[1-x] I'd
also like to have the ServerIron create a VIP on vlan 21,
192.168.21.100, and balance across 192.168.21.10[1-x] at the same time.

Currently, if we have our XL configured on the 192.168.20.0/24 Space, we
can't balance anything on 192.168.21.0/24 without source-nat (at least
according to foundry support)

Does that help explain what I'm looking to do?

Matt

On Thu, 2004-05-27 at 17:02, jeffrey.arnold wrote:
> On Thu, 27 May 2004, Matt Stockdale wrote:
> 
> :: dsr. I think the problem is that we have ServerIron XL's, which seem to
> :: be 90% layer2, and thus lack the feature I'm looking for, which is
> :: heavily layer 3.
> :: 
> 
> both the XL's and chassis based boxes work fine. In a dsr config, you 
> shouldn't need to do much more than define your router port(s) and tag 
> up the correct vlans. The foundry will do some L2 magic to get the 
> packets out with the correct vlan tags. 
> 
> -jba
> 
> __
>  [jba at analogue.net] :: analogue.networks.nyc :: http://analogue.net
-- 
-----------------------
    Matt Stockdale
  Sr Network Engineer
mstockda at logicworks.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20040527/ecabb678/attachment.sig>