[f-nsp] two Virtual servers suddenly stopped working.

Drew Weaver drew.weaver at thenap.com
Tue May 22 11:58:17 EDT 2007


For 6 months we've had two virtual servers connected to a foundry serveriron 16.

The topology is like this:

Servers ---- Firewall --- ServerIron - Cisco Catalyst -- Internet

We have the servers configured as remote servers.

The servers are all passing the health checks, and if I look at sh server they appear to be active, however there is no response to requests made at the virtual IP addresses.

In the logfile I see this:

00d15h54m27s:N:L4 server IP.add.ress.s name port 80 is up
00d15h54m23s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h53m33s:N:L4 server IP.add.ress.s name port 80 is up
00d15h53m27s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h51m13s:N:L4 server IP.add.ress.s name port 80 is up
00d15h51m09s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h47m01s:N:L4 server IP.add.ress.s name port 80 is up
00d15h47m00s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h43m04s:N:L4 server IP.add.ress.s name port 80 is up
00d15h43m00s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h41m04s:N:L4 server IP.add.ress.s name port 80 is up
00d15h41m00s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h37m57s:N:L4 server IP.add.ress.s name port 80 is up
00d15h37m56s:N:L4 server IP.add.ress.s name port 80 is down due to reassign
00d15h37m15s:N:L4 server IP.add.ress.s name port 80 is up
00d15h37m10s:N:L4 server IP.add.ress.s name port 80 is down due to reassign

Since nothing on the serveriron had changed, I went ahead and replaced the serveriron with our spare using the same configuration, it doesn't work either.

I found a post in the archive about the "down due to reassign" but it doesn't really seem to apply.

Has anyone had this issue in the past?

The firewall is acting as the default gateway for the servers, and then the catalyst is the gateway for the firewall...

The odd thing is that it worked perfectly for 6 months, and nothing has changed on the two firewalls.

-Drew

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20070522/26bdf0ba/attachment.html>


More information about the foundry-nsp mailing list