<div>Drew, from the description, it sounds like the traffic is bypassing the SI on the return. A quick easy way to test this would be to turn on Source-Nat for the real servers, and configure a Source-Ip address. If it works with the source-nat, then your return traffic from the servers is going directly to the default gateway and the SI is never seeing it to perform the reverse-nat (real to vip) on the outbound. Hope that helps.</div>
<div> </div>
<div>Mike<br><br></div>
<div class="gmail_quote">On Wed, May 5, 2010 at 6:45 AM, Jamie Dahl <span dir="ltr"><<a href="mailto:jamied@meatball.net">jamied@meatball.net</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">Is the VIP inline or DSR?<br><br>Are the servers connected behind the LB or one-arm/next to the LB?<br><br>
do both Vlans/subnets exist on the LB?<br><font color="#888888"><br><br>Jamie Dahl<br>---<br>"Thousands of tired, nerve-shaken, over-civilized people are beginning to find out that going to the mountains is going home; that wilderness is a necessity; and that mountain parks and reservations are useful not only as fountains of timber and irrigating rivers, but as fountains of life." --John Muir</font>
<div>
<div></div>
<div class="h5"><br><br><br><br><br><br>On May 5, 2010, at 9:16 AM, Jared Valentine wrote:<br><br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">What is your client PC ip address and default gateway when you are doing these tests?<br><br>Thanks,<br><br>
Jared Valentine, CISSP<br>Systems Engineer<br>Brocade<br><a href="mailto:jvalenti@brocade.com" target="_blank">jvalenti@brocade.com</a><br>801-208-5459 (o)<br>801-815-2700 (c)<br><br><br>On May 5, 2010, at 6:40 AM, Drew Weaver <<a href="mailto:drew.weaver@thenap.com" target="_blank">drew.weaver@thenap.com</a>> wrote:<br>
<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">Hey all,<br><br><br><br>It's been awhile since i've had to dabble with a SI XL and I am running into a snag.<br>
<br><br><br>We have a SI XL that has 3 servers connected to it, port 1 is a 'uplink' connection for the servers and port 16 is a connection for the management port and VIPs.<br><br><br><br>The 3 servers and the uplink are all in VLAN 2, and the 'management' is in the default VLAN (1).<br>
<br><br><br>Virtual Server Name: app, IP: 10.1.74.35<br><br> http -------> server1: 192.168.94.34, http (Active)<br><br> server2: 192.168.94.35, http (Active)<br><br><br><br>I can get to HTTP if i go directly to <a href="http://192.168.94.34/" target="_blank">http://192.168.94.34</a> or <a href="http://192.168.94.35/" target="_blank">http://192.168.94.35</a>, I am seeing keepalive requests hit the log on both of the real servers from the load balancer, but if I go to 10.1.74.35 it just hangs forever.<br>
<br><br><br>I can also ping 10.1.74.35 from clients.<br><br><br><br>Any clue?<br><br><br><br>thanks,<br><br>-Drew<br><br><br><br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br>
<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br></blockquote>_______________________________________________<br>foundry-nsp mailing list<br>
<a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
</blockquote><br>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" target="_blank">http://puck.nether.net/mailman/listinfo/foundry-nsp</a><br>
</div></div></blockquote></div><br>