Some time ago, we had to enable source-nat on the LB. Now we are
trying to disable source-nat on the LB. When we disable the source-nat
on the load balancer, the VIP does not responds to the HTTP
connections.
tcpdump on the server confirms that the packets are reaching the
server and are being sent back. However nothing reaches the web
browser.
show version output:
SW: Version 07.3.05T12 Copyright (c) 1996-2002 Foundry Networks, Inc.
Compiled on Jul 18 2002 at 17:20:18 labeled as SLB07305
HW: ServerIron Switch, serial number 157b24
400 MHz Power PC processor 740 (revision 8) with 32756K bytes of DRAM
8 100BaseT interfaces with Level 1 Transceiver LXT975
0 uplink interfaces
256 KB PRAM and 8*2048 CAM entries for DMA 2, version 0807
128 KB boot flash memory
4096 KB code flash memory
2048 KB BRAM, BM version 02
128 KB QRAM
512 KB SRAM
Octal System, Maximum Code Image Size Supported: 1965568 (0x001dfe00)
The system uptime is 2 days 21 hours 28 minutes 32 seconds
The system : started=warm start reloaded=by "reload"
The configuration is attached. Any help is highly appreciated.
Thanks,
Gaurav
Current configuration:
!
ver 07.3.05T12
!
!
server port 80
tcp keepalive 10 2
server port 443
tcp keepalive 10 2
server port 21
tcp keepalive 10 2
server port 3306
tcp keepalive 99 2
server source-nat-ip 50.1.1.157 255.255.255.224 0.0.0.0
server router-ports 1
!
!
!
!
!
!
!
!
!
!
!
!
server real server1.test.co.uk 50.1.1.133
source-nat
port http
port http url "HEAD /"
!
server real server2.test.co.uk 50.1.1.134
source-nat
port ssl
port http
port http url "HEAD /"
!
server real server1.test.de 50.1.1.140
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
!
server real server2.test.de 50.1.1.141
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
!
server real server1.test.se 50.1.1.143
source-nat
port http
port http url "HEAD /"
!
server real server2.test.se 50.1.1.144
source-nat
port http
port http url "HEAD /"
!
server real server1.test.nl 50.1.1.149
source-nat
port http
port http url "HEAD /"
!
server real server2.test.nl 50.1.1.150
source-nat
port http
port http url "HEAD /"
!
server real server1.test.fr 74.53.217.72
source-nat
port http
port http url "HEAD /"
!
server real server2.test.fr 74.53.217.73
source-nat
port http
port http url "HEAD /"
!
server real server1.test.es 74.53.217.75
source-nat
port http
port http url "HEAD /"
!
server real server2.test.es 74.53.217.76
source-nat
port http
port http url "HEAD /"
!
server real server1.test.it 74.53.217.69
source-nat
port http
port http url "HEAD /"
!
server real server2.test.it 74.53.217.70
source-nat
port http
port http url "HEAD /"
!
server real server1.test.com 74.53.217.77
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
!
server real server2.test.com 74.53.217.78
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
!
server real site1.test.co.uk 74.53.217.83
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
port ssl
!
server real site2.test.co.uk 74.53.217.84
source-nat
port http
port http url "HEAD /"
port http status-code 200 200
port ssl
!
server real server1.test.dk 50.1.1.146
source-nat
port http
port http url "HEAD /"
!
server real server2.test.dk 50.1.1.147
source-nat
port http
port http url "HEAD /"
!
server virtual www.test.co.uk 50.1.1.139
predictor least-conn
port http sticky
bind http server1.test.co.uk http server2.test.co.uk http
!
server virtual www.test.de 50.1.1.142
predictor least-conn
port http sticky
no port http translate
bind http server2.test.de http server1.test.de http
!
server virtual www.test.nl 50.1.1.151
predictor least-conn
port http sticky
bind http server1.test.nl http server2.test.nl http
!
server virtual www.test.fr 74.53.217.74
predictor least-conn
port http sticky
bind http server1.test.fr http server2.test.fr http
!
server virtual www.test.es 74.53.217.68
predictor least-conn
port http sticky
bind http server1.test.es http server2.test.es http
!
server virtual www.test.it 74.53.217.71
predictor least-conn
port http sticky
bind http server1.test.it http server2.test.it http
!
server virtual www.test.com 74.53.217.79
predictor least-conn
port http sticky
bind http server1.test.com http server2.test.com http
!
server virtual cluster.test.co.uk 74.53.217.85
predictor least-conn
port http sticky
port ssl sticky
bind http site1.test.co.uk http site2.test.co.uk http
bind ssl site1.test.co.uk ssl site2.test.co.uk ssl
!
server virtual www.test.dk 50.1.1.148
predictor least-conn
port http sticky
bind http server1.test.dk http server2.test.dk http
!
server virtual www.test.se 50.1.1.145
predictor least-conn
port http sticky
bind http server1.test.se http server2.test.se http
!
!
vlan 1 name DEFAULT-VLAN by port
no spanning-tree
!
aaa authentication web-server default local
aaa authentication enable default enable
aaa authentication login default local line tacacs+
aaa authorization exec default none
enable telnet authentication
enable telnet password .....
enable super-user-password .....
hostname C31657.lb01.ah34c.02.dllstx6
ip icmp burst-normal 10000 burst-max 20000 lockup 300
ip address 50.1.1.157 255.255.255.224
ip default-gateway 50.1.1.129
ip dns domain-name test.com
logging console
username admin password .....
interface e 1
port-name uplink
!
end
_______________________________________________
foundry-nsp mailing list
[email protected]
http://puck.nether.net/mailman/listinfo/foundry-nsp
