Comments on: Getting Something Out of the CSM http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/ It's possible that someone somewhere needs to see this. Fri, 10 Feb 2012 15:03:12 -0700 hourly 1 http://wordpress.org/?v=3.1.4 By: Aaron Conaway http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-59940 Aaron Conaway Sun, 08 May 2011 04:54:37 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-59940 Hi, Vincent. Thanks for reading. When a probe fails for a host in a serverfarm, that host is no longer available for any vserver that uses that serverfarm. The fix is to configure multiple serverfarms - one per vserver containing the same real IPs - so that a single probe failure doesn't affect all services that use that host. For example, you would create one serverfarm for HTTP and one for HTTPS and assign each to an appropriate server object. You can also apply your custom probes to each new serverfarm as needed. That should fix you right up. Hi, Vincent. Thanks for reading.

When a probe fails for a host in a serverfarm, that host is no longer available for any vserver that uses that serverfarm. The fix is to configure multiple serverfarms – one per vserver containing the same real IPs – so that a single probe failure doesn’t affect all services that use that host. For example, you would create one serverfarm for HTTP and one for HTTPS and assign each to an appropriate server object. You can also apply your custom probes to each new serverfarm as needed.

That should fix you right up.

]]> By: Vincent Nguyen http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-59794 Vincent Nguyen Fri, 06 May 2011 17:25:22 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-59794 Hi Aaron, Thank you for all your posts, they are very helpful. I have a I challenge that we have 2 servers in severfarm, they have http, https probes and some custom TCP probes. My question, is there any way to configure the CSM if HTTP probe on server1 is down, CSM will forward HTTP traffic to server2 and continue passing another traffic to server1 and not mark server1 is down. Do you have any post about Inband Health Monitor? Hi Aaron,

Thank you for all your posts, they are very helpful. I have a I challenge that we have 2 servers in severfarm, they have http, https probes and some custom TCP probes. My question, is there any way to configure the CSM if HTTP probe on server1 is down, CSM will forward HTTP traffic to server2 and continue passing another traffic to server1 and not mark server1 is down. Do you have any post about Inband Health Monitor?

]]> By: Aaron Conaway http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-34421 Aaron Conaway Thu, 21 Oct 2010 15:29:36 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-34421 <p>Hi, Peter.</p> <p>Can I ask why you don't have your CSMs in an FT configuration?  It looks like you're using the same IPs on both of them through the alias command, which may cause a problem.  It doesn't explain the duplicate IP from 172.17.1.77, though.</p> <p><br /> You could try the <strong><em>debug module csm 3 arp</em></strong> command to see what that says.  It may be pretty verbose, so I suggest capturing your terminal buffer or using syslog.</p> <p>Let me know if that helps at all.</p> Hi, Peter.

Can I ask why you don't have your CSMs in an FT configuration?  It looks like you're using the same IPs on both of them through the alias command, which may cause a problem.  It doesn't explain the duplicate IP from 172.17.1.77, though.

You could try the debug module csm 3 arp command to see what that says.  It may be pretty verbose, so I suggest capturing your terminal buffer or using syslog.

Let me know if that helps at all.

]]> By: peter http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-34340 peter Thu, 21 Oct 2010 00:42:05 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-34340 It's not the same IP. Cisco is unable to provide me explanation on this. I saw this article below which could be related to what is happening to me. Do you know of any debug commands in csm that could capture the source sending this arp frame for 172.17.1.77? <a href="http://www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a00803937a7.shtml" rel="nofollow">http://www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a00803937a7.shtml</a> Router1                                                                     Router2 vlan 800 client                                                         vlan 800 client   ip address 172.17.1.5 255.255.224.0                ip address 172.17.1.4 255.255.224.0   gateway 172.17.1.1                                                gateway 172.17.1.1   alias 172.17.1.6 255.255.224.0                           alias 172.17.1.6 255.255.224.0 vlan 348 server                                                       vlan 348 server   ip address 172.18.1.67 255.255.255.192         ip address 172.18.1.66 255.255.255.19   alias 172.18.1.65 255.255.255.192                   alias 172.18.1.65 255.255.255.192 interface Vlan800                                                   interface Vlan800   ip address 172.17.1.3 255.255.224.0                 ip address 172.17.1.2 255.255.224.0  no ip redirects                                                          no ip redirects  arp timeout 240                                                       arp timeout 240  standby 2 ip 172.17.1.1                                          standby 2 ip 172.17.1.1  standby 2 preempt                                                  standby 2 priority 150   standby 2 track Vlan800 20                                   standby 2 preempt It's not the same IP. Cisco is unable to provide me explanation on this. I saw this article below which could be related to what is happening to me. Do you know of any debug commands in csm that could capture the source sending this arp frame for 172.17.1.77?
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a00803937a7.shtml

Router1                                                                     Router2
vlan 800 client                                                         vlan 800 client
  ip address 172.17.1.5 255.255.224.0                ip address 172.17.1.4 255.255.224.0
  gateway 172.17.1.1                                                gateway 172.17.1.1
  alias 172.17.1.6 255.255.224.0                           alias 172.17.1.6 255.255.224.0
vlan 348 server                                                       vlan 348 server
  ip address 172.18.1.67 255.255.255.192         ip address 172.18.1.66 255.255.255.19
  alias 172.18.1.65 255.255.255.192                   alias 172.18.1.65 255.255.255.192
interface Vlan800                                                   interface Vlan800 
 ip address 172.17.1.3 255.255.224.0                 ip address 172.17.1.2 255.255.224.0
 no ip redirects                                                          no ip redirects
 arp timeout 240                                                       arp timeout 240
 standby 2 ip 172.17.1.1                                          standby 2 ip 172.17.1.1
 standby 2 preempt                                                  standby 2 priority 150 
 standby 2 track Vlan800 20                                   standby 2 preempt

]]> By: Aaron Conaway http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-34314 Aaron Conaway Wed, 20 Oct 2010 15:02:19 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-34314 <p>Thanks for stopping by, Peter.  If your CSM is configured with the same IP as your HSRP routers, then you have a standard IP conflict.  Do the CSM and HSRP routers both use the same IP?</p> Thanks for stopping by, Peter.  If your CSM is configured with the same IP as your HSRP routers, then you have a standard IP conflict.  Do the CSM and HSRP routers both use the same IP?

]]> By: peter http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-34278 peter Wed, 20 Oct 2010 08:12:19 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-34278 <font color="#333333" size="2">Hi Aaron,</font> <font color="#333333" size="2">Excellent site. I'm just wondering if you have an idea on these alarms which I get every minute. Router1 currently has active CSM and Router 2 is the Active HSRP (vlan800). 172.17.1.77 is a VIP in the CSM and is complaining about this arp frame coming from the mac-address. I found out that it is the virtual mac of the active HSRP in vlan800. </font> <font color="#333333" size="2">Is there some hosts/server in vlan800 trying to arp for the VIP and the router2(having the active HSRP for vlan800) is broadcasting a response that it has the VIP 172.17.1.77 and since Router1 CSM already has arp entry for 172.17.1.77, it gets these errors below?</font> <font color="#333333" size="2">Sep 11 22:27:58.337 GMT: %CSM_SLB-4-TOPOLOGY: Module 3 warning: IP address conflict: ARP frame from 172.17.1.77 with MAC 00:00:0c:07:ac:02 received on VLAN 800</font> Hi Aaron,
Excellent site. I'm just wondering if you have an idea on these alarms which I get every minute. Router1 currently has active CSM and Router 2 is the Active HSRP (vlan800). 172.17.1.77 is a VIP in the CSM and is complaining about this arp frame coming from the mac-address. I found out that it is the virtual mac of the active HSRP in vlan800.
Is there some hosts/server in vlan800 trying to arp for the VIP and the router2(having the active HSRP for vlan800) is broadcasting a response that it has the VIP 172.17.1.77 and since Router1 CSM already has arp entry for 172.17.1.77, it gets these errors below?
Sep 11 22:27:58.337 GMT: %CSM_SLB-4-TOPOLOGY: Module 3 warning: IP address conflict: ARP frame from 172.17.1.77 with MAC 00:00:0c:07:ac:02 received on VLAN 800

]]> By: Aaron Conaway http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-26135 Aaron Conaway Mon, 26 Jul 2010 02:34:07 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-26135 Hey, Kashi. That command means that you currently have two active connections (conns) and 1587 connections over the life of the vserver (total conns). Hey, Kashi. That command means that you currently have two active connections (conns) and 1587 connections over the life of the vserver (total conns).

]]> By: Kashi http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-26109 Kashi Sun, 25 Jul 2010 20:09:05 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-26109 Hi Aaron, I want to understand, what does the following mean in the out of the command, sh mod csm x vservers name conns = 2, total conns = 1587 Would appreciate if you could explain elaborately. Hi Aaron,

I want to understand, what does the following mean in the out of the command, sh mod csm x vservers name

conns = 2, total conns = 1587

Would appreciate if you could explain elaborately.

]]> By: Aaron Conaway http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-24189 Aaron Conaway Thu, 01 Jul 2010 02:38:58 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-24189 Another good question, Kashi, and, once again, it's something I know so little about. If you can get a Tcl script loaded and running from CLI, you should be able to use either the EEM scheduler or Kron to run them at regular intervals. You'll have to do all the research on your own, though, as I have never used either. Personally, I would just use SNMP to poll the connections to the RIP and graph or alert based on the value. Another good question, Kashi, and, once again, it’s something I know so little about. If you can get a Tcl script loaded and running from CLI, you should be able to use either the EEM scheduler or Kron to run them at regular intervals. You’ll have to do all the research on your own, though, as I have never used either. Personally, I would just use SNMP to poll the connections to the RIP and graph or alert based on the value.

]]> By: Kashi http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/comment-page-1/#comment-24171 Kashi Wed, 30 Jun 2010 16:38:09 +0000 http://aconaway.com/2008/06/10/getting-something-out-of-the-csm/#comment-24171 Thanks Aaron. One more. I know that from CSM we can find out no of connections/hits coming on to a RIP. But is it possible to capture this data say every 1 hr using a TCL script ? Thanks Aaron. One more.

I know that from CSM we can find out no of connections/hits coming on to a RIP. But is it possible to capture this data say every 1 hr using a TCL script ?

]]>