vcs floating-ip

Product Discussions System
1

Hi,

I’ve successfully configured vcs & vrrp-a on my a-10 devices. I can access the VIP on port 22 (ssh) but not on port 80 or 443. I tried to disable and enable web-service without success. Devices are running version 2.7.2-P2

Is there something I should enable to access the VIP on port 80 and 443 ?

Regards, Jean-Christophe

2

Hi Jean,

Can you please provide a snippet of your aVCS configuration?

Genard

3

Hi Genard,

Find Below the configuration:

vrrp-a device-id 1 vrrp-a set-id 1 vcs enable vcs vMaster-id 1 vcs config-info 7065f8ed222038ff 143 vcs chassis-id 1 vcs floating-ip 172.20.30.21 /24 vcs ssl-enable vcs multicast-ip 224.0.0.210 vcs device 1 priority 200 interfaces management enable affinity-vrrp-a-vrid default vcs device 2 priority 190 interfaces management enable affinity-vrrp-a-vrid default vcs local-device 1 ! hostname shlbpr01 device 1 hostname shlbpr02 device 2 […] interface management device 1 ip address 172.20.30.19 255.255.255.0 ip default-gateway 172.20.30.1 ip control-apps-use-mgmt-port ! interface management device 2 ip address 172.20.30.20 255.255.255.0 ip default-gateway 172.20.30.1 ip control-apps-use-mgmt-port ! […] vrrp-a enable vrrp-a hostid_append_to_vrid default vrrp-a vrid default preempt-mode disable priority 200 device 1 priority 190 device 2 !

Also below is the state of the vcs process: shlbpr01-Active-affinity-def-vMaster[1/1]#sh vcs sum

VCS Chassis: VCS Enabled: Yes Chassis ID: 1 Floating IP: 172.20.30.21 Mask: 255.255.255.0 Multicast IP: 224.0.0.210 Multicast Port: 41217 Version: 2.7.2-P2.b41

Members(* means local device): ID State Priority IP:Port Location ------------------------------------------------------------------------------- 1 vMaster(*) 200 172.20.30.19:41216 Local 2 vBlade 190 172.20.30.20:41216 Remote Total: 2 shlbpr01-Active-affinity-def-vMaster[1/1]#

Thanks & Best Regards, Jean-Christophe

4

Hi Jean,

I reviewed your configuration and I do not see the VIP that you stated on your question. I suggest that you provide a showtech and I will have a better understanding of the entire problem.

Regards,

Genard

5

Hi Genard,

The VIP I’m talking about is the ‘vcs-floating ip’
I can connect to this IP (172.20.30.21) using any SSH Client but not throuhg HTTP/HTTPS.