SA4000 cluster and NC

[Dimitry_]

hey all,

got a pair of SA4000 in A/P mode and IVS's.

when a client using a NC and failover accoures, the NC is reconnecting but no traffic is passing,

not even when signing in again, only when failing over again traffic is passing

i read the admin guide that i should use IP FILTERS but there's a * which mean that everything is passing

i'm using 6.0r3.1

please help

[Kifah_]

Hello Dimitry,

maybe you have an routing issue.

Is the IP-Pool, which you are use for your NC-client, in the same subnet as the internal NIC's from your SA's?

If not i think that you have a routing entry, for this Pool, on the next hop which points to the first SA. In this case the back route can't work after an fail-over.

The IP-Filters on the SA are used therefor that you can have differnet IP-Pools on each SA. Then you can use differnet routes for each pool.

Greetings

Kifah

[ben_]

Where should the last hop's route poin to? the internal VIP of the IVE?

If the IVE would support RIP / OSPF such things would be easier...

Message Edited by ben on 03-17-2008 04:14 PM

[player_ · Accepted solution]

issue solved,

for each node in the cluster a NC ip pool must be configured in the IVS - per node not per cluster!

now when a client connects using NC it gets an ip address from the active node and when a failover occures

the NC status is reconnecting and getting a new ip address from the new active node :-)

player

Message Edited by player on 03-17-2008 11:04 AM

[ben_]

May the pool be the same then?

E.g. if you map an IP to a user via Radius attribute

[player_]

Absolutly not!!

Doing this will crash the NC engine !!

It's is imperative to assign diffrent ip pool from the centeral NC pool that is configured in global IVS configuration when creating it's vlan,prefix url etc.

[MaxCere_]

This is an old discussion. Now in a A/P design you can use the same NC IP Pool on both the cluster memeber.

[zanyterp_]

As long as your internal routes continue to point to the internal VIP for the Network Connect IP pool, yes, the shared pool is great