Forum Discussion

Sreevathsan_870's avatar
Sreevathsan_870
Icon for Nimbostratus rankNimbostratus
Jul 14, 2010

Configuring access to Multiple ports

Hi all

 

 

I have a problem while I was trying to configure the BIG IP HLB

 

 

I was trying to allow all the ports for access from the client to the servers behind the HLB , I have used the option allow all ports in both the Virtual server config as well as in the Pool config . But when I try to access the servers via different port than port 80 we are not able see the traffic for the pool . But I can see a packet increase in the pool statistics for that servers. when I try to access the server via http , but I need to access the servers behind the HLB via 4 different ports

 

 

Appreciate if anybody can help on this

 

 

Sreevathsan

 

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Hi Sreevathsan,

     

     

    How is your virtual server defined? Can you post an anonymized copy of the VS and pool config using 'b virtual VS_NAME list' and 'b pool POOL_NAME list'? Also, can you provide an example IP address and port that you're trying to connect to through the VS?

     

     

    Thanks, Aaron
  • Thanks for your reply

     

     

    I have created a nodes for the servers in the HLB with the server names as Server 1 and Server 2 The server IP are 204.136.x.80 and 81

     

     

    I have created a POOL named OID and added theses servers in the pool and mentioned as all ports are allowed for access

     

     

    I have created the VS named as IOD and added the OID pool , given a IP on the same subnet of the servers , 204.136.x.x , I have configured the SNAT as AUTO MAP and also enabled address translation and port translation , I tried even without that also , but I am getting the same error

     

     

    Appreciate your help

     

     

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Can you post the virtual server and pool definitions? You can run the bigpipe commands from the command line or via the GUI's System | Console section:

     

     

    b virtual VS_NAME list

     

    b virtual POOL_NAME list

     

     

    Aaron
  • VS Name : OID

     

    VS IP address : 204.x.x.170

     

    Service Port : 0

     

    Type : Standard

     

    protocol : tcp

     

    protocol profile (Client ) : tcp

     

    Protocol Profile (Server) : client profile

     

    Address Translation : None

     

    Port Translation : None

     

    SNAT : Auto MAP

     

    Pool Name : OID

     

     

    Pool definitions :

     

     

    Pool Name : OID

     

    Pool servers : 2

     

    Pool server ports : 0

     

    server IP address : 204.x.x.81,80

     

    LB method : Round Robin

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    So you have the VS defined on port 0 which allows LTM to accept traffic destined for any port. But the pool members are defined only on port 80. Assuming you don't need to translate destination ports between the client request and the LTM to pool, you can configure the pool members on port 0 and leave port translation enabled. Address translation must be enabled for LTM to translate the destination IP from the VS to the pool member.

     

     

    Aaron
  • I tried of what you said , but still I have the same problem , I could not see the packets coming from the virtual server to the server pool , So I believe that the VS is not sending the packets to the pool for sending to the servers

     

     

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Can you print the actual output from 'b virtual VS_NAME list' and 'b pool POOL_NAME list' but replace any sensitive info like public IP addresses or names in the output?

     

     

    Thanks, Aaron