Forum Discussion

KernelPanic's avatar
KernelPanic
Icon for Nimbostratus rankNimbostratus
Sep 19, 2013

IPSEC Affinity Not Working

I have an HA LTM in load balancing Cisco DMVPN connections to four hub routers 10.20.1.101, 2, 3, & 4. Problem is that it's load balancing the ISAKMP and ESP to different hub routers, as you can see...
application delivery
availability
design
devops
iRules
TMSH
KernelPanic's avatar
KernelPanic
Icon for Nimbostratus rankNimbostratus
Sep 20, 2013
 config  tmsh show sys connection | grep  172.16.1.10:
99.126.100.55:500  172.16.1.10:500  99.126.100.55:16279  10.20.1.103:500  udp  9  (tmm: 1)
99.108.26.170:500  172.16.1.10:500  99.108.26.170:39835  10.20.1.103:500  udp  5  (tmm: 3)
99.126.100.55:4500  172.16.1.10:4500  99.126.100.55:4500  10.20.1.101:4500  udp   8  (tmm: 1)
99.108.26.170:4500  172.16.1.10:4500  99.108.26.170:4500  10.20.1.101:4500  udp  5  (tmm: 3)
99.88.254.242:500  172.16.1.10:500  99.88.254.242:79  10.20.1.103:500  udp  6  (tmm: 0)
108.86.114.132:4500  172.16.1.10:4500  108.86.114.132:51339  10.20.1.103:4500  udp  0  (tmm: 3)
99.88.254.242:4500  172.16.1.10:4500  99.88.254.242:4500  10.20.1.101:4500  udp  5  (tmm: 0)
[root@etc-rslb-dmvpn-1:Active:Changes Pending] config  tmsh show sys connection
Sys::Connections
10.20.0.9:37128  10.20.1.104:8  10.20.0.9:24195  10.20.1.104:8  icmp  1  (tmm: 0)
10.20.0.9:45498  10.20.1.102:8  10.20.0.9:45498  10.20.1.102:8  icmp  5  (tmm: 2)
10.20.0.9:65288  10.20.1.101:8  10.20.0.9:60298  10.20.1.101:8  icmp  10  (tmm: 0)
10.20.0.9:47519  10.20.1.102:8  10.20.0.9:47519  10.20.1.102:8  icmp  0  (tmm: 3)
10.20.0.9:24889  10.20.1.101:8  10.20.0.9:42103  10.20.1.101:8  icmp  7  (tmm: 1)
10.20.0.9:38264  10.20.1.104:8  10.20.0.9:20805  10.20.1.104:8  icmp  3  (tmm: 0)
99.126.100.55:500  172.16.1.10:500  99.126.100.55:16279  10.20.1.103:500  udp  16  (tmm: 1)
10.20.0.9:29007  10.20.1.101:8  10.20.0.9:40193  10.20.1.101:8  icmp  2  (tmm: 3)
10.20.0.9:60195  10.20.1.104:8  10.20.0.9:60195  10.20.1.104:8  icmp  11  (tmm: 3)
99.108.26.170:500  172.16.1.10:500  99.108.26.170:39835  10.20.1.103:500  udp  12  (tmm: 3)
10.20.0.9:7989  10.20.1.101:8  10.20.0.9:42872  10.20.1.101:8  icmp  1  (tmm: 1)
99.126.100.55:4500  172.16.1.10:4500  99.126.100.55:4500  10.20.1.101:4500  udp   16  (tmm: 1)
10.20.0.9:16245     10.20.1.103:8     10.20.0.9:56063     10.20.1.103:8     icmp  9   (tmm: 1)
10.20.0.9:28045  10.20.1.104:8  10.20.0.9:14646  10.20.1.104:8  icmp  7  (tmm: 1)
99.108.26.170:4500  172.16.1.10:4500  99.108.26.170:4500  10.20.1.101:4500  udp  13  (tmm: 3)
10.20.0.9:14082  10.20.1.103:8  10.20.0.9:9736  10.20.1.103:8  icmp  14  (tmm: 2)
10.20.0.9:46868  10.20.1.103:8  10.20.0.9:7838  10.20.1.103:8  icmp  4  (tmm: 0)
10.20.0.9:13278  10.20.1.103:8  10.20.0.9:13278  10.20.1.103:8  icmp  10  (tmm: 2)
10.20.0.9:50581  10.20.1.102:8  10.20.0.9:50581  10.20.1.102:8  icmp  9  (tmm: 1)
99.88.254.242:500  172.16.1.10:500  99.88.254.242:79  10.20.1.103:500  udp  4  (tmm: 0)
10.20.0.9:30984  10.20.1.103:8  10.20.0.9:11335  10.20.1.103:8  icmp  5  (tmm: 0)
108.86.114.132:4500  172.16.1.10:4500  108.86.114.132:51339  10.20.1.103:4500  udp  0  (tmm: 3)
10.20.0.9:33176  10.20.1.101:8  10.20.0.9:33176  10.20.1.101:8  icmp  6  (tmm: 0)
10.20.0.9:39349  10.20.1.102:8  10.20.0.9:9783  10.20.1.102:8  icmp  4  (tmm: 1)
99.88.254.242:4500  172.16.1.10:4500  99.88.254.242:4500  10.20.1.101:4500  udp  3  (tmm: 0)
10.20.0.9:21928  10.20.1.104:8  10.20.0.9:21928  10.20.1.104:8  icmp  9  (tmm: 0)
10.20.0.9:51093  10.20.1.102:8  10.20.0.9:1810  10.20.1.102:8  icmp  11  (tmm: 1)
Total records returned: 27