TS - 'route:' statement for DUAL homed devices
I am using the 'route:' statement for dependencies currently.
In my environment, I have dual everything to the wiring closet, or dual homed servers.
Is there a way to have a device watch for BOTH paths back?
In other words, if both connections fail then the SERVER will turn YELLOW and show the unreachable cause.
3 Examples:
I can watch for a failure of "wiring-closet-switch" but cannot go any farther back
CISCO-6500A à 1 gig fiber connectionà wiring-closet-switch à SERVER
CISCO-6500B à 1 gig fiber connection ---^
CISCO-6500A à top-of-rack-switch à SERVER
CISCO-6500B ----^
CISCO-6500A à SERVER
CISCO-6500B ----^
Would this work?
SERVER # route:top-of-rack-switch,CISCO-6500A,CISCO-6500B conn ...
Thanks,
Tom Schmitt
Senior IT Staff - R&D
L-3 Communication Systems West
640 North 2200 West
P.O. Box 16850
Salt Lake City, UT 84116
Phone (801) 594-3030
Cell (801) 231-7230
eFax (413) 480-6873
D.Tom.Schmitt at L-3Com.com
\\\\||////
\ ~ ~ /
| @ @ |
--oOo---(_)---oOo--
On Wednesday, 2 February 2011 21:24:58 d.tom.schmitt at l-3com.com wrote:
I am using the 'route:' statement for dependencies currently.
In my environment, I have dual everything to the wiring closet, or dual homed servers.
Is this for NIC + switch redundancy, or do you need separate IP addresses? On different VLANs?
Is there a way to have a device watch for BOTH paths back?
This may not help you, but what we do is: 1)Wire two NICs to different switches (say eth0 and eth1) 2)Bond the two NICs (as say bond0) 3)If we need more than one VLAN, trunk both ports and run VLANs on the host (e.g. bond0.100 and bond0.101).
Then we monitor the "closest" interface to the monitoring server (which is multi-homed), and on the route tag, we put the HSRP address of the gateway for the subnet (bet it switch or firewall).
Note: we only set one 'default' gateway, it's easier to know exactly what path the packets take, what their source addresses will be, when you have another team unfamiliar with the intricacies of your environment maintain the firewalls.
Regards, Buchan
participants (2)
-
bgmilne@staff.telkomsa.net
-
d.tom.schmitt@L-3com.com