Re: Netscreen 100, Alteon Aceswitch 180, Cisco switch

From: Julio Arruda (jarruda_at_removethisnortelnetworks.com)
Date: 05/08/03


Date: Thu, 08 May 2003 09:14:24 -0400

Remarks "inline"....

Mag wrote:

> Netscreen 100, Alteon Aceswitch 180, Cisco switch
>
> Netscreen and Alteon are on the same network.
>
> FW
> |
> ---------------
> | | |
> Alteon Web1 Web2
>

The "----" is the cisco switch I guess ?
In port 0/3 and 0/5 you happen to have the FW and the Alteon ?

> The Alteon is load balancing the traffic for the web servers. The web
> servers think they are only talking to the Alteon. This seems to be
> working.
>
> However, my switch has been giving errors:
> May 7 21:07:26.973 EST: %RTD-1-ADDR_FLAP: FastEthernet0/3 relearning
> 12 addrs per min
> May 7 21:08:26.981 EST: %RTD-1-ADDR_FLAP: FastEthernet0/3 relearning
> 12 addrs per min
>
> I turned debugging on and got:
> May 7 21:06:22.092 EST: 0010.db05.9fd4 has moved from port Fa0/5 to
> port Fa0/3 in vlan 101
> May 7 21:06:26.202 EST: Add address 0010.db05.9fd4, on port Fa0/5
> vlan 101
> May 7 21:06:26.202 EST: 0010.db05.9fd4 has moved from port Fa0/3 to
> port Fa0/5 in vlan 101
> May 7 21:06:26.236 EST: Add address 0010.db05.9fd4, on port Fa0/3
> vlan 101
>
> That is the MAC for the trusted interface of the firewall. Why is it
> bouncing between ports? Did I misconfigure the firewall or the load
> balancer?
I would guess that is a "submac problem"..
By default, "submac" is disabled in the alteon.
If you enable it (in /c/slb/real x/submac ena), the Alteon will replace
the sender MAC address by its own..



Relevant Pages

  • Suggestion wanted in regards to Loadbalancer/SSL Offloader
    ... The place I work currently uses pairs of Alteon AD3 and Alteon iSD100 ... to do load balancing and SSL offloading. ... on the front end mostly on port 80 and 443, ... On the frontend we have currently some 110 virtual servers but ...
    (freebsd-isp)
  • Re: Netscreen 100, Alteon Aceswitch 180, Cisco switch
    ... My Alteon doesn't have such a command. ... Hardware Revision: 2 ... The line is the switch. ... Port 3 is the firewall. ...
    (comp.security.firewalls)
  • Configure port 5060 with TCP
    ... I am having a problem trying to configure my alteon 2208 to enable TCP ... this is normally a SIP port, so has to use the UDP protocol. ...
    (comp.dcom.sys.nortel)