[ClusterLabs] Regarding IP tables and IP Address clone

Michael Schwartzkopff ms at sys4.de
Wed Dec 23 17:39:58 CET 2015


Am Mittwoch, 23. Dezember 2015, 19:17:25 schrieb Somanaththilak jeeva:
> > Am Mittwoch, 23. Dezember 2015, 12:28:06 schrieb Ulrich Windl:
> >* >>> Somanath Jeeva <somanath.jeeva at ericsson.com
> ><http://clusterlabs.org/mailman/listinfo/users>> schrieb am 23.12.2015 um*
> >
> >* >>> 06:01 in*
> >
> >* Nachricht <4F5E5141ED95FF45B3128F3C7B1B2A6721ABE07B at
> >eusaamb109.ericsson.se <http://clusterlabs.org/mailman/listinfo/users>>:*
> >
> >* > Hi ,*
> >
> >* > *
> >
> >* > Thanks for the quick reply.*
> >
> >* > *
> >
> >* > I will check with our IT team regarding the multicast MAC at switch
> >level.*
> >
> >* > *
> >
> >* > But the Virtual IP is reachable for 15 minutes or so after I start the*
> >
> >* > pacemaker/Corosync service. After which it becomes unreachable.
> >However*
> >
> >* > when I restart the iptables service it becomes reachable again for*
> >
> >* > another 15 min.*
> >
> >* It could be some ARP cache problem. Maybe watch it.*
> >
> > Please check the ARP tables of your switches / routers. IP address clones
> > use
> > 
> > multicast MAC addresses for the unicast IP address. Some switches (esp
> > Cisco)
> > 
> > do not like that. You would have to configure the MAC addresses manually.
> 
> Do I have to configure this MAC address manually at switch level?. The
> Multicast MAC was automatically added in the iptables after started
> the pacemaker/Corosync service.

Please check the ARP tables of your switches / routers. IP address clones
use multicast MAC addresses for the unicast IP address. Some switches (esp
Cisco) do not like that. You would have to configure the MAC addresses 
manually.

Please do as advertised.

Mit freundlichen Grüßen,

Michael Schwartzkopff

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part.
URL: <http://clusterlabs.org/pipermail/users/attachments/20151223/0b4c2884/attachment.sig>


More information about the Users mailing list