Vip configuration

Hi,
While configuring vip network configuration using vipca, i am getting one window that is "Network Interfaces"
As i seen in so many cluster ware installations screen shorts there they got eth0 (public) and eth1 (private) in
"This page displays supported network interfaces found. Select the network interfaces from the list" window
My problem is i am getting only eth0 only. not getting eth1. anyway we will select only eth0 only, but if i proceed vip configuration is not successful.
Please help me in finding solution.
Thank you very much.

Seems like that the private interface is not up. Did you verify that it's working on the o/s level?
Aman....

Similar Messages

RH Linux VIP configuration not working for Oracle 10g RAC installation

Hi all,
I am trying to setup my test cluster on Oracle 10gR2 and Red Hat Linux 4. I have the public and private networks working fine and setup. However, after I setup the two VIP addresses, I cannot even ping these two virtual IPs from Linux. CRS install fails during initial run because it cannot communicate with the two VIP IP addresses. Can anyone help me out as to how to go about fixing the two VIPs so that Linux can ping them and CRS will install?
Thanks

It sounds like you configured your VIP on Linux in advance, before installing Oracle.
You are not supposed to do that.
Decide on an IP that the VIP will use with your network manager, but don't configure it in Linux. So before you start the clusterware install, ifconfig should not show your VIP.
CRS does not need VIP when you install the clusterware, only the interconnect address.
VIP is configured using a utility called VIPCA. If Clusterware installation fails and you think it was caused by VIP issues, try running VIPCA manually and let us know what were the results.

VIP configuration problem

This is a 2-node installation on SUN solaris SPARC severs(M4000 and E6900).
installion of Oracle CRS(10.2.0.4) and db oracle_home on 2-node solaris 10 SPARC were completed succesfully.
Since the network interface cards on both the servers are different(the NIC name in M4000 is e1000g1,e1000g2 while in E6900 it is ce0,and ce1), we created symbolic links e1000g1,e1000g2 on e6900 server to point to ce1 and ce2. Im trying to configure vips on both the servers and im facing a weird problem.
Both the VIP's are being created in M4000 server instead of one on each server.
ie:
required config:
node1-vip-192.168.1.191
node2-vip 192.168.1.181
but when i run
srvctl modify nodeapps -n node1 -A 192.168.1.191/255.255.255.0/e1000g2
srvctl modify nodeapps -n node2 -A 192.168.1.181/255.255.255.0/e1000g2
Both the VIPS are being created in node1.
the output of crs_stat -t is
Name Type Target State Host
ora....SM1.asm application OFFLINE OFFLINE
ora....ST.lsnr application ONLINE ONLINE node1
ora....est.gsd application ONLINE ONLINE node1
ora....est.ons application ONLINE ONLINE node1
ora....est.vip application ONLINE ONLINE node1
ora....SM2.asm application OFFLINE OFFLINE
ora....T1.lsnr application ONLINE OFFLINE
ora....st1.gsd application ONLINE ONLINE node2
ora....st1.ons application ONLINE ONLINE node2
ora....st1.vip application ONLINE ONLINE node1(Why is this configuring in node1 instead of node2)
im getting the following error in the vip log file
2009-10-26 13:26:31.387: [    RACG][1] [24377][1][ora.node2vip]: Interface e1000g2 checked failed (host=node2 )
Failed to start VIP 192.168.1.181 (host=node2 )
2009-10-26 13:26:31.388: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut : env ORACLE_CONFIG_HOME=/u01/oracle/product/10.2.0/crs
2009-10-26 13:26:31.388: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut : cmd = /u01/oracle/product/10.2.0/crs/bin/racgeut -e USRORA_DEBUG=0 54 /u01/o racle/product/10.2.0/crs/bin/racgvip start node2
2009-10-26 13:26:31.388: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut : rc = 1, time = 5.620s
2009-10-26 13:26:37.106: [    RACG][1] [24377][1][ora.node2vip]: Interface e1000g2 checked failed (host=node2 )
Failed to start VIP 192.168.1.181 (host=node2 )
2009-10-26 13:26:37.106: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut : env ORACLE_CONFIG_HOME=/u01/oracle/product/10.2.0/crs
2009-10-26 13:26:37.106: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut : cmd = /u01/oracle/product/10.2.0/crs/bin/racgeut -e USRORA_DEBUG=0 54 /u01/o racle/product/10.2.0/crs/bin/racgvip check node2
2009-10-26 13:26:37.107: [    RACG][1] [24377][1][ora.node2vip]: clsrcexecut: rc = 1, time = 5.718s
2009-10-26 13:26:37.107: [    RACG][1] [24377][1][ora.node2vip]: end for resource = ora.node2vip, action = start, status = 1, time = 11.434s
2009-10-26 13:26:51.177: [    RACG][1] [24664][1][ora.node2vip]: Interface e1000g2 checked failed (host=node2 )
Failed to start VIP 192.168.1.181 (host=node2 )
2009-10-26 13:26:51.178: [    RACG][1] [24664][1][ora.node2vip]: clsrcexecut: env ORACLE_CONFIG_HOME=/u01/oracle/product/10.2.0/crs
2009-10-26 13:26:51.178: [    RACG][1] [24664][1][ora.node2vip]: clsrcexecut : cmd = /u01/oracle/product/10.2.0/crs/bin/racgeut -e USRORA_DEBUG=0 54 /u01/o racle/product/10.2.0/crs/bin/racgvip start node2
Please help
Thanks and Regards,
Bob

I don't think you can simply create a symlink for a device and expect that this will work. For example, ifconfig won't show the 'new' devicename. That's why clusterware fails to bring the VIP up on one host and then it will bring the vip online on the other node (expected behaviour).
One solution that I can think of is to create a new virtual interface on both nodes and assign the same name to both. You could use Solaris IPMP to create a new interface like this:
on M4000:
dladm create-aggr -d e1000g2 1on E6900:
dladm create-aggr -d ce1 1This will create a new interface called aggr1 on both machines so you should be able to define the VIPs like this:
srvctl modify nodeapps -n node1 -A 192.168.1.191/255.255.255.0/aggr1
srvctl modify nodeapps -n node2 -A 192.168.1.181/255.255.255.0/aggr1Bjoern

Content rule works with no redundant-vips configured

Hello,
We have a content rule configured (VIP address 10.1.2.3) but have not configured an ip redundant-vip 1 10.1.2.3 under the circuit configuration on either the master or backup CSS.
This content rule works though ? Why is this ?
cheers,
Mike

both css are responding to arp request for this vip, but luckily the upstream router keeps using the csm mac/css.
I would still recommend to use the redundant-vip.
G.

RAC using QFS on Sun Solaris 10 -VIP configuration

Hi DBA's
how to create Virtual IP address in Virtual Box?
I just add in the host file my IP address but i am not able to Ping the Virtual IP address
My host file is as follows. Kindly guide me how to create Virtual IP Address?
bash-3.00# cat /etc/hosts
# Internet host table
::1 localhost
127.0.0.1 localhost
192.168.1.10 rac1.orademo.com rac1
192.168.1.11 rac2.orademo.com rac2
192.168.0.10 rac1-priv.orademo.com rac1-priv
192.168.0.11 rac2-priv.orademo.com rac2-priv
192.168.1.12 rac1-vip.ordemo.com rac1-vip
192.168.1.13 rac2-vip.orademo.com rac2-vip
192.168.1.100 rac-scan.orademo.com rac-scan
192.168.1.6 win
bash-3.00#
Regards,
SG

HI,
Pls mentioned OS and DB version.
Meanwhile check below MOS document for help:-
Modifying the VIP or VIP Hostname of a 10g or 11g Oracle Clusterware Node [ID 276434.1]
Configuring Solaris IP Multipathing (IPMP) for the Oracle 10g VIP [ID 283107.1]
Configuring Linux for the Oracle 10g VIP or private interconnect using bonding driver [ID 298891.1]
Configuring the IBM AIX 5L Operating System for the Oracle 10g VIP [ID 296856.1]
How to Configure Solaris Link-based IPMP for Oracle VIP [ID 730732.1]
Oracle 10g VIP (Virtual IP) changes in Oracle 10g 10.1.0.4 [ID 296878.1]
Thanks,
JD

VIP configuration in RAC

Hi All,
Please can I know which IP address is allocated to VIP in RAC.
like for SCAN
The IP addresses must be on the same subnet as your default public network in the cluster.
Thanks

You can see the VIP names with the following command:
srvctl status vip -n node_name
Repeat for each node. This will tell you the VIP names. You can use nslookup to translate to the IP addresses if needed.
Cheers,
Brian

Can multiple HTTP redirects be applied to the same VIP

Greetings all,
My customer would like to have two redirects to be applied to the same VIP.
Example:
VIP configured name is https://test.company.com
redirect the following:
http://site1.company.com to https://test.company.com
http://site2.company.com to https://test.company.com
I have applied the redirect of 80 to 443 to many VIPs (one for one), but I have not applied one, where two URL redirects go the same VIP.
Hope my question makes sense, and I will be glad to provide additional info.
Thanks,
raman

Hi Raman,
There can be only one redirect server with one webhost redirection and hence there cannot be two redirect URL's. I don't think this can be achieved. Best idea would be for the server to issue redirects.
Regards,
Kanwal

Multiple VIPs per VR

hello,
is it possible to configure multiple VIPs for the same virtual-router on a particular circuit configuration which uses the same redundant-interfaces instead of having to configure redundant-interfaces for each VIP that's added?
I want to do something along the lines of:
ip virtual-router 1 priority 200 preempt
ip redundant-interface 1 192.168.3.254
ip redundant-vip 1 192.168.3.100
ip redundant-vip 1 192.168.3.120
ip redundant-vip 1 192.168.3.140
and then do different things for traffic going to each of these VIPs in my content rules, i.e. have different content-rules for each VIP so different operations can be performed on them.
Currently, although the CSS lets me do this kind of thing, AND the newly created VIPs can be seen in the ARP tables of other network devices in that broadcast domain, I can't seem to ping these VIPs.
Thanks in advance

Hi Gilles, thx for that. So basically what you're saying is that if I have a VIP configured but the content rule that uses this is inactive/suspended OR say the backend server is dead or unreachable for any reason, the ping to the VIP will not be replied to? For some reason I was under the impression that if I configure the VIP in the circuit, I will be able to ping it but now the other way makes more sense.
Now the other question is, if I have all these VIPs as in my original question, and they ALL need SSL termination on the CSS AND they all point to different sub-domains AND I have a wildcard SSL cert for that parent domain, then can I create multiple ssl-server entries in my ssl-proxy-list BUT use the same certificate for each ssl-server in the list?
Not sure if that's clear, let me know and I will provide more detail
Thanks in advance

Does SCAN redirect to node-IP or node-VIP?

I have a 2 node 11gR2 RAC cluster with both SCAN and node VIPs configured. Users connect to the SCAN address. The SCAN listener then redirects connections to the node listener. Does it redirect to the node listener via the node's address or the node's VIP address?
Here's why I'm asking. I'm trying to troubleshoot a recurring problem where node2's VIPs (scan and node-vip) keep failing over to node1 every few weeks. CRS logs on node1 say that it thinks (incorrectly) that node2 is inaccesible so it failed over both VIPs (scan and node-vip). Within a minute or so however, node1 can see node2 again without anyone intervening.
Node2 however remains up the entire time and is running normally. Neither the node listener, database instance, or ASM instance show any indication of a problem in their logs.
On node2's database instance however, all sessions have dropped even though the instance remained up. If the SCAN listeners redirect directly to node2, I would not expect this to happen and I can pin the problem down to some network component (switch, NIC, etc). If SCAN redirects to the node-VIP then I would expect this and need to troubleshoot why node1 is incorrectly thinking node2 went down.

Chuck1958 wrote:
Users connect to the SCAN address. The SCAN listener then redirects connections to the node listener. Does it redirect to the node listener via the node's address or the node's VIP address?That depends on
a) the service the user requests to be connected to
b) the registered hostnames of that service in the Listener
The SCAN listener is a remote listener, with which local listeners, register. The SCAN listener hands off/redirects connections based on what has been registered with it.
Also, a redirect is done using hostname and not dotted IP. Which means in exceptional circumstances, the client can use a hosts file with all static and virtual hostnames, referring to the same single (static or virtual) IP address.
Irrespective of what the SCAN Listener provides as hostname for the redirect, will in such a case be resolved, by the client, to the same IP address. Useful when troubleshooting, or when dealing with NAT firewalls.

Can I use VIP to load balance Coherence Extend?

Hi,
It is possible to provide a list of remote addresses for a remote cache configuration as shown below:
<remote-cache-scheme>
<scheme-name>remote-scheme</scheme-name>
<service-name>ExtendTcpCacheService</service-name>
<tcp-initiator>
<remote-addresses>
<socket-address>
<address>server1_IP</address>
<port>35501</port>
</socket-address>
<socket-address>
<address>server2_IP</address>
<port>35501</port>
</socket-address>
</remote-cache-scheme>
Now is it possible to use a VIP instead of individual IPs for the same purpose?
I tried it and failed. The error was caused by "RequestTimeout". I verified the VIP configuration and it was correct.
Does anyone have similar experience?
Regards,

I haven't worked with VIP, but my vague recollection regarding VIP is that:
(1) A VIP address can only be bound to a single server as it's primarily a fast failover mechanism, so you'd still need a set of them.
(2) VIP isn't intended to be used without CRS. As Coherence includes its own cluster management stack, it would be unusual to configure CRS as well.
One would normally use a general purpose loadbalancer (HW or SW) to achieve your goals, which is a supported configuration.
Jon Purdy

CSM: Is it possible to access IPv4 server farms via IPv6 vIP?

Dear all
Before we start a more extensive testing programme I would like to ask the experts whether or not it should be possible to access already existing server farms (with IPv4 vIP) via an additional IPv6 vIP configured on the load balancer.
The system in question is 6509 with Sup720 and CSM WS-X6066-SLB-APC.
The idea is simple: Take an existing server farm (running completely on v4) and add an additional v6 vIP on the load balancer without the need to change the actual v4 networking behind the load balancer.
Might this work (at least for some protocols like http, ftp, etc.)?
Any "yes" or "no" or "maybe" or "with restrictions" appreciated.;)
Thanks in advance,
Grischa

Fairly sure this isn't possible. Unless I've missed something, the CSM doesn't support IPv6 at all. Even if it did, I don't think a v6 VIP to a v4 real would work. The only place I've seen this work was on a NetScaler, because the NetScaler holds independent connections open to the client and to the servers as a HTTP proxy, passing the request between the two. I forget how the ACE operates; it may be able to act as a proxy, but don't think it supports v6 either.
v6 support on CSMs would be totally awesome, but I'm not holding my breath.

DNS configuration for GSS

Hi,
I am newbee to GSS. I would like to deploy the GSS in my datacenter.
I would like to know the DNS configuration example for domain.
ex:
www.abc.com
What records need to configured with detail script. beacause i dont have experience in DNS server configuration.
I am looking for positive update.
Regards
sateesh kumar.k
i

Typical flow is as follows
1. Client will hit their DNS servers (configured on their machines as primary/backup dns server).
2. "Client's DNS server" will query "DNS server authoritative for abc.com" for www.abc.com.
3. "DNS server authoritative for abc.com" will ask "client's DNS server" to query "GSS - Authoritative for www.abc.com"
4. "Client's DNS server" will query GSS for www.abc.com.
5. GSS will send the ip add of www.abc.com (which should be configured on ACE as VIP).
6. "Client's DNS server" will handover this VIP to client
7. Client will hit the VIP configured on ACE (for application www.abc.com).
Syed iftekhar Ahmed

How VIP works ?

Would like to know, If one of the node goes down, How the future and existing connections on that node get transfered to the surviving node. I read lot that VIP will do that for us. I am not understanding concept of multiple IP stack. also when i do netstat -a | grep <VIP node> as well as <host ip node> both says listens.
But this means to me.
thanks in advance

thanks for your response, I read the document what it
is not clear to me is How VIP relocates to the
available nodes.which process does this work ?I have discussed these concepts in detail my RAC Book. Here is the relavant part..
From Oracle Database 10g RAC Handbook Chapter 3 (ISBN:007146509X)
Oracle Virtual IP
Virtual IP is required to ensure that applications can be designed to be highly available. To design this, system needs to eliminate single point of failures. In oracle we need to ensure that clients connected to a RAC database, survives a node failure. Clientapplications connect to the oracle instance and access the database through the instance. So a node failure will bring down the instance to which the client might have connected.
The first design available from Oracle was Transparent Application Failover
(TAF). With TAF a session can failover to the surviving instances and continue
processing. Various limitations existed with TAF; only query failover is supported. Also to achieve less latency in failing over to the surviving node, we had to tweak the tcp timeout (platform dependent, defaults to 10 minutes in most UNIX ports). It wouldn’t be a good idea to design a system where a client takes 10 mins to detect that there is no response from the node to which it has connected.
To address this, 10g introduced a new feature called cluster virtual IPs (VIPs).
VIP is cluster virtual IP address, which would be used by outside world to connect to the database and this IP address needs to be different from the set of IP addresses, within the cluster. Traditionally listeners would be listening on the public IP of the box. and clients would contact the listener on this IP. If the node dies, then the client would take the tcp timeout value to detect the death of the node. In 10g each node of the cluster has a VIP configured in the same subnet of the public IP. Virtual IP name and addresses must be registered in the DNS in addition to the standard static IP information. Listeners would be configured to listen on VIPs instead of the public IP.
When a node is down, the VIP is automatically failed over to the one of the other
nodes. During the failover, the node, which gets the VIP, will re-arp to the world
indicating the new MAC address of the VIP. Clients who have connected to this VIP will immediately get a reset packet sent. This results in clients getting errors immediately rather than waiting for the tcp timeout value. When one node goes down in cluster and client is connecting to same node, in this case client connection will be refused by down node and client application will chose next available node from tns descriptor list to get connection. Applications need to be written such that they catch the reset errors and handle them. Typically for queries, they should see ORA-3113 error.
<Begin Side Bar Topic>
In computer networking the Address Resolution Protocol (ARP) is the method of
finding the host’s hardware address (MAC address) when only IP address
is known. ARP is used by the hosts when they want to communicate
each other in the same network. It also used by routers to forward a
packet from one host through another router. In cluster Virtual IP failovers,
the new node which gets the VIP advertises the new ARP Address to the
world. This is typically known as gracious-arp and during this operation,
the old hardware address is invalidated in the ARP cache and all the new
connections will get the new hardware address.
<End Side Bar Topic>

SLB Setup for Active/Active 12c configuration

I am doing set up of 12c active/active configuration with SLB but I am not sure about the setup of SLB. I have defined following 3 VIPs behind the hardware load balancer
VIP1:8000 -secure console
VIP2:4900 -secure upload
VIP3:4899 -Agent registration
I have attached the certificate with the VIP1:8000, now I can access the URL using slbhost.domain.com but not able to secure the agent with below message:
==================================================================
2012-03-23 14:33:59,235 [main] ERROR agent.SecureAgentCmd main.212 - Failed to secure the Agent:
java.net.ConnectException: Connection refused
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:351)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:213)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:200)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
at java.net.Socket.connect(Socket.java:529)
at java.net.Socket.connect(Socket.java:478)
at java.net.Socket.<init>(Socket.java:375)
at java.net.Socket.<init>(Socket.java:218)
at javax.net.DefaultSocketFactory.createSocket(SocketFactory.java:212)
at HTTPClient.HTTPConnection$EstablishConnection$2.run(HTTPConnection.java:4268)
at HTTPClient.HttpClientConfiguration.doAction(HttpClientConfiguration.java:708)
at HTTPClient.HTTPConnection.doAction(HTTPConnection.java:5379)
at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java:4254)
==================================================================
Now my OMS server is not able to listen the other OMS host agent when I am trying to add another OMS for active/active agent.
I am not sure if my SLB configuration is correct, do I need to define 3 different VIPs for all 3 ports or single VIP with both the OMS hosts:port combination added.
I am not sure about the SLB and port configuration for OMS. If somebody has done SLB setup can you please share his experience of how to do the setup and secure the agents.
It seems after SLB setup my agents is not able to connect with the oms.

Thanks Loc,
Yes I have secured the agent but still getting the same message. I am using Netscaler for VIP configuration and donot fit with pool concept defined in the documentation.
I can just define one slb host and add all oms hosts:ports to the same slb but after securing the slb and agents, it does not fit secure the agent so when I try to add additional oms it says second oms host not managed.
I am using below configuration:
SLB hostname: slbhost.domain.com
host1:secure upload port:4900
host1:secure console port:8000
host1:agent registration port :4889
host2:secure upload port:4900
host2:secure console port:8000
host2:agent registration port :4889
I cannot create multiple pools in my setup just can create one slbhost.domain.com and assign all hosts:port combination to that.
Thanks
Amit

CSS Load balancing for Exchange Server

Hi,
I have CSS configured in single arm and I have multiple servers configured for load balancing and it is working fine but when I am configuring Exchange server for load balancing I am facing problem and applications and printer/scanners are not able to send the email through the Virtual IP address configured for exchaneg server.
But if we configured the real server IP in the printer/scanners they are able to send the email. While checking the logs on the exchange server, it is showing that request for the email so coming from the Exchange VIP configured in the CSS.
I can telnet on port 25 on the VIP address (192.168.200.237). But unable to send the email through this VIP.
Below is the configuration
service ENOC_EXCHANGE-1
ip address 192.168.200.235
active
service ENOC_EXCHANGE-2
ip address 192.168.200.236
active
content EXCHANGE
    add service ENOC_EXCHANGE-2
    add service ENOC_EXCHANGE-1
    vip address 192.168.200.237
    active
group EXCHANGE
add destination service ENOC_EXCHANGE-1
add destination service ENOC_EXCHANGE-2
vip address 192.168.200.237
active
DC-CSS01# show rule GIT EXCHANGE
Name:                EXCHANGE   Owner:                ENOC_GIT
State:                 Active   Type:                     HTTP
Balance:          Round Robin   Failover:                  N/A
Persistence:          Enabled   Param-Bypass:         Disabled
Session Redundancy: Disabled
IP Redundancy:    Not Redundant
L3:         192.168.200.237
L4:         Any/Any
Url:
Redirect: ""
TCP RST client if service unreachable: Disabled
Rule Services & Weights:
1: EXCHANGE-1-Alive, S-1
2: EXCHANGE-2-Down, S-1
=============================================================================
Please let me know how to solve this problem. System team is saying with the physical IP address it is working fine problem with Load balancing. I have even tried with the
Add service command in the group but didnt work for me. If i will remove the group command then I cant telnet on port 25.
I think this is related to single arm modle or some wrong configuration for the NAT.
Kindly assist me

Hi
Printers are on Vlan 80 ( gw is 192.168.80.1) and exange server is on vlan 200 (gw is 192.168.200.1) i have multiple vlan which will communcate with exchange.
I hv other servers on 200 subnet which are working fine in load balancing.
My CSS is single arm setup.
Please assist
Sent from Cisco Technical Support iPhone App

Vip configuration

Similar Messages

Maybe you are looking for