Monday, December 23, 2019

newbie question can't ping my gateway from new load balancer - help debugging

Hello, I'm pretty new to networking and my issue is I'm installing a new load balancer (A10 device) in one of our CORP zones that's behind a firewall ( Model: srx4600, Junos: 18.2R3-S1.7).

The brand new load balancer doesnt have any config on it (NO ACLs on LB yet) and I only set up the management interface (which is UP) and the ip gateway:

interface management
flow-control
ip address 172.29.0.16 255.255.255.0
ip control-apps-use-mgmt-port
ip default-gateway 172.29.0.1

I should be able to ping my gateway which is the firewall, 172.29.0.1 but can't :

LB1-1#ping 172.29.0.1
PING 172.29.0.1 (172.29.0.1) 56(84) bytes of data.
From 172.29.0.16 icmp_seq=1 Destination Host Unreachable

the firewall is definitely up and accessible from the rest of the network.

I also have a VLAN set up on the LB to a TOR switch -- vlan 230:

vlan 230
tagged trunk 1
router-interface ve 230

interface ve 230
name vlan230
ip address 172.29.30.4 255.255.255.0

this vlan is up

Total arp entries: 1 Age time: 300 secs
IP Address MAC Address Type Age Interface Vlan
---------------------------------------------------------------------------
172.29.30.1 0010.dcff.2002 Dynamic 224 ethernet 6 230

^ But my prb remains that I can't ping my gateway and I'm not understanding why that is as it should be directly connected and show up in my arp table yes?

I've been going through A10 docs and its difficult to find debugging commands that are helpful in troubleshooting this issue:

traceroute to 172.29.0.1 (172.29.0.1), 30 hops max, 60 byte packets
(172.29.0.16) 3051.828 ms !H 3051.732 ms !H 3051.711 ms !H

and here's the route on the firewall for the IP management of the load balancer and the interface:

FW2> show route 172.29.0.16
inet.0: 306 destinations, 528 routes (306 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
172.29.0.0/24 *[Direct/0] 8w2d 16:28:58
> via reth1.100
mgmt_junos.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[Static/5] 8w2d 16:28:58
> to 10.250.243.1 via fxp0.0

FW2> show interfaces reth1.100
Logical interface reth1.100 (Index 95) (SNMP ifIndex 569)
Description: MANAGEMENT
Flags: Up SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.100 ] Encapsulation: ENET2
Statistics Packets pps Bytes bps
..... etc.....
Allowed host-inbound traffic : bgp ospf dhcp ike ping snmp ssh traceroute
Protocol inet, MTU: 1500
Max nh cache: 100000, New hold nh limit: 100000, Curr nh cnt: 30, Curr new hold cnt: 0, NH drop cnt: 0
Flags: Sendbcast-pkt-to-re
Addresses, Flags: Is-Preferred Is-Primary
Destination: 172.29.0/24, Local: 172.29.0.1, Broadcast: 172.29.0.255
Protocol multiservice, MTU: Unlimited

Can anyone please help guide me as to where else I should be looking for any useful commands to narrow down if the issue is on my side with the load balancer or on the gateway/fw side? (please note I logged into this new LB via console)



No comments:

Post a Comment