Virtual IP with port forwarding to Virtual Server

[Dr_Pepper]

Hi there,

I've set up a Virtual Server on a 60D for Load Balancing purposes. That works fine so far, but creating a virtual IP with port forwarding mapped to the Virtual Server doesn't...

Configuring the port forwarding to one of the real servers instead of the virtual server works just fine though.

The setup with some imaginary IPs for illustration purposes:

Virtual Server: 192.168.1.10
Real Server #1: 192.168.1.11
Real Server #2: 192.168.1.12
Virtual IP VIP_1: 123.45.67.89 --> 192.168.1.10(TCP: 30001 --> 30000) | Interface: wan1
Virtual IP VIP_2: 123.45.67.89 --> 192.168.1.12(TCP: 30002 --> 30000) | Interface: wan1

"telnet 123.45.67.89 30002" succesfully establishes a connection. But "telnet 123.45.67.89 30001" times out. So VIP_2 works just fine, VIP_1 doesn't.

Any ideas how I could debug this or what the issue might be?

Or is this scenario simply not supported? Would there be any workarounds in that case?

[rwpatterson]

VIP 1 is pointing to the virtual server while VIP 2 is pointing to the real server. Could this be a clue?

[Dr_Pepper]

tanr wrote:

Does telnet directly to the IP of the virtual server work?

Yes it does. The virtual server works just fine, only forwarding ports to it's IP doesn't.

rwpatterson wrote:

VIP 1 is pointing to the virtual server while VIP 2 is pointing to the real server. Could this be a clue?

VIP_1 and VIP_2 are only for illustration purposes. It's exactly my problem, that the VIP pointing to the virtual server doesn't work.

Thanks for your thoughts on this!

[rwpatterson]

When you go to the "Real Servers" tab, are the servers showing as "Active"?

[Dr_Pepper]

Yes, they're active. They also show up as active under Monitor > Load Balance Monitor.

[Delta]

Did you ever get this working?   I'm having the same issue

[Dr_Pepper]

No, I didn't.. Would be great to have a solution.

[oheigl · Accepted solution]

Why don't you create another virtual server with the public IP and the same real servers? Or did you already test this and it didn't work?

[Dr_Pepper]

oheigl wrote:

Why don't you create another virtual server with the public IP and the same real servers? Or did you already test this and it didn't work?

That worked! Somehow this option never occurred to me.. Thanks! :)

[oheigl]

Dr Pepper wrote:

oheigl wrote:

Why don't you create another virtual server with the public IP and the same real servers? Or did you already test this and it didn't work?

That worked! Somehow this option never occurred to me.. Thanks! :)

Glad I could help, sometimes you just have to think simple :)