cancel
Showing results for 
Search instead for 
Did you mean: 
prajoshgeorge
Level 10

Proxy HA - Load balancing issues

Jump to solution

Hi guys,

I am not able to perform load balancing in Proxy HA. I have put one appliance as 90 priority (SECONDARY) and a second appliance as 99 priority (PRIMARY). However the traffic I see goes only to secondary from the charts.

running the command mfend-lb -s gives the following output

PRIMARY

       device: MWG01

statechange:

         ip: 192.168.2.1

        ip6: ::

  protocols: 00000001

        mac: 001ec9bb8904

      state: CONFLICT

statusvalid: 0

       type: director

SECONDARY

     device: MWG02

statechange:

         ip: 192.168.2.2

        ip6: fe80::21e:c9ff:febb:eeef

  protocols: 00000001

        mac: 001ec9bbeeef

      state: NETWORK

      stats: 0 158 272746 0 0

statusvalid: 1

       type: director

     device: __SELF__

statechange:

         ip: 0.0.0.0

        ip6: ::

  protocols: 00000001

        mac: 001ec9bbeeef

      state: OK

      stats: 0 158 272746 61 103

statusvalid: 1

       type: scanning

     device: MWG01

statechange: 1378212891 (Tue Sep  3 15:54:51 2013)

         ip: 192.168.2.1

        ip6: ::

  protocols: 00000001

        mac: 001ec9bb8904

      state: FAILED

statusvalid: 0

       type: director

The messages keeps alternating between between the two appliances.

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

Create the case, but thats most likley whats breaking it.

The ProxyHA communication is not TCP.

Best,

Jon

0 Kudos
9 Replies
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

What version? Can you take a screenshot of your proxy port configuration (Configuration > Proxies)? What is the SR #?

This usually happens when there is a misconfiguration of the proxy ports.

Best,

Jon

0 Kudos
prajoshgeorge
Level 10

Re: Proxy HA - Load balancing issues

Jump to solution

I am on 7.3.2.2.0

Screenshots are attached.

0 Kudos
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

Take a screenshot of the HTTP listener ports as well.

Best,

Jon

0 Kudos
prajoshgeorge
Level 10

Re: Proxy HA - Load balancing issues

Jump to solution
0 Kudos
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

Hmmm, all that looks good. Do you have an SR opened with feedbacks attached? (do NOT post them here)

0 Kudos
prajoshgeorge
Level 10

Re: Proxy HA - Load balancing issues

Jump to solution

I have network protection enabled if that is worth mentioning. I will open an SR and get back to you

0 Kudos
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

Thats probably breaking it.

0 Kudos
prajoshgeorge
Level 10

Re: Proxy HA - Load balancing issues

Jump to solution

I have enabled all TCP ports for the management IPs in the network protection

PRIMARY has 192.168.2.2 TCP 1 - 65535

SECONDARY has 192.168.2.1 TCP 1 - 65535

they are connected to each other on eth1 directly

0 Kudos
McAfee Employee

Re: Proxy HA - Load balancing issues

Jump to solution

Create the case, but thats most likley whats breaking it.

The ProxyHA communication is not TCP.

Best,

Jon

0 Kudos