Author Topic: DX: not load balancing traffic to ssl vpn devices  (Read 2837 times)

alexet

  • Newbie
  • *
  • Posts: 33
  • Karma: +0/-0
    • View Profile
DX: not load balancing traffic to ssl vpn devices
« on: July 24, 2007, 09:50:17 pm »
Hi Guys,

I have 3 juniper ssl vpn devices currently being clustered on a DX. Problem is that the DX seems to be sending the load to only one box, i have configured the algorithm to roundrobin with sticky clientip.  I also tried using the SLB functionality but to no avail. Any idea guys how this would work?

Thanks,
ALex

Stimpy

  • Newbie
  • *
  • Posts: 31
  • Karma: +0/-0
    • View Profile
Re: DX: not load balancing traffic to ssl vpn devices
« Reply #1 on: August 06, 2007, 07:57:29 am »
It should work like that, cvan we have more information about your roundrobin setup?

alexet

  • Newbie
  • *
  • Posts: 33
  • Karma: +0/-0
    • View Profile
Re: DX: not load balancing traffic to ssl vpn devices
« Reply #2 on: August 06, 2007, 11:03:40 pm »
Hi Stimpy,

LIsten IP : 192.168.1.254:443
target hosts: 192.168.1.1:443 weight 0 conn 1
                  192.168.1.2:443 weight 0 conn 1
                  192.168.1.3:443 weight 0 conn 1
Algorithm: roundrobin
              sticky enabled
              clientip
              session/ip 120mins

Will these help?

Thanks,
Alex

Stimpy

  • Newbie
  • *
  • Posts: 31
  • Karma: +0/-0
    • View Profile
Re: DX: not load balancing traffic to ssl vpn devices
« Reply #3 on: August 07, 2007, 03:41:14 am »
Alex,

On the Juniper site you can find an
Application Note "
Next Generation Extended Enterprise
IVE, Routing, Firewall, IDP, and Application Acceleration"
Part Number: 350069-001


Here you can find a setup with a dx that is loadbalancing an ssl

If you don't find the pdf I can send it to you

Kind Regards
Tim