check the LIC before adding HA

Submitted by admin on Wed, 10/13/2010 - 14:36
ducking stool
  1. introduction
  2. request a web page from ics01
  3. check activity logs
  4. ping an Internet host
  5. troubleshoot

introduction

The LIC (Larg's Internet Cluster) is complete enough to test. It is not fully operational because there is no HA (High Availability).

Request a page from the LIC. Send a request for a web page from xcl01 to ics01. Request an echo from the Internet. Send an ICMP (Internet Control Message Protocol) echo request from ics01 to the Internet. If all is well, I won't notice ifw01 doing its traffic cop job.

request a web page from ics01

The first test is one hop from the firewall to the web server.

  1. Open a CLI on the ifw01 host.
  2. Use su to switch to the root account.
  3. Check the host file with a web client. 
    issalarg@ifw01:~$ lynx -dump http://192.168.0.7/infrastructure/host1

   ics01

issalarg@ifw01:~$

check activity logs

The web server records all requests in its activity logs.

  1. Open a CLI on the ics01 host.
  2. Use su to switch to the root account.
  3. check the activity log 
    ics01:~# tail  /var/log/apache2/access.log
192.168.0.3 - - [13/Oct/2010:14:32:20 +0100] "GET /infrastructure/host1 HTTP/1.0" 200 6 "-" "Lynx/2.8.7dev.9 libwww-FM/2.14 SSL-MM/1.4.1"
ics01:~#
  4. Close the CLI.

ping an Internet host

  1. Open a CLI on the host ics01.
  2. Ping ifw01. 
    issalarg@ics01:~$  ping -c 3 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_req=1 ttl=64 time=1.27 ms
64 bytes from 192.168.0.1: icmp_req=2 ttl=64 time=0.170 ms
64 bytes from 192.168.0.1: icmp_req=3 ttl=64 time=1.23 ms

--- 192.168.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.170/0.890/1.270/0.510 ms
issalarg@ics01:~$
  3. Ping xcl01. 
    issalarg@ics01:~$  ping -c 3 200.0.0.1
PING 200.0.0.1 (200.0.0.1) 56(84) bytes of data.
64 bytes from 200.0.0.1: icmp_req=1 ttl=63 time=1.33 ms
64 bytes from 200.0.0.1: icmp_req=2 ttl=63 time=1.30 ms
64 bytes from 200.0.0.1: icmp_req=3 ttl=63 time=1.30 ms

--- 200.0.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 1.304/1.314/1.333/0.043 ms
issalarg@ics01:~$
  4. Ping an Internet host. I picked a server that is guaranteed to be ready and waiting for my call. 
    issalarg@ics01:~$  ping -c 3 www.google.co.uk
PING www.l.google.com (64.233.183.147) 56(84) bytes of data.
64 bytes from nf-in-f147.google.com (64.233.183.147): icmp_seq=1 ttl=241 time=28.2 ms
64 bytes from nf-in-f147.google.com (64.233.183.147): icmp_seq=2 ttl=241 time=23.2 ms
64 bytes from nf-in-f147.google.com (64.233.183.147): icmp_seq=3 ttl=241 time=23.9 ms

--- www.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 23.299/25.173/28.260/2.206 ms
issalarg@ics01:~$
  5. Close the CLI.

troubleshoot

wrong IP address

I speled the IP address wrong. 

issalarg@ifw01:~$ lynx -dump http://192.168.0.4/infrastructure/host1

Looking up 192.168.0.4
Making HTTP connection to 192.168.0.4
Alert!: Unable to connect to remote host.

lynx: Can't access startfile http://192.168.0.4/infrastructure/host1
issalarg@ifw01:~$
lost packets

Ping returns nothing. Is the ifw01 Internet gateway set up correctly? How about the xcl01 Internet gateway?