[Pacemaker] IP Range Failover with IPaddr2 and clone / globally-unique="true"

[Reid, Mike]

Anton,


FWIW, I ran into the same issue not being able to ping IPs created this
wayŠwhen I checked "iptables -L" I realized that there were firewall rules
created that needed to be accounted for.

What worked for me was to try two things: 1.) If you can, temporarily
disable your firewall to ensure you can ping each IP in your range. 2.) If
that works, then you probably just need to turn it back on and provide an
iptables configuration for the "CLUSTERIP" chain.

HTH, 

- Mike


>>Let's try that again with something useful!
>>
>>I'm not an expert on it but...
>>
>>unique_clone_address:
>>If true, add the clone ID to the supplied value of ip to create a unique
>>address to manage (optional, boolean, default false)
>>
>>So for example:
>>primitive ClusterIP ocf:heartbeat:IPaddr2 \
>>? ?params ip="10.0.0.1" cidr_netmask="32" clusterip_hash="sourceip" \
>>? ?op monitor interval="30s"
>>clone CloneIP ClusterIP \
>>? ?meta globally-unique="true" clone-max="8"
>>
>>would result in 8 ip's: 10.0.0.2, 10.0.0.3, etc.
>
>Ok, so I have reinstalled everything and have a clean setup. However,
>it still ain't workin unfortunately. Can you explain how I'm supposed
>to use unique_clone_address? This is mentioned at the start of the
>thread but not with the command. I tried doing what you suggest here:
>
># primitive ClusterIP.144.1 ocf:heartbeat:IPaddr2 params
>ip="10.144.1.1" cidr_netmask="32" clusterip_hash="sourceip" op monitor
>interval="120s"
># clone CloneIP ClusterIP.144.1 meta globally-unique="true" clone-max="8"
>
>That gave:
>
>[root at FW1 ~]# crm status
>============
>Last updated: Wed Jan 25 13:57:51 2012
>Last change: Wed Jan 25 13:57:05 2012 via cibadmin on FW1
>Stack: openais
>Current DC: FW1 - partition with quorum
>Version: 1.1.6-3.el6-a02c0f19a00c1eb2527ad38f146ebc0834814558
>2 Nodes configured, 2 expected votes
>8 Resources configured.
>============
>
>Online: [ FW1 FW2 ]
>
>Clone Set: CloneIP.144.1 [ClusterIP.144.1] (unique)
>     ClusterIP.144.1:0  (ocf::heartbeat:IPaddr2):       Started FW1
>     ClusterIP.144.1:1  (ocf::heartbeat:IPaddr2):       Started FW2
>     ClusterIP.144.1:2  (ocf::heartbeat:IPaddr2):       Stopped
>     ClusterIP.144.1:3  (ocf::heartbeat:IPaddr2):       Stopped
>     ClusterIP.144.1:4  (ocf::heartbeat:IPaddr2):       Stopped
>     ClusterIP.144.1:5  (ocf::heartbeat:IPaddr2):       Stopped
>     ClusterIP.144.1:6  (ocf::heartbeat:IPaddr2):       Stopped
>     ClusterIP.144.1:7  (ocf::heartbeat:IPaddr2):       Stopped
>
>But none of the IPs were pingable after running the clone (just with
>the primitive it was ok).
>doing:
>crm(live)# configure property stop-all-resources=false
>Didn't get the other IPs "Started".
>
>So I got rid of this (successfully) and tried:
>
>primitive ClusterIP.144.1 ocf:heartbeat:IPaddr2 params ip="10.144.1.1"
>cidr_netmask="32" clusterip_hash="sourceip"
>unique_clone_address="true" op monitor interval="120s"
>
>But now I have:
>
>crm(live)#  status
>============
>Last updated: Wed Jan 25 14:57:42 2012
>Last change: Wed Jan 25 14:50:09 2012 via cibadmin on FW1
>Stack: openais
>Current DC: FW1 - partition with quorum
>Version: 1.1.6-3.el6-a02c0f19a00c1eb2527ad38f146ebc0834814558
>2 Nodes configured, 2 expected votes
>1 Resources configured.
>============
>
>Online: [ FW1 FW2 ]
>
>ClusterIP.144.1        (ocf::heartbeat:IPaddr2):       Started FW1
>(unmanaged) FAILED
>
>Failed actions:
>    ClusterIP.144.1_stop_0 (node=FW1, call=25, rc=6, status=complete):
>not configured
>
>And I can't delete it:
>crm(live)# configure property stop-all-resources=true
>crm(live)# configure commit
>INFO: apparently there is nothing to commit
>INFO: try changing something first
>crm(live)# configure erase
>WARNING: resource ClusterIP.144.1 is running, can't delete it
>ERROR: CIB erase aborted (nothing was deleted)
>
>I can't work out how to move forward... Any pointers?
>Cheers
>Anton
>