Problem with LVS DR - 10065 Host is unreachable

["Rogers, Paul" <Paul.Rogers@xxxxxxxxxx>]

Dear All

I have set up an http LVS DR using the instructions in the mini howto (sections 5.2 and 5.4).  The ip addresses are as follows:

GW (Router) 10.80.16.1
DIP 10.80.18.202
VIP 10.80.18.203
RIP1 10.80.18.44
RIP2 10.80.18.45

All the setup appears ok, but when I try to attach to the LVS the connection times out with our proxy server reporting 10065 - HOst is unreachable.  Running ipvsadm while this is going on shows one of the real servers with an InactConn of 1.  If I refresh the page the other server shows the same.

I think the problem may be one of two things

1. We are on an all windows network (other than the web servers).  Therfore there is no DNS only WINS.  What ip addresses should go in the hosts file on the Director and Real Servers? Currently I have the DIP and two RIPs only.  Is this ok?

The clients use WINS to resolve the hosts names and each of the servers runs samba to register itself with the local wins server.  Does any one have any experience of this situation? 

Specifically, how can I get the real server to only register the VIP, not the DIP? 

If I use the VIP in the clients browser instead of the host name should this work? 

Once connected to the Director will the above cause any problems handing over to the Real Servers or when the Real servers send the data back to the clients?

2.  I am also unsure if the Apache conf is correct.  I have included the statement Listen 10.80.18.203:80 on each of the real servers, but both are still accessible via their RIP's. 

Do I need to use the Bind statement to exclude the RIP's, bearing in mind the Apache doc's state this is depreciated, but Listen only seems to add addition hosts not exclude existing ones?

Should the ServerName statement use the IP address instead of the hostname and if so which one, VIP or RIP?

I apologise if this is off topic. If so can any one at least tell me if it's an apache problem or a dns/wins problem please.

Again apologies for the multipart message.  I have nearly fixed it but need our mail admin to change some settings on the MTA so's I don't have to use outlook.

 
Many thanks for all your help

Paul

*****************************************************************************
This email and any attachments transmitted with it are confidential
and intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error please
notify the sender and do not store, copy or disclose the content
to any other person.

It is the responsibility of the recipient to ensure that opening this
message and/or any of its attachments will not adversely affect
its systems. No responsibility is accepted by the Company.
*****************************************************************************