Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Scaning Node With HA

When I perform a scan for a device with HA configured I noticed that the scan is performed through the IP address of the active server and not through the IP address of the VIP even though Polling Engines displays the IP address of the VIP.

I noticed that the server has both its own and the VIP's IP addresses, but still chooses to perform the scan through its own IP address.

Is it possible to configure that the scan will be performed through the VIP's IP address?

Thanks in Advance

Shay

Find more posts tagged with

Accepted answers

shuth

Due to having multiple IP addresses on the same NIC, it comes down to how Windows chooses which IP to use and that depends on the IP address of your default gateway, the VIP, and the active server IP address. Basically, the IP addresses are converted to binary and the IP with highest matching bits to the gateway will be used.

Details are here:

https://documentation.solarwinds.com/en/success_center/orionplatform/content/ha_which_ip_is_the_source.htm

If you want the scan to use the VIP, you'll need to select an IP closer to the default gateway IP.

I usually advise adding all three IP address to the firewall rules (VIP, server1, server2) to not have to worry about it. Incoming traffic can still be directed to the VIP.

All comments

shuth

Details are here:

https://documentation.solarwinds.com/en/success_center/orionplatform/content/ha_which_ip_is_the_source.htm

If you want the scan to use the VIP, you'll need to select an IP closer to the default gateway IP.

I usually advise adding all three IP address to the firewall rules (VIP, server1, server2) to not have to worry about it. Incoming traffic can still be directed to the VIP.

shaym

Thanks a lot,

It took me some time to understand, at first I thought that a binary IP address should be set on the server
Anyway, it should be noted that in the case of monitoring objects within the same Subnet the communication will still go out through the IP address of the server and not through the VIP because it does not go through the router.

And thanks again

Shay