At work one of my colleagues is setting up NetScalers as load balancers for our new Exchange environment. He is replicating the existing setup but found that the RPC 60001 & 60002 Service Groups on the NetScalers were being marked as down. Curious, I took a look.<\/p>\n
After SSH-ing into the NetScaler I could see the following via<\/a> My colleague too had seen this and pointed me to a good blog post from Citrix on what the reset codes mean<\/a>. That blog post is a good one (that’s why I am linking it here, as a reference to myself) but I don’t think he was looking at the trace via a NetScaler trace so we had no idea of the codes. (Speaking of which, here’s a good post on NetScaler and Wireshark<\/a>. Here’s a KB article on how to collect traces<\/a> from NetScaler. And here’s a KB article on how to collect traces from the CLI<\/a>. Whilst I have briefly read them, I haven’t tried them out currently).\u00a0<\/p>\n Back to the issue at hand. I could see that the individual servers (Exchange 2010 Client Access) were up on RPC 135 and HTTPS, but only RPC 60001 & 60002 were down. I decided to do a As expected, something is listening on ports 60001 and 60002.\u00a0When I tried the same against the new server, however, there was nothing listening on either of these ports. I\u00a0searched the output based on the UUIDs and found the port numbers were different:<\/p>\n So that’s why the NetScalers were getting a reset. Nothing was listening on those ports! Solution is simple. Configure these RPC ports as static<\/a>.<\/p>\n That’s all! :)<\/p>\n","protected":false},"excerpt":{"rendered":" At work one of my colleagues is setting up NetScalers as load balancers for our new Exchange environment. He is replicating the existing setup but found that the RPC 60001 & 60002 Service Groups on the NetScalers were being marked as down. Curious, I took a look. After SSH-ing into the NetScaler I could see … Continue reading NetScaler\/ Exchange RPC – TCP syn sent, reset received<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[657,86],"tags":[647,201],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3506"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=3506"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3506\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=3506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=3506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=3506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}show serviceGroup <serviceGroupName><\/code>:<\/p>\nMonitor Name: tcp State: DOWN Passive: 0\r\nProbes: 93936 Failed [Total: 93936 Current: 93936]\r\nLast response: Failure - TCP syn sent, reset received.\r\n<\/pre>\n
portQry<\/code> against a server in the older environment and compare against the new. Here’s the relevant bits from an older server:<\/p>\nUUID: a4f1db00-ca47-1067-b31f-00dd010662da \r\nncacn_ip_tcp:EXHTCA01[60001]\r\n\r\nUUID: 5261574a-4572-206e-b268-6b199213b4e4 \r\nncacn_ip_tcp:EXHTCA01[60001]\r\n\r\nUUID: f5cc5a18-4264-101a-8c59-08002b2f8426 Microsoft Exchange NSP Interface\r\nncacn_ip_tcp:EXHTCA01[60002]\r\n\r\nUUID: 1544f5e0-613c-11d1-93df-00c04fd7bd09 Microsoft Exchange RFR Interface\r\nncacn_ip_tcp:EXHTCA01[60002]<\/pre>\n
UUID: a4f1db00-ca47-1067-b31f-00dd010662da \r\nncacn_ip_tcp:NEW-EXHTCA01[15212]\r\n\r\nUUID: 5261574a-4572-206e-b268-6b199213b4e4 \r\nncacn_ip_tcp:NEW-EXHTCA01[15212]\r\n\r\nUUID: f5cc5a18-4264-101a-8c59-08002b2f8426 Microsoft Exchange NSP Interface\r\nncacn_ip_tcp:NEW-EXHTCA01[15168]\r\n\r\nUUID: 1544f5e0-613c-11d1-93df-00c04fd7bd09 Microsoft Exchange RFR Interface\r\nncacn_ip_tcp:NEW-EXHTCA01[15168]<\/pre>\n