Testing your VIP environment for the Migration of VIP Services Platform to Amazon Web Services

Products

• VIP Service

Issue/Introduction

 

Resolution

To test connectivity, complete these tests from each VIP Enterprise Gateway or VIP application server. Tests performed from non-VIP servers may yield inaccurate results. Click Configuration Requirements above for service domains, hostnames, and IP addresses for whitelisting.  

ENTERPRISE GATEWAY CONNECTIVITY TEST

Testing connectivity from the VIP Enterprise Gateway to the cloud using the VIP Diagnostics Tool.

FIREWALL TEST: IP-FILTERED FIREWALLS

Find the active DNS record for userservices-auth.vip.symantec.com with NSLOOKUP. Execute a telnet connection to the IP address on port 443 from the VIP Enterprise Gateway(s) and/or other application servers from where VIP traffic is served. This will test IP address connectivity through your firewall. (note: The Windows Telnet client displays a blank (black) screen upon successful connection)

$ nslookup userservices-auth.vip.symantec.com

Addresses: 18.208.22.36 18.208.22.37
Server: dns-am1.net.symantec.com
Address: 155.64.72.12
Non-authoritative answer:
Name: userservices-auth.cl.vip.symantec.com

$ telnet 18.208.22.36 443

Trying 18.208.22.36...
Connected to ec2-18-208-22-36.us-east-2.compute.amazonaws.com.
Escape character is '^]'.
Connection closed by foreign 

FIREWALL TEST: DOMAIN OR HOST-FILTERED FIREWALLS

The following URLs resolve to AWS. Execute these commands from the VIP Enterprise Gateway(s) and any servers where VIP traffic is being served to test URL connectivity through your domain/host-filtered firewall. The Windows Telnet client displays a blank (black) screen when a successful connection is made:

$telnet userservices-auth.vip.symantec.com 443   

Trying 18.208.22.32...
Connected to services-auth.cl.vip.symantec.com.
Escape character is '^]'.
Connection closed by foreign host.